{"report_id":"b8a6fddc-a9a7-479f-bb4b-c18a09e224b7","version":6,"status":"done","tags":[],"date":"2026-03-07T12:53:02Z","url":{"schema":"http","addr":"1063galabet.com","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"104.21.14.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1063galabet.com/tr/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"title":"Galabet Güvenilir Casino\u0026Bahis Sitesi","dom":{"size":3744,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (607)","md5":"8819a62c7e8fe7372ef69a8bc977179b","sha1":"a1bfd184c5ee257c4bcc2a0b0209a1743b967df4","sha256":"38e6f86663c8799cf4d59891271b699bac64922f36ee85624d441b131e2701cc","sha512":"2dcd6d7fe23be06e8a2f94e17cfa5a9d2862bb4d51ea1ead27fc79a35f8e73e22343bcabc35a36704775f1a4f2b6c466d4971cb317af91be9a133a5d3fc1523d","ssdeep":"","tlshash":"357182258ab20425435b50ac3ba7f32e723ad1073649e5487aad93405f49fa9c8b37de","dom_hash":"domhash9d04913952afd4564baa478ba5fdebdc","first_seen":"2026-03-07T12:53:24.87786Z","last_seen":"2026-03-07T12:53:24.87786Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1063galabet.com","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"104.21.14.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T12:53:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"dataspot-bucket.1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"dataspot-int-bucket.1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"dataspot-internal-wss.1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.segment.com","ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1998-07-06","domain_rank":9348,"first_seen":"2014-04-11T12:30:48Z","last_seen":"2026-03-04T16:29:31.495992Z","alert_count":0,"request_count":2,"received_data":111163,"sent_data":955,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-03-02T05:15:34.576678Z","alert_count":0,"request_count":1,"received_data":101741,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"1063galabet.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-07T12:53:13.35002Z","last_seen":"2026-03-07T12:53:13.35002Z","alert_count":255,"request_count":255,"received_data":8310362,"sent_data":132886,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-03-04T15:45:48.25184Z","alert_count":0,"request_count":2,"received_data":2114,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dataspot-bucket.1063galabet.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-07T12:53:13.348922Z","last_seen":"2026-03-07T12:53:13.348922Z","alert_count":2,"request_count":2,"received_data":102101,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"geoapi.btcoservice29.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-03-04T19:25:21.563379Z","last_seen":"2026-03-04T19:25:21.563379Z","alert_count":0,"request_count":2,"received_data":2301,"sent_data":934,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-03-02T09:42:02.154053Z","alert_count":0,"request_count":2,"received_data":7160,"sent_data":1224,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":2,"received_data":5296,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"events.eu1.segmentapis.com","ip":{"addr":"52.49.34.99","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2018-07-31","domain_rank":186340,"first_seen":"2021-08-11T00:43:45Z","last_seen":"2026-03-03T14:43:15.631815Z","alert_count":0,"request_count":1,"received_data":260,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dataspot-internal-wss.1063galabet.com","ip":{"addr":"104.21.14.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-07T12:53:13.340445Z","last_seen":"2026-03-07T12:53:13.340445Z","alert_count":1,"request_count":1,"received_data":844,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-03-05T02:24:34.64773Z","alert_count":0,"request_count":8,"received_data":455222,"sent_data":5058,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2026-02-04T12:39:13.107167Z","last_seen":"2026-03-04T19:25:22.439656Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1182,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":2,"received_data":123492,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"galabet.winwingames.io","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-01-16T16:03:38.346691Z","last_seen":"2026-03-04T19:25:23.891698Z","alert_count":0,"request_count":5,"received_data":58077,"sent_data":2345,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"crm-lib.fasttrack-solutions.com","ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-28","domain_rank":1905587,"first_seen":"2019-02-04T20:13:24Z","last_seen":"2026-03-04T04:18:16.396927Z","alert_count":0,"request_count":5,"received_data":2901202,"sent_data":2412,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-01T22:20:53.525798Z","alert_count":0,"request_count":4,"received_data":1761103,"sent_data":1825,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dataspot-int-bucket.1063galabet.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-07T12:53:13.349702Z","last_seen":"2026-03-07T12:53:13.349702Z","alert_count":2,"request_count":2,"received_data":250808,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"cms.betcoapps.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2015-08-04","domain_rank":0,"first_seen":"2026-01-10T10:58:26.801107Z","last_seen":"2026-02-04T14:34:41.396587Z","alert_count":0,"request_count":1,"received_data":131874,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-03-02T03:23:18.258902Z","alert_count":0,"request_count":1,"received_data":2603,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6341","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7e9032f296b2488bb4706ae2d9e39c9","sha1":"61a72f604aff6de74ac1d13750505c3b0f28a347","sha256":"dd4cac815a65e1f4ff1abc9b1e7484e30dcdb0b294fcbe4594c4257f0f674a58","sha512":"b286bed5ac5e4000ac640959f728a6baaa9dff63768eb481f25c3b058760e88ddbea46143039ca507196fe9fc409812ccba5e073cba0c9268d51adda2ff92787","ssdeep":"6144:d1kKfNl3H2vNQBaKI0SfZ8RGw/V0sApXx2ZAJJx:T/FxH2vnDfZ8t6","tlshash":"f4a41ace73d674225396f478503f018ba57b28a2b48cc89af189cce46e7469a4137f7d","size":457150,"data":"","first_seen":"2026-03-07T12:53:25.049388Z","last_seen":"2026-03-07T13:29:05.567683Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6341","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86c11890f614da48f83f0b376b7bd3dc","sha1":"a52e35eba7c9dcd311378269c57200073d99aaa4","sha256":"f6f44c99114865f8b6fece1512abcf84e6d64e912323bcfc1612308ce5ede201","sha512":"97ae778671f60408ade0737ac286de5256eab722bfeda3004ce892da83cb0c92393a01fb68823182abaad40301921fd3eebd614d83a25554adb3735586406063","ssdeep":"6144:d4kKfNl3H2vNQBaKI0SfZ8RGw/V0sApXx2ZAJJx:W/FxH2vnDfZ8t6","tlshash":"1ca41ace73d674225396f478503f018ba57b28a2b48cc89af189cce46e7469a4137f7d","size":457141,"data":"","first_seen":"2026-03-07T12:53:24.924138Z","last_seen":"2026-03-07T13:29:05.622607Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__config.js?v=1772887893703","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2d08e304d7d0afa41a1af070e82d1d6","sha1":"ead0ae279deea6bda18f6c42e8e46be62c5f03a7","sha256":"af0da6c8113972ed99d99ce61865207139a3a52386a130a78e77bc49a408fece","sha512":"b5109e8e66ff41ee7891803c5c52ff353b5e4820fc2eb7e1e67654b0519a84ca8c3cb94fbf7017b290c72a906a9aa8ec6835550d4ff4a44e92af7480e5fa6502","ssdeep":"","tlshash":"b1e02620ed640871132a642a551a2607396ec1df0b1dbe0632e1187def9567f8ef39ba","size":337,"data":"","first_seen":"2026-03-07T12:53:24.975281Z","last_seen":"2026-03-08T10:47:57.97438Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/userJWE-D3iU3A6O.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"21d8998ae0048a6a012a1efd49f5fd1f","sha1":"9848d9883674be333c2d486d3d6a317d317088b3","sha256":"07766c2396e7f89e5b95bb679f4819440f07243c4ae25d3e8df0c1f1e6c47d44","sha512":"fc91cec43e3fc7677bf58c2f24dba1305ebf5591e3ba9545289c0138471b31785e37c8dac7472ee23d8dbb3e8982ed59dddb4ac844c477e81617ef4302821ccc","ssdeep":"","tlshash":"6bc0c0eb0cd812f7c9583c401005ec2383303a1463e8d361db0893ea7a5104ff11caa0","size":193,"data":"","first_seen":"2026-03-07T12:53:24.989165Z","last_seen":"2026-03-08T10:47:57.914951Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FastTrackTracking-CVjGJF7f.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25be6c85570e77d961873fd301a9f6cb","sha1":"04887972929b19a8b441c2d5b2293b60f22b1181","sha256":"850f9f24d5a5ed407ad4ee4bf1739abef9bc67c393068a8bf9f182da3a6cd726","sha512":"82c6dc95fd087fb7621ddd394ea087cdf3ed11810f0636200dbb0e07bd9336ffa057ba27352a24cbf9ee1928ff87fbfff67f5abfa76586d7372ead2c043aa349","ssdeep":"","tlshash":"cc21234f40d593b47c804e8da3e7a261953e6975711ec4e1f0760bae3a0caa983dac97","size":1322,"data":"","first_seen":"2026-03-07T12:53:24.887807Z","last_seen":"2026-03-08T10:47:57.857036Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/events-C8SUJwrU.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ab24183712c6a3aed9f1a2dd2afd03ff","sha1":"b44e2073d47dfa71715fd205397cbda0f6f8979a","sha256":"dde30bd91722beb3a9bc828f4c64f3da6e275747a168f8d7edf5543f636dd925","sha512":"f8107020b86fd6c5c91c50b16914b5d2046e52951695d0b2ef2db87c411ef78cbc250186613bc97276af3b483d8271d9ce7e26f8c0825fc4aa6bfdf3805d63c9","ssdeep":"96:md9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:m3IM2sWMtBq6n3PzH","tlshash":"0fc144ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","size":6141,"data":"","first_seen":"2026-03-07T12:53:24.90698Z","last_seen":"2026-03-08T10:47:57.802002Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/DataspotTracking-B6EJqyf8.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dedb443041485b1b061d159168ec9ebe","sha1":"9fe8eef3f8e58887b487abf49c033f44681a5499","sha256":"7b731c0bb8d0983ea9e4fc8b93542b370aeeb365e3c45804f65e291153189ded","sha512":"62fd9b9728360a486f98632f35b9e63b7db2c299d6bc35a9e80a7ae8ec74455fb9de19564756eb6cadb745d58e4bf782e1d0701ee8d2f4f066b64bb2911e4c71","ssdeep":"192:v0wDqXQcaXE/ucCOi1Kb0cHHnBxCHenNvuvXvqvxuhqVeDt8VZuS:cAqXQcaXE/QAxCHen5Q/0gh8k8juS","tlshash":"8ff10555641e78bc6033c6ad0d5721a244387051e2329de076aacf5a9e3d9c28ff77cb","size":8166,"data":"","first_seen":"2026-03-07T12:53:24.934631Z","last_seen":"2026-03-08T10:47:57.952873Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/gameDataProcessing-3jH1lfSP.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"751f98aee2638fe523ea9bf82d79314d","sha1":"14793de6cf58d0d78ce077b282ed4685461c4d38","sha256":"36f80d4e25ce155867b8cbb20a64ce16da812804f45f38300f832ec1059baea8","sha512":"83fcc3795f5f05e4a276a5a48c94801890e4d991294eb2733501f20e186066d65ed78f5c155b2d48e550983f16c88bde9cc50ccceb77017287802eb2819dcc6a","ssdeep":"384:twphrrZxhxlVz12awqhvTXDsB4Pzenac0aw5K4A1nV:tCptXDe8QiAX1nV","tlshash":"ae72750b8a024c12c97e4639c0aa15f1b9781b32e8b8cdd51a655c7afb5fa5b31f173c","size":17258,"data":"","first_seen":"2026-03-07T12:53:25.035006Z","last_seen":"2026-03-08T10:47:57.918788Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-Cdis3cgd.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9238e84abc7795316ab493ed40aa930d","sha1":"8b283f05659a359fb49d4860170af630ec4df53f","sha256":"2bb262b81d1fd10d87dfd66c45896a9c629da9772f3c2ebfad5ab36be4801bbb","sha512":"692ca58b06ff7bc23f73388c631b16e099958f9738ad4730faf74d3db6a74b75f4bf10dc3d8d9fdf04853d025365b0f84a81117cd2dfe9e8ed7d990a788401ba","ssdeep":"","tlshash":"4f5130c76042e7f4afe748e6429e10b064374e5cfe1f44a082be58864998792e35bf8d","size":2923,"data":"","first_seen":"2026-03-07T12:53:24.926335Z","last_seen":"2026-03-08T10:47:57.855849Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/DepositCountTracking-BpZZdIph.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6967666ed02768afe5d53d1670eb3686","sha1":"5bdd6bc3fb9a5df98a85c1a98e990cedd0935970","sha256":"3f9e551e1eecdd4faa1c9c86aa96528b8307c501f922ef1f045ac2cc0113e80f","sha512":"0a3a32b172dc75a9e174f873551e248cbb6fa72e8edfd77830cec91e8ba14e59920a4984ea2cae05b7fe43fbf63ef45b6f6f837f2ce3a6452c4e53b1f0472555","ssdeep":"","tlshash":"4df0dd5768b8e6f989493a8072c7a8b363f1755cb91788c385b94d460248046e4d892b","size":645,"data":"","first_seen":"2026-03-07T12:53:24.888574Z","last_seen":"2026-03-08T10:47:57.831478Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/BetslipButton-CnDz10B1.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"699ca84c626a612deac359f1dbbef5bd","sha1":"4e16d50606f637de56693059d0ae0cd113c037d5","sha256":"cc4f024678c7fd9a2f4407de4edece80cfb1a0eb6fddfec5047e1bc12405715e","sha512":"286a02f623b4ca7487a0f971470a448055e5b29d725865ebfb0009469625b7d37abc2611af95f456d3203b3d2c2200e95312cba3520716eb70bbf15d1d0eb5f1","ssdeep":"","tlshash":"a7e0f147894cc2fe0b461e9111068112353756bca300e691c0b93c527a7458ac45f97f","size":418,"data":"","first_seen":"2026-03-07T12:53:24.965988Z","last_seen":"2026-03-08T10:47:57.825416Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/LiveChatInc-z0VjU2-r.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33b2b43c95add547547c7f95d8eba8db","sha1":"e4caf3e91256903ea03c7b7b3adfbaba0166b0d8","sha256":"604ab6b4a4b89ce90f5322988a108d8c6320aad934c22fcf2ddcd1062a44502d","sha512":"782aa71523502543ef24c75a225c8f8258f1b925c6a42e82e2fd714594aa75ed300132decbeac9e4b657821c62f81e1e21b9d05678cd3c3d730b4fe369765a02","ssdeep":"","tlshash":"3d5124dec43cb4b1929e67d1323f7b5f7116571a94048d31656c4b0af62e0cbc467aca","size":2920,"data":"","first_seen":"2026-03-07T12:53:25.013263Z","last_seen":"2026-03-08T10:47:57.811174Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/GoogleAnalyticsTracking-Qt671pNl.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f8c73430db55a5e8144127b652ad193","sha1":"b58d30071a19f2d422e63a548a7c9e16fe255452","sha256":"1fec33f26a30af7c6d5eae1edb93397be02b5cde9da713dfbcff820bb2f04e24","sha512":"a5fd195f31427cd76464e866ec439cd3fb790b4cbde21d0caef4ff5c2b2d4a07c45e2e9e1e61de84d20481138c3ad4480307871acc4c19a8d265ba11f9c1d0b7","ssdeep":"192:BWYceR0SE+m/CTb3bHXCT76hoxGE0VK7D6L7kBNrnPWh52Lz2PmFmBE:0YcoE/CzCIEP3Byy2PtBE","tlshash":"cc52b55c32adb0b682df6054487f720bf1755910a458f480a265edf46ef8caf02abf36","size":13704,"data":"","first_seen":"2026-03-07T12:53:24.898503Z","last_seen":"2026-03-08T10:47:57.812046Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.1063galabet.com/configs/928de3c284a560a4ec2990544700741b.js","fqdn":"dataspot-int-bucket.1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2a6c49770a52100388701459104032","sha1":"eb58c40e53a15e3b55fd60c07276e5479e07a89e","sha256":"161586af456353acc3ccfa1748aa3886066bf8f3c5614a5c4db0e4df676adb2b","sha512":"b601200e6ae6894ca67b3afc195d37fea9db1864900cb63b60428df3f106c70ea2e379566d43c326c3b7d439895f609866b2c4a54d77e7a2697f066c05db6a8a","ssdeep":"","tlshash":"aa51f31578e21e7300751435a55768c0b422bb47152ad88c3bce760c4f7db7995b5b8d","size":2471,"data":"","first_seen":"2025-12-24T22:39:16.396562Z","last_seen":"2026-04-26T13:53:22.552111Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/19330347/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-08-05T22:39:31.440318Z","times_seen":28115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/tr/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-07-06T22:32:47.104782Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/walletConnect-CiycSUBb.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","size":1998,"data":"","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/bookingBet-SQC_5csA.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f00290d73eb89859b6e72a9f542488bd","sha1":"b50c356c5b08037de0f39beb77c955bc078f1cf8","sha256":"6eeb087a45791ceb96afb8bc63c417b760a57667a96ceffabdb2a74068a84853","sha512":"2590990857adc7d1fb92021d6933ce7e21ad96242d487c9947ece4f3b06ae3e8cd430643048fb0a21e28043a6b30966ad73fa44933d982c6b8ec805295a38ecc","ssdeep":"","tlshash":"1e71e664fd70907e67f2317df4de7b426b2c4ba871a19a40fb6b5d0841848cbb534638","size":3796,"data":"","first_seen":"2026-03-07T12:53:24.930256Z","last_seen":"2026-03-08T10:47:57.810253Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/HorizontalSportsList-Ca0fFWfC.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0c239f2023e85f6910b6bbda9cebd050","sha1":"e0ddeb8ebe0b663edaadca927e0ff8c50926a32c","sha256":"91c13028b754fd9b450efa191ad27bac18238c337993c6c6508316d65957f4ee","sha512":"bec44e03d25d9c07250c6754c97bb508a438f5e0fea0cd3036840b78871df9335e000f806ee7d36761e9909b19bc77f89b835ef70f76c566330fd4e70f778352","ssdeep":"","tlshash":"97e02b8298658ef55a1a84efb95c24846122057cef5766b4d294a2182b7408bf66904d","size":422,"data":"","first_seen":"2026-03-07T12:53:24.954868Z","last_seen":"2026-03-08T10:47:57.836709Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dddb1b860c6944f6890f35993aa01688","sha1":"0b0ca26496daa445135db553c3384bf729965726","sha256":"535e6aa807d6385ddc256328970920f6839702d5cd9b29f22506c44cdc2fd135","sha512":"d81aff11e18b3d243f6d2e01cc5e6534c52c26080ec5302386c39d6c534d3b769a03374b70d7b7f760d30348ff2fb8f76dddc5013afd27c2dc72836a9447cad7","ssdeep":"6144:vMOkKfNl3H2vNQBaKI0SfZ8RGw/V0sApXx2ZAJJx:vj/FxH2vnDfZ8t6","tlshash":"58a41bce73d674225396f478503f018ba57b28a2b48cc89af189cce46e7469a4137f7d","size":457219,"data":"","first_seen":"2026-03-07T12:53:24.946207Z","last_seen":"2026-03-07T13:29:05.590704Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__inject.js?v=1772887893703","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dff9b409bebf67ab22aa6dbaf5559e2e","sha1":"320e9bccd7c8e47a29b815aec4cbc4ef7a939322","sha256":"949c814d46e7988972e60f8e4fa58c018b1d146b4c0b13c6d4934c3661e8337a","sha512":"ae6e449bccfde272c4a1656d426a85e5429612f740766b0c1978fe6950f8878d4d8b7135e11b0d468f55e5982187cc68a40942639a5e6b7fd8ee196b55db0478","ssdeep":"1536:oQEg8R/FBFuFMFPlO9jAivmGvpgrGXWmCVA:oKDgK","tlshash":"1a63a7487ef262b2577ba2ae2787b14075324003100aee517fec47246fc6e6d8576bde","size":70667,"data":"","first_seen":"2026-03-07T12:53:24.976048Z","last_seen":"2026-03-07T13:29:05.568217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/WagmiConf-CYI_Wcna.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12e9f6c8eab5495f4fdef334ceb8ac76","sha1":"0f799175bc220bbe5de89b206233bdd35fbe9887","sha256":"4e87b09b3b041180aa53e26884c310f54b1931710c55ced3bb99539e7f136c8e","sha512":"8bb4a262572fdec8ba5cd8324c5e12bd9e30b57431664b11a18ed95c1e29b2359539e027f156ed0cd774433b5a6df1dcec8b0a0c395ae2d9306bbfdfcfbd82ce","ssdeep":"1536:Z/k2Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPy:Z/FCaSlx5xG7NU+WEy1bPWv1K/XGd","tlshash":"eca34ad07196b46103a74ae008bf440bf239ac34200e565cf269ecde79b96e99277f7d","size":100978,"data":"","first_seen":"2026-03-07T12:53:24.988423Z","last_seen":"2026-03-08T10:47:57.894083Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Firebase-LOBUVNlV.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"443e91c67ad735f928379cc08bda9578","sha1":"1b20657f0b5e628b21cdfbaf6e90cf08954afca0","sha256":"e82962a35705700ac304dcdbf2eb78f83a4fabe1accf8e9990fdb77353a8ad00","sha512":"f39483a7c5d70704e68bf7ade4dff52606d78b4ccdec7cb7986676ea61a4150eb44de8165575cb440488a4ba17c9ce9193f83b85da8f84cc2c3470351630e17d","ssdeep":"1536:N4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:Ns1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"8283957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","size":84095,"data":"","first_seen":"2026-03-07T12:53:24.984119Z","last_seen":"2026-03-08T10:47:57.875839Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/getLiveGameAdditionalInfo-DO084QGJ.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b97ef20125e23659fd2a41b98b103422","sha1":"bd3a958e70a38988de85d988958cafab64bfa2ff","sha256":"28d415da832f44721f25a4f072f1019e29eac55f146aae6e01204489cce5411e","sha512":"f620902465e72e27bccf7e40caf74a890265429a3bbfc872472fa13b3c14c05b2c356310ab550760641135c51c8aba4d015ef412cdc62171542c4c1b43352c5b","ssdeep":"","tlshash":"6e2114b3606e93bfe9c94d9456b01b31a2b5ba09390445ccbb3cc91928774c4a7e2039","size":1150,"data":"","first_seen":"2026-03-07T12:53:24.918735Z","last_seen":"2026-03-08T10:47:57.809207Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/tr-Vrn7Qn4-.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ede1a2404e15572246d22e9d02047c9b","sha1":"0d7fef1f333ffa24ae1e8ec6e99d394cdaa3c92a","sha256":"0f2cf05a3919a7a59779bbdeddfb7e49038aa3e50857bf3c61da436dac5eb74d","sha512":"5e30f339fe587d6f599040074be1bf998ad003804d2ab2cc25ff52caebced9cf263d9e96bfe5ac95b1da52da36d7f47f348ac4c31f8507dfbd100a5968f9e7f8","ssdeep":"","tlshash":"fc31a44d2906ebb2cb016987882f1f04f41d2b087136f1709be0d421bab09ed807eb3d","size":1459,"data":"","first_seen":"2026-03-07T12:53:24.929327Z","last_seen":"2026-03-08T10:47:57.829372Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FavoriteGamesButton-CS4ivfe7.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b18de2a8012450899ea82415a9c98312","sha1":"3c2c6a166b4f46b7ae67a50ab57910a11bf6dbf0","sha256":"8b7fda528bb825243799804bbc8af252a165433bba921b794fbddc88ceafbc71","sha512":"35d9d81e4e8f0f68205fa4f98395776275f2008a81f8eccf8fa6bb5435d98087e7ec421b7d0b708ac4fb68b102e8b6f7f0c8191806bb6bbc14c2493ff35e9d45","ssdeep":"","tlshash":"fce0ab0bd099e2fa2f422ba01517c438253aa5bce75ce590809a1454397049bc55e9af","size":427,"data":"","first_seen":"2026-03-07T12:53:24.912858Z","last_seen":"2026-03-08T10:47:57.960491Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/useOpenLiveChat-Cp-xaDm0.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"631e9fcd4e2dcdceb49ba823a1722129","sha1":"cdfab6f56db3c30c947d645a62cc6fef44dea0e0","sha256":"166b01b63ea032024f36cd7eee554695da5e7233c27cbe9d5086d74ea1a0de1d","sha512":"face4c44e39c2b7d54c8bb4278bb70c2b4dd772bd5ce7f11a4ca96afcc5e7133c69a60aabcb0a7c45d650b82302562e78dc152e79780db97acf4d82c2c1d878c","ssdeep":"","tlshash":"85f0e19f46944e7cc1c0cfc1516be5f85b3c2ab4310cd851e93b2c88682484457bede7","size":583,"data":"","first_seen":"2026-03-07T12:53:24.980937Z","last_seen":"2026-03-08T10:47:57.742573Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/jackpot-jNbP6Duk.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","size":376,"data":"","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-08-02T18:55:38.523246Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoJackpotPools-BXs6MXi2.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f12a0580971844daf2ac3fae8e443fef","sha1":"b301e58dff9e9f50a24e2951ba51b83c199cd608","sha256":"630ea3cc26b5ea4673de3e6a6d37a6878142d9df88841cd4b5ece25693033b28","sha512":"f14855efd2fe96fd76d583b40d7898ae1fd57933dd42e59ddef42813a60f773e248cbd435655e9853f2dff522342740645e2c749ac8de146d6a4497873d65677","ssdeep":"","tlshash":"e5110087b02af3f4d88c18e14075555b073e2f79f75181d098ac1628662584af5a97c2","size":881,"data":"","first_seen":"2026-03-07T12:53:24.990061Z","last_seen":"2026-03-08T10:47:57.76487Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","size":75107,"data":"","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/tr/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab5194607d8db08f9abe85264322389","sha1":"105aa6a7c0d330d097cc7c9f6989d8223f23adf1","sha256":"3728c769109ca09c38155c787c6e13da31835fc34bfc842f7415f3d3eca691c2","sha512":"c48df33aa42a930e98ce83dcaf1dc59293d777ed22f746eb7ea8e299fe1622aec1f07ee914f18decfd1b998bcb691f84f58a5219a5e5ec1c230f9db6a331de8d","ssdeep":"","tlshash":"6ae0a31d1c1eb46227b419a8e237895530d5130529462655cb87d4543971cc554c6a4c","size":423,"data":"","first_seen":"2025-12-24T22:39:16.410899Z","last_seen":"2026-05-22T17:22:58.329852Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/GameSuggestedEventsWidget-BvWdgff4.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0084ead83a990414b72053dcf3c8ea9e","sha1":"85320f08831bee0b6dfe2b8284aa7332eab481b1","sha256":"c5c5a68288b7f382488ed970cd10aed614901f9e02a09ade338c72d9ca640251","sha512":"fae7a371ccb0e6f0613fb5eb1c66f8ea054fd262f118a57a68c234354b236d08135f9355bd7adf9557fbd22e48e3f23250eef68ca427509f256d53a818e72396","ssdeep":"","tlshash":"4b71d74ae010aa39a17745d82bef3119143632b8b94353c1b73fca7123e51926b5bbdf","size":3726,"data":"","first_seen":"2026-03-07T12:53:24.99399Z","last_seen":"2026-03-08T10:47:57.924482Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=1063galabet.com\u0026t=1772887953875","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eb3dbcb20204fc695d9f72ddfd39cf6","sha1":"3012a2ac5489d478f815f6bf3f5112a004327ee0","sha256":"2bbe3734fdf2413436718cb26d98f239e8d81aa4a794164df2b28558ca7e8af9","sha512":"bcce9a1f83b5f06a45416014d117dcd004c154be0453fcc46b278cda6519a7500e520a0e944d8d80b80f42d0a3700157edab3e0df0709642ec7f4b404238ff44","ssdeep":"","tlshash":"d35195c93ed0849d272b4ae33f3b7549e27798cf6b80c40b682c68b96524924ef09635","size":2999,"data":"","first_seen":"2026-03-07T12:53:25.009855Z","last_seen":"2026-03-07T12:53:25.009855Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoGame-BkwemMy5.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c64316e813c93bf4567843c97af4f5a0","sha1":"cfda8418b54ed409fdd3ae3f871e3ba2e434c1d8","sha256":"ea3bdaea5eab58a52470b1c12e5b864dad6a2f2811ed9b29a3c66cd3b656765f","sha512":"652654b688376396e05a4b9eb87806572822962257cd7bde8f3523fcd62959a112e2f5fc40a740b9d4892f8751348a06d655252d6b0dc9cf8cc5842e3acc410d","ssdeep":"96:jpX6LDqh2iJMeVZhH+noczxF+zZZ9LNbUMM+xA5Z9gvWwBV6aV+6bK:FX6/qhCexetGFhbUMFxABbaV+6bK","tlshash":"0ec1a545e024ebbeb83a08d9982f102574192fe5de1980b5f4bda839313c15db527bdf","size":5870,"data":"","first_seen":"2026-03-07T12:53:24.960495Z","last_seen":"2026-03-08T10:47:57.858102Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c39605c625ffc542c0c6e2fae76206ae","sha1":"693066e92cb2dd6b9c6984c7241bb7a6f94d2ee8","sha256":"d4066a3c3a481dc90ea4b2280075e6fe6a88a7457dbe235d6765ce2f71379d98","sha512":"f7e5cc7bb016ebcdb05a1fc5be83f17a1196138b1534ee862c91b61f45fea03027a0268c5490e34b856f509b4afc20d217d20670151043ef2a0d91b4a155753d","ssdeep":"1536:E5hboeri/BevgjTcAhWeypynDx4Wwwpw84Io6eFlIUYog8:Evboeu/kYHyp0DPheF4ox","tlshash":"51a34ada7282b03453f786e7a17fa216b3392818340d8420f17cdd6a395a9c79177f6e","size":100997,"data":"","first_seen":"2026-03-06T10:57:00.109634Z","last_seen":"2026-03-10T07:35:49.483109Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/AppSettingsButton-BcUSR4_y.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df503e003a5565630ff82f4f0c7b7fb5","sha1":"95ec7aafd3f930419ad2d99c57eef095041c7f24","sha256":"9750fc9a50955bc972c9fe4bc2e1d43a5d0e1bb02ec2daf028098761a12356be","sha512":"aaab376c6859b010897ab9cd9e13bfb33a6e82f0e6292818a4984a7484d44f88b157cf3c2096d45da7663796156b22493b25d9f4709f99dc8733dbd5c4ece6b2","ssdeep":"","tlshash":"b1e0688b5186d2fa0b962ad1c11b8201262a6d78c348da0180b8605176b01c6919e6af","size":385,"data":"","first_seen":"2026-03-07T12:53:24.893726Z","last_seen":"2026-03-08T10:47:57.837149Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/69a57608065c5f1c350d5dba/1jin5a54n","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"301043838fb248dcaa19a9d4b52081f9","sha1":"69c243ff968e15ac81108b302c260fc1cda5e0bd","sha256":"62aafa7a133c320d51a2fe8886b9f85beece7a6d50f4d3fac8b0fba09a18d1f9","sha512":"4d7715e3538a8b541700fa1686baf572a5f9e45c08c4d2e00db5616d2f4c58f6609f7f085714334f16b98724cc0924d5e6e4dfc4b83e5f10bcd15d18608491cf","ssdeep":"","tlshash":"c941dbea6b4f1c56b22410d90dbef90ef47720f749da5892870c085276657ad2f8de38","size":2123,"data":"","first_seen":"2026-03-03T12:28:33.689726Z","last_seen":"2026-03-08T10:47:57.787423Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/SystemBetCalculatorContainer-BWQpeoKA.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c166042c2f141b16df97185fbedd549","sha1":"e0e4bd798155a73eb59edaa5ac770c9813df108d","sha256":"3bf698b29d114d002fc444a33e574df5faae6c1076054ebec079689870ebb58e","sha512":"1848f27dfea8259aa73698f5537dc9abc1f96883f535bc46081f3a3e7f4f79fd568d15569fc591ea15647c2763590850e44e5a461fb56dab6c773df5a09b99b3","ssdeep":"","tlshash":"f6118ca75369cf74c88e0fa20956646409b107186a18e678f6b64c3ce0145d683faffb","size":888,"data":"","first_seen":"2026-03-07T12:53:24.908226Z","last_seen":"2026-03-08T10:47:57.745295Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/JackpotPoolsWidgetContainer-DdYWMwEX.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0868e370e1a6b6e7b70910645251898","sha1":"954b4f359bd87263957b11e6438433cb62c5b235","sha256":"dc5f61250433a3a495fb32a49bb4ec04208f2dcae87728dc7441b4decb5c0f5b","sha512":"821a5719136cd8f6802647124c328e0b629a807a59f3a4b7553390aee3a76cc83568ddc3c74e90673215617cb96b2b9858d1e13f227800c8c6af8f6884176f0e","ssdeep":"","tlshash":"45818617e01ab3fcec9c14a2503f910e377e0bbdd75605e8d0ad05240abc84af259bda","size":4057,"data":"","first_seen":"2026-03-07T12:53:25.002194Z","last_seen":"2026-03-08T10:47:57.80378Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/UnavailableMarketEvent-DwcMz1ce.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f1decbb002a5500e1881cde9897f3c61","sha1":"8ac600ab4ae50a88e6b9797b2f95661ec7ef1f6a","sha256":"2dbc3db80d158b8c6bda40ba723665db2c03a7c5f7f421d7978451127aa3d929","sha512":"42c2d402f7d62237c28a79829c122ab7f3cf6e2586836c10384c6f2724356a3167b2ff6556c7c65c31284bb1ab28be5ca652e559e24b1cbb7416ed7e0fe76fdd","ssdeep":"","tlshash":"f1e0cd1a6144bffad5251cccce394b5d511307a5c7e945d3d1a910281b34266351aaeb","size":308,"data":"","first_seen":"2026-03-07T12:53:24.900256Z","last_seen":"2026-03-08T10:47:57.789944Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","size":6791,"data":"","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","size":108916,"data":"","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-05-22T17:22:58.310306Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/firebase-messaging-sw.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b92a7d10cb0970ced5798c2eb1b8ac","sha1":"819f60615624f025d1256efc408d8e576a909c7b","sha256":"a87215bfd90d96fb55335ce2b2411f38074588149c9e896505cb10b250e17e1e","sha512":"75c55da9e8afbd96b6219292c91fb88e01c15d20bafc974028763227220aa042f4b761895d44b0394baae53c225e9b0c109d2eca333aad6b382951a60448e8fe","ssdeep":"","tlshash":"5121cb124be2f8231e4104c7679f32186e290d2507b0f1de61bf56b86b0a57b206bbc5","size":1125,"data":"","first_seen":"2025-12-24T22:39:16.149326Z","last_seen":"2026-06-17T13:25:54.195615Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-CMdBczWY.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2a1eb82b37c24ad125a732175b2b9b91","sha1":"814ad18f3888f3a80a7796352fae4dfd0370deb4","sha256":"4fe2eaa5b1e32d7f41dae25e31be6f1fade008f97509ee5765e06b536b9ce72b","sha512":"0925cd7c81d483ad8e16238edd68c752f4e107050a86a78ec5a8ad23dedbcf0f0c687132cb989882f4a4451429ef482dd25e32120c8b3f21ac11c5c8ebab1d8c","ssdeep":"384:0Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJH:0Mci408FFnJrIjE3D/OY2E0xqpc1NKki","tlshash":"6b8209d0e2b4f7a642e86add80392074f2258c28343dd0f1b6b6adda70664ca956dd37","size":18027,"data":"","first_seen":"2026-03-07T12:53:24.955699Z","last_seen":"2026-03-08T10:47:57.805428Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/if-defined-CWaLTnLW.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","size":53241,"data":"","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/useJackpot-C--XCS77.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7e34169a343002f524fef5ba037f6174","sha1":"449aeb563b3b657ac9b131efe3aea34c9452aece","sha256":"5ee01792423ee717bc22134ebe64399dd78c66226722b76e89b2eb47b34945b3","sha512":"63d603a080b6b3825264b3fe027ca060690cdd0d9e3a5bcc4c1517a22c61f7f7571cfb811efa6ab3cc02b9888fdd4fed43403dba78d5370a63e284c6a1aa78fa","ssdeep":"","tlshash":"76211045c059e5f8f88d8cb10077973a273c3f3a7440a0a0a0fa5ebd57a8d45b6a0f92","size":1413,"data":"","first_seen":"2026-03-07T12:53:24.889351Z","last_seen":"2026-03-08T10:47:57.872629Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.1063galabet.com/core.js","fqdn":"dataspot-bucket.1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0aaec2aa2a2043eac13f5387591d00c9","sha1":"18c5fc487a76bf1655f16a7f2d33ae15f9defe20","sha256":"755c2edb565ccde0411e59ce6a22d781ceb1efb270f0066ce986526316716fd8","sha512":"ae5bea1a9e51e5a99b4696fbae4d2c1c57e7b8c605cb70b116123558c816fab75c55353fa37ce93761dd7e41bd286fa56e5b74c67b5427c7f15fcc68ffbaea74","ssdeep":"1536:GupZPEs9W0ACcNBvMGgMtnf0Cp91V8kXXz2a07REWvT:9Pk0Af3n5p9X8kia07RpT","tlshash":"daa35cc672a160f083939bc1d4750253e32c68653901859cf77ceeea6f29dc6b166fb8","size":99539,"data":"","first_seen":"2026-03-07T01:21:42.591745Z","last_seen":"2026-03-08T10:47:57.82615Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-f8Qpuhu4.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81ba896b9235fa264f6f50e50b5b1ae6","sha1":"fbad8b67fe88ec48f8b91a1119abf37ebcf4fca5","sha256":"fbf705b4ea31bf4aeb570b872a2d401a8e7fc2125e12684d42cfe578197a687d","sha512":"7accaa02d05052dbefd2076c65e2688da4583ad1254d584d51b8e0a4c7a047728772da9d18b541367e8032bc515795cbf70b2f7f76b738ed919440ed3dce1295","ssdeep":"24576:SNvQ/muVGZ8px8knDkLmdPpyP2e1fPOrj3Z/sb/SoY+LpXfbV:qvQ/muVGZ878knDkLmdPpyP2e1fPAj3w","tlshash":"04357d85b059b8b997b709e5606f1106b1381e00f40dc4a0f57cedad29bd849a2b7ffe","size":1127881,"data":"","first_seen":"2026-03-07T12:53:25.053879Z","last_seen":"2026-03-08T10:47:58.022174Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FacebookTracking-CYRgXF9D.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3fb8e493edffad88f01df2d9e20cbd5","sha1":"c36cd3c8f180c068efc62eea0e1bf95b1f9d73cc","sha256":"37605bf81860243707f0318e1c3590747374e124b2e85863b3287e97f669779d","sha512":"141ff14e6149e2b34568571daeabf7fcdd24bb10f61dfa7d9eafc7f10aaac7b78c3fde1f68312eea695ca39ea33a940dc5bd1d671ebb7b0faecc94d3800daf2a","ssdeep":"","tlshash":"7001230f2c45b47d1a7c18f8d3bfd81426ba590e268f45a5c6d3cdb9366458a40cdbcd","size":680,"data":"","first_seen":"2026-03-07T12:53:25.012466Z","last_seen":"2026-03-08T10:47:57.852829Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index.es-f3BQBIkH.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8dc85f55dc861c8145b714da7598e8d","sha1":"e58382ed310494b578fd96e3bd1e27427559b529","sha256":"f3f731ad270ea1821548e2d83e42281ed87f1a86bf4601f950b91f8213da3ebc","sha512":"92fd95a77ac7cce56a1b16838e4bc720f567fd0aad85289b9d6a35400c188724072de75bb7bf7be0b8cc5d660ad9017fbb5c774c1f85acea1479156fd58fdc54","ssdeep":"3072:pSzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6UVh:Qz77jdU/7sJJMcvYisoljSFN1Nd6UVh","tlshash":"d154fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","size":295236,"data":"","first_seen":"2026-03-07T12:53:25.000647Z","last_seen":"2026-03-08T10:47:57.818486Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/HorizontalNavigationListItem-BVePVD40.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a7be236c08f8b027c5de7a2d754e0fea","sha1":"b13b3b28dd0b9880650b448eb7e8e84abaeee298","sha256":"902423fd0ee6bef69ea2bda1e4f85c5c59dad8812721a29f90b85412457a9045","sha512":"9186e95eca9d6659b26f479188605d9ad9baab2c8894256ad41df33ed257584996c9794ea075a2dbbf8d2ab8d43362563127dba63496648b454c134b5ea8010d","ssdeep":"","tlshash":"1801c002e014db7c9a2b55c86b9d1089b1479afedf382cf1a0f4b11209344593646ece","size":728,"data":"","first_seen":"2026-03-07T12:53:24.931276Z","last_seen":"2026-03-08T10:47:57.766427Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FeaturedGames-nbD3TQZs.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"772b73cca2de055c52a2ca21018b5866","sha1":"0b0f149dbed131fb6c2746bfdf208b93852307fd","sha256":"e550f19f47bd53561d4066f947cc59c8bc95761d79a32663fbd0650c000d56ca","sha512":"d511bce50840ed7ff8276bc89d4ecd2cb2547c8275e5ac745008737672270d4f73c1925f19c43f0224c1eba7a4fd9b82986c7ac080e82c7199911dc487f62377","ssdeep":"192:3PtPtX3fNHnEUDuncyxvQoehC6axm7UwL4Bflg+GffGR:/7VHnWnRxvQHhamN+KG","tlshash":"bdf1fa0ae014babde57b45e7b53f6108f57a06d0e7280890d0be5e1919e5346733ef8b","size":7902,"data":"","first_seen":"2026-03-07T12:53:24.990937Z","last_seen":"2026-03-08T10:47:57.822146Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Odometer-Do8Tj8YW.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cf2762e194a6b319e7396b3c666e20a9","sha1":"6ac2b9a9a2d1c1a616e7e110694d41c4e8ad3927","sha256":"19016b907c7c612259db60ee4bf63ce27ad79cafd04f2226aa4ffa9cf8e9a174","sha512":"c7a6c25ec14a3a579a309ff7c2f1962440d294b2919fc51b81a8686bf45e6cbdefb3e0621966316b46f18089f637b7e38d05190ccc11c2ca8f55baf0fd16bf71","ssdeep":"192:+Rd7KNJtQae0S09YJFF2UXxx3HjmHHUkauLPHMBNeSYpkYDBlC7TlzUgrPND:+2VQae099YJT3DmHH1PrFtDbGxrPx","tlshash":"b662098a7a6272344393b1a015bb0609773f9d6a3808405db27cadda7e32c09d12bff5","size":15567,"data":"","first_seen":"2026-03-07T12:53:24.8952Z","last_seen":"2026-03-07T13:29:05.577256Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoJackpot-DPd3ISvk.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4cbdb6735220d7dedb6dfafcbf36790b","sha1":"bbd720245d5086f5b20fdec14dd7409b1ffe4ee3","sha256":"d13ec45d48c55e720d945b72ea71d492173d45c2afe59178b7f60fb16c464049","sha512":"f4f5ce6be72d54d2387f3ad84b99544425472ffe68cdf7adfb361f6344504526ba18cb8e932d6343301365f9d292d05d32e3ecea609b28cdd232594af91b3de8","ssdeep":"384:7m6srKqqF3EjFOFEGOpOpeHMtGRxeG/Pcy7x299pP8FJgr:7mB7CEGOpyts/U3Qgr","tlshash":"b0524c05f016b7fdbca954f7887ee0297a5e1aa9c71808b8d1bd6c313c2c855760b7ac","size":14339,"data":"","first_seen":"2026-03-07T12:53:24.90355Z","last_seen":"2026-03-08T10:47:57.743669Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-BN9WG7Oh.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"79d6c752f856dfb9a97fa7be95d12541","sha1":"2bcde7f4a44235d0a7b729b4ea201b7ab282b090","sha256":"5087a6551a97584bc523a4155721927042fcb4891268263dd48ec8f5cda1c155","sha512":"af3d09f43981490562c9eabead1bdddfb9924ea872f5fafd1b7105b47c18c9d9efdf85d8403d3e43670b873d6b10c032854f7949712a5600e6422c7569607559","ssdeep":"6144:QfeL9y0h4R78o8e4YCIALoh6wj9Sd51jjVvFajIRcDGRD6On:QmJy0h4R78o8e4Yb/j9e5xajIFROQ","tlshash":"6b240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","size":221144,"data":"","first_seen":"2026-03-07T12:53:24.896966Z","last_seen":"2026-03-08T10:47:57.801092Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-CHoKJwGn.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e202258c2ee48070d0d88dbf9403bbf6","sha1":"63927d10d098e93a002f968e24b9601ad393b639","sha256":"beedf1ed2e271da702310f2de309be950cc873ce2fc6bb70010a9fa7a91821e4","sha512":"15a716eb9b0938d355822aeb6d1bd37f7b2e4d75b9eb42bb0ce7dd86e418c6f4c834f1ef9f126b80bb22ba2aaa124f57a95468ae55014e92381a30ea4e20ab78","ssdeep":"96:e1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:l+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"50c1a65631907530c6d204a6914f42aeef3e6638f00f50a0b23f9c6d3ba1525daa3ebd","size":5948,"data":"","first_seen":"2026-03-07T12:53:24.89776Z","last_seen":"2026-03-08T10:47:57.834918Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/DisabledMarketEvent-ll7hHjmc.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7f4336781f33fb8717916fe5f5b36a2d","sha1":"11b94376384067f6126539ac867cab5a3f3b1a8f","sha256":"a5a74f232e9f39fd8bc47cec59844d3b6bf0b5476b8ab55746229697935e5f1a","sha512":"ef888e73747a57e46c1a6ec0a73db51e541ca5ade191fe99259f63cabd0c3ea59d1508e67e1fa474ac171a5e262269cbd8f8f7604bbb7090b2fda2e828a38528","ssdeep":"","tlshash":"a951736db290fa7d593500ccc23b1f1f641913e2c6590992d0be8c29151c0dd32aefd9","size":2717,"data":"","first_seen":"2026-03-07T12:53:24.880739Z","last_seen":"2026-03-08T10:47:57.92538Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FavoriteGamesContent-CbirymKU.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34f7c75a43ab01f789245fd57ee6a43d","sha1":"b132e17253d6a63d2b8066232fc34e927dc84167","sha256":"4abaf502a72987e4cdf37c4778c2cd5cdd11f95047ecb7ecfd3373d275a7ca88","sha512":"c83eff030e6c29fbad041029ab0507f13ee8a66d179801b0a16e4e25b1b8afc2e531da332e8b1a62670071ceaac0441597a7c3e5d97f45b1883eaa5961f0d383","ssdeep":"","tlshash":"1b51a51140015ff8af8eadea5e27c060197a438c5285c17ea8794e3e3428685713bffa","size":2785,"data":"","first_seen":"2026-03-07T12:53:24.881757Z","last_seen":"2026-03-08T10:47:57.763731Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=ff83b5d6-c81b-46ff-a19f-41e5f7ea1cdf\u0026version=238.0.2.32.102.113.2.3.2.219.2.9.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4791aa91186ee5a3f9b349e118da2cd","sha1":"576d72de55bd436f91cf137589c66bdd1691da1f","sha256":"cafe7a3bfb032e3b2af03ceef1aec68601d89b67e3b483a87d66ee2a740028f7","sha512":"040e211e1d3b12c23d22e5742b5d962322e8184ffb5387bdf2ca9c38db202489ff6dc4b875591a9dffefb3c55e01f9e991eb2c1c89933348044c0a1acf9eab22","ssdeep":"96:80hUsXhUA4hUwhUcaDl3acJlt017gWrZSN+/9YXtJ/xN7QcGIIKTe3+/vCaq:FGsXGA4GwGJD0gSZTqQ1Ih6iKn","tlshash":"32c17526835fc8bb7377925a62cbb70f3108517da5f8593fe464ca7072861c7d202e9a","size":6116,"data":"","first_seen":"2026-03-07T12:53:24.938281Z","last_seen":"2026-03-08T10:47:57.919715Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f50af85caaa6f108e1f53109cd45eefa","sha1":"5dfc78a9770beebce5a84d3e8961d152da409c2c","sha256":"ebe99ca87a9de8d39f31fae869473504de9f2ae531a30c28b89ad1bfacca0792","sha512":"c2b955bf69b16aa44fed56eb72c130b9e6b654b42f233a2718c498eb0d3b8c19e3f7b7de6ae275b1b562860bf474ebcebf3e64be9914a4a6543c2f02b7e7f0fb","ssdeep":"6144:MH5JkKfRl52vN5BaKI0D8RGI/V0sApXxMJZ/G:MHr/JP2vMU89O","tlshash":"f3842acdb7d6b46243a3a474403f014fb27a28a2b84cd894f186dcd42e746aa5177f7e","size":386786,"data":"","first_seen":"2026-03-07T12:53:25.043875Z","last_seen":"2026-03-07T13:29:05.705766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","size":697,"data":"","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-05-22T17:22:58.055376Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1aed725984dc3d873e1bfcf29ccee7ca","sha1":"611a4d48fa161963197c83fa9608080597c5041a","sha256":"a8428ce8171c6ed2024973cc8afce6ffbd6acec626c3043c749081e0c72fd6d3","sha512":"aaf24ef6892a5775aa0268a12397eef305342e33c8d9c5d9c3f92dad17509b150fdc0e5cadad5d4f4a5d21c6ff28a0b524a4df99e0d79ee7635cfc50aeef6937","ssdeep":"","tlshash":"e1613f8ea5a2a173539b70b59f8fb104b02bd55b500ed512bad80b50bfc125e9332aec","size":3409,"data":"","first_seen":"2026-03-07T12:53:25.054789Z","last_seen":"2026-03-08T10:47:58.026889Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d894772cc8ebc08c554e305272fb743","sha1":"9630696cfb8fb02d834b6c2d590ebecc9e4c1971","sha256":"8822f04d16fcc6ebe390ead32df5d08238c7c383f466f401ebd9d235d32f434f","sha512":"20c22c322a8e6d0cee22113e4bdef0fd06e8b21ab65665bf648a3dcbe3857fad121cce2043bc46551247f2f88af76efcbc8f3ba5053a820439d0383342fa0728","ssdeep":"","tlshash":"5e511f3506b31521036b206c3babe316b23ad2433548f5457e9d93015f45f79d9b2bde","size":2492,"data":"","first_seen":"2026-02-24T14:23:51.4869Z","last_seen":"2026-06-03T04:20:32.028973Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/StatisticsOnHoverContainer-cEN1eZpZ.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35d961cf867871258aea8b4678d61d7f","sha1":"3311f0fa225e33e99831494d27162ae0e6849af4","sha256":"7fbd4461b0b664d2845450f127da26a3f6db0da30fcca0c9d5721e1c339d6e8f","sha512":"3027a00161b14ab95729b82224112eb344c5d532ac63060c074853d7bbca5ec279bd3af0da01c81ba07f7c647d4c5b5759fbad502a7397cb94c9afa4122af92e","ssdeep":"192:/Rn2zkXAsarXDxLwxGEE0D9AOgzmahj/e0R:ZBParTxLwxGEphAdzmij2q","tlshash":"ae12636c118e5f69f41a8240b4202e35bb3a3977958d66f9bebc450fd3ce444bb9cb18","size":9780,"data":"","first_seen":"2026-03-07T12:53:25.041453Z","last_seen":"2026-03-08T10:47:57.963721Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","size":19498,"data":"","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-07-01T19:33:43.411538Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/SmartMarketEvent-D3bjm-1x.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d37f428b0dc20b678a550613982a39af","sha1":"2394968de5d01fc3d55aa5eff9974ff52ac94dbe","sha256":"9283a44e360e474d43ea28833ce526d29a5d073945453d2de7a7bc5d018b1209","sha512":"e4a3c6ae224b2d694e18796f4eb3c61124a2618af0785b6ef80f5d4b2d28a456938bc569bb55faa545fd977eb5c45b93ffd83bb7680c34841d754888a7ad8b31","ssdeep":"","tlshash":"b911cca7d580723a0a32c8bdd1109b42426813d7cb600269e58b86f573ad0fea25de99","size":915,"data":"","first_seen":"2026-03-07T12:53:24.940986Z","last_seen":"2026-03-08T10:47:57.858737Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19330347\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2F1063galabet.com%2Ftr%2F\u0026group_id=0\u0026channel_type=code\u0026jsonp=__wiqwjhl0g5g","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e1e0fd5fed5373bfd0320eaaf7072a2","sha1":"1a8d457d53ba747b4db7ec988a68d4e8b3b0500a","sha256":"b8ad5aafe246b8ac07bacb6dbb438b76dc6177b47ee057c7886610b066e240cb","sha512":"4fdacbce0d3a0a31863013b45bf1f16a81da41aaa3054471fd6b35f4f6c471fa22da9c9b47c1f03fb6bb968068f2c5b6b2f4d1e1c93e940c0606eb181789df4f","ssdeep":"","tlshash":"5ce0f1a3615021709bc4e3be940057023c300a97410495bd74aa1350031b7deb22450b","size":391,"data":"","first_seen":"2026-03-07T12:53:25.030337Z","last_seen":"2026-03-07T12:53:25.030337Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/tr/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"73b8b49b4f5dd8adfdee877cd58546f0","sha1":"9f41caaee4b514ed017a6258c4a2166e6df5fad8","sha256":"b8ac084bd8c078db89ea019d31398c712a77cf27480be3b2aaaf7754615679ad","sha512":"b0dc33f21d8d930095dd34608c4cd501b4cecd139e1854fb636bb4e0d1722b22bda57425ebaf257860fc364a6ed9935865d391026a55c36bd7cbad695321d11e","ssdeep":"","tlshash":"6e4120b937867cb200f96633d6af771734f5d071d4018c10272adc896ab9d6a41a7c6d","size":2178,"data":"","first_seen":"2025-12-24T22:39:16.422871Z","last_seen":"2026-07-06T22:32:47.099131Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/ButtonWithAction-OOcwu9ST.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"378d5d4560363423adecce451e2607da","sha1":"19001db3d9fed995d78984dffa744ea9a0fa50ba","sha256":"fde1696cfa636a21428c7a2203b44a3bc38b37afe2cb7ad99b2759bde8c5a6ba","sha512":"a449cb56c2cf76af15975e6a0581463d2950f3b63c1f5910a99cc7554e9fa9d749dc9b346dcb7b478aff91beb71c1cef46311d8ce53aee58158d2a36cff944c2","ssdeep":"","tlshash":"bed0950f5455d2f907c57aa0513b812126256e74f794c551c058244036315dec16ea3f","size":267,"data":"","first_seen":"2026-03-07T12:53:24.942388Z","last_seen":"2026-03-08T10:47:57.864505Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75464848464c39b1e1707eb4cfa2eb8e","sha1":"4d0357e3f7377c14c74809d96c6206c74e57121f","sha256":"727f600e94c6951218648674a49268f98806dfb91b54e0227ac4ca3ddee68ae1","sha512":"e59422a1b0b084847c1f97c6fe5f144dddadb2511a9d14cf42707970227c1297abfb6ed1b057177fb458c3cabd0b16f7ec8437e85600af5d34d2cc09b06e3ada","ssdeep":"","tlshash":"4381aa99e0bb25750363b43b27bba1013b22a5676480f985391f07c42fd602971bbef7","size":3913,"data":"","first_seen":"2026-03-07T12:53:25.057206Z","last_seen":"2026-03-08T10:47:58.029941Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/___vite-browser-external_commonjs-proxy-Bzld9tdJ.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"95cfe4b83d6eb8f7ef53813947f39143","sha1":"611345a41fe2406836b8c0e3d809c9420972ff74","sha256":"2e245cd777470e30217185b8d092706437c2f8872303738cea579333bf277265","sha512":"127a0350bb7be8b1ed6228a0d7b999a92ccd4fdd4ca834ef7789c8794d11c2a44790002b4aa6683049dd4fc2b5156a89f6cb7d1139cd48f63116ab52de7c4ee2","ssdeep":"","tlshash":"8cc080451654ecb452471d8286159401d55c4e6eb3f4f5d0fb188d5512015cf62b8f57","size":178,"data":"","first_seen":"2026-03-07T12:53:24.886791Z","last_seen":"2026-03-08T10:47:57.921047Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/LiveChatAdviser-BbniN4di.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55e0d52c0c568b8de3e7d0eb2f877ea7","sha1":"6710f1834280d759a43c612207a6d56987dc6d2f","sha256":"6e58a9614774f7c1353012a9b3e4645135728d3c968d8f349480ab69a1abb170","sha512":"44839e3af98f369c5bc07dca2dd4dc852cf86eb796116b20912694e3bcbc5eed03c1833c543edf79e415524b7acbd8054633c0bdbbae550e39a6add17f35a99c","ssdeep":"","tlshash":"5011ef96f0c6a3fd6a67284dd6aa2443600a4fa5c22d0db5807b15641a6ce49a24eed4","size":862,"data":"","first_seen":"2026-03-07T12:53:24.902793Z","last_seen":"2026-03-08T10:47:57.856459Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/withPanelButton-Dfy2A7It.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b68cdaa28be25ab33a4f3b67e98c4440","sha1":"b8cee4656d9186f190c9959da66b56f8f3670cc6","sha256":"a1ac916cdedd060dd8eac93c8849ee59f2cb4392960ba6fd8cab5078e3149b8e","sha512":"b31fcea2f039d8f10acef2b3be54ec649ba589f41f5c648df6c08a3e7d37c7749dd79616f620e8b3b6d788e69af9b301c8c9d281bc2d9df41d3f398fa4244570","ssdeep":"","tlshash":"2011f0e5f5c4a9b1e4c41188577b2cb2719b32d9dce114d031b2c8da5fa8048995e9ae","size":1089,"data":"","first_seen":"2026-03-07T12:53:24.950902Z","last_seen":"2026-03-08T10:47:57.839029Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","size":60965,"data":"","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-08-10T15:32:58.760263Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/tr/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f941adb2ce1c3c336f01b65e00b5b9","sha1":"225bb5c32199edc5a116b0b6108c4e5308b28e58","sha256":"3131d130bcb57e9c2593c009769729464af0ba726b8821274bcd76e44e283f56","sha512":"995db58cf4462f52c3f124666f58d5ad9725f77b17342864521087a05333bc53a776ce1c8d2d194b5c5880ee09b72f31aeb536258aec48b96a4de62adcc013d3","ssdeep":"","tlshash":"9011147d3ce76848d60e9bfa356f978d20b7b8155d40cd90c189c498a555fc800a5bbc","size":926,"data":"","first_seen":"2026-03-07T12:53:25.05797Z","last_seen":"2026-05-22T17:22:58.364344Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/lodash-P_UKhmef.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7355d513125039aa121eeeaa5f416932","sha1":"3accd1c82bed7c14665609c2be399658d87d5ab8","sha256":"dcf61c3b1c412b9033fd69a0dc4d9a236534d871549d79cb7826d71542b3f4a6","sha512":"0cb083377530c9f7dda16f437767725974de5b7dff482d4d7cbea9257bb9ee416feddafd9c5b7f99334f5bd2b87d957c4b5a54c06a025780a35a764c3912a2e8","ssdeep":"1536:dHPJrcfcPiT24/HpSOEoRyLmmE6HZxEehT3npdV1j6EFBKgTtJz7GSTbVCmddVK/:dAcYkoRr+DKAtESTbVRhXMF","tlshash":"bbf390c835d3f4a283a7287440bf084ff23dad65a84cc554e1aae0dd7db89198277e6d","size":165527,"data":"","first_seen":"2026-03-07T12:53:24.948693Z","last_seen":"2026-03-08T10:47:57.772618Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/PromotedProductsWidget-CFAHI4XD.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03a15519643f45d52bb9962d9881cdc9","sha1":"fc25b5679c8576ac5570cb31db67bc85f29fbe2a","sha256":"93d134bc62d160cbbc1d9a0dd2f55883bfb9abc2d5d62b28eab8c2393df32bab","sha512":"26db438f8ebc4bf38b9897e7bd6be2efbeb93f1475ba91c5a92c960cf9dff1a60bc913243127016a2f3888bf5e2fb7a38515fb22e2a3bce973c86d7387f1b653","ssdeep":"","tlshash":"e6415443d034a279f53a6dec214100c53c163d28d6a14965e0a6bd0ad038826bb62efc","size":1952,"data":"","first_seen":"2026-03-07T12:53:24.914577Z","last_seen":"2026-03-08T10:47:57.762287Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/usePriceChange-Bj-TfIxD.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"99492642135904dfc29586f5a12db1ea","sha1":"6a0de60b0da7a5bb66c5d38548477ff028e8f8bf","sha256":"160d16d14d0796311862023967066bbd30ae1df60a89edd8439b29f3b4d37895","sha512":"472d2b18fd235e54a25b47fc1c306d76bdfcd074bed7a28ce4b3048edaf67adece9e581647edc289cdcfcde863900476e9fab87c28cd9e2c76c80350d5e9f922","ssdeep":"","tlshash":"0df05cbe14901c23985f0cc4c26485571fd126d56bbdc32eb230882d37589af06beea6","size":470,"data":"","first_seen":"2026-03-07T12:53:24.910858Z","last_seen":"2026-03-08T10:47:57.769921Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.1063galabet.com/core.js","fqdn":"dataspot-int-bucket.1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b36da2d6bff26a62203a66db889d73d","sha1":"84baff357a60ce96c41b815dd550b197a508296c","sha256":"db87f1739c5c833a19c626c621010a55d16578565659dc1497c448b6c2cbe209","sha512":"cf624d227604656b49fd62c0453ee3f7ca241e94e1f069f28e6d4a6210df52c7d857380e5a6b581cb833ec5d56b0c22910bcd06cbc647534c25795089abdfaec","ssdeep":"6144:D1OsuTz6j/kbklCp/rKbb09tg8KSFO6xw:1kbklCpDKbbCtg8KSF+","tlshash":"7f34a44567f11c2752f6b0b94b0bc1d2722ac003251dac8878ad73b85fcea7896f5bb4","size":246925,"data":"","first_seen":"2025-12-23T04:41:05.152876Z","last_seen":"2026-03-08T10:47:58.003121Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/InformativeWidget-Ctxpm4s4.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"033f843d28de8a688876f3e7945d641a","sha1":"ef4ac54e9894752b757219904bf3b46a062d8559","sha256":"c007b003b4b436920144c22722062ed0a93a232305787426f0e65a321c969fe5","sha512":"67712c0634e53e98d227cef81445a8a21f311e176bd987b4ead69bddf927c3311049e8a93aee793afeb2777a2669c07993e8155c6d7978e412cac6587eaf3896","ssdeep":"","tlshash":"8f114646f594e67db0354dc4425790a169312ee4df39d4edd8b13408a43010b76ebbec","size":1087,"data":"","first_seen":"2026-03-07T12:53:24.879361Z","last_seen":"2026-03-08T10:47:57.808Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/useNotificationsProvider-qvUrF8Ex.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"96c0ec5f839a0377ac4b4c7e3c4ed42f","sha1":"25f3367dfb4ee7e9d080b30e624fc3ef7a689cb4","sha256":"fc097b72053a02d757d2b1c9d91b2e09d3d5899337e953ccf233b497453531eb","sha512":"6a7909eb6c7ebfff333e095dba85036faf6427a7fb97ff540f509da362a11ce27d8acd1787f7aba2bd9c1b2efdb43fe68e06c589315034998099ed3b65cce6a1","ssdeep":"","tlshash":"5eb01223049057f0610108dc11245c3a0b31093c33518ab09030110811e40c9831e991","size":92,"data":"","first_seen":"2026-03-07T12:53:24.896106Z","last_seen":"2026-03-08T10:47:57.759448Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.1063galabet.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c502cf55b2a3f78e648f2bf2b2eb6582","sha1":"cd87424dc2922aaedb4d7418e581a1419e8ae5db","sha256":"24f898e9c39f054c6511010c44744db4702dcbf9c75ae5cbacbca2fd852f50bc","sha512":"ae83a469460b683155b1c51ce1309db2b9324f146a6274fd33a18d7b5e2f6807baa4c9d049ae330e03917b4bb85ddaa33122250a7e286aa541fa0fc60cf7ad97","ssdeep":"","tlshash":"0221e49664d8bf7706f01ef8e3156a48b4567f487031c849529fa89d6c214c24579f8d","size":1150,"data":"","first_seen":"2026-02-24T14:18:16.940585Z","last_seen":"2026-07-06T22:32:46.912147Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492468","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"adc25b636de35548e43571f5c42873b1","sha1":"4fab82c7a41b607fb8163ed7b3de9a67927c46a1","sha256":"3d0e0f0eb6ee5f9636d85cc6edc68deea6249dbdfadcef81de254787e814d8cb","sha512":"42ced52fe545e387f78f94d93ca607c243b720770c0ba0390b85eabae99ae66064f702265cb83c9450f2be12a98f536dafd61f50f535291b116b4a93175fc031","ssdeep":"24576:glTgpLuTlTq7qHRNwM7vKZUh3FqBL1wtHaPzr8lThBFbE+:glspLuTl27qxNwM7vKZs3FqBiHaPzr8D","tlshash":"4a158d9072567534c3b795b160be060cb23c5b02740ac698f2bc99ea1fd7896627bf7c","size":954610,"data":"","first_seen":"2026-03-04T19:25:33.689359Z","last_seen":"2026-03-08T10:47:58.010768Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","size":60965,"data":"","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-08-10T15:32:58.760263Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2363889186e23777b4b704661794f3d","sha1":"7f50ba76565cbebe1ce54ed6e30f3794fee96554","sha256":"f71def488c2fb369e417b84e2088a8c9c21a59a3d1dffe4a43f4dad196460b8c","sha512":"4fb51fd523149c9cb04134a77d41461736a1e832dbd48af01a71d47843a56fed5a4474275e8752a2460c3cd7203bbbe9fb897a4c027d81a6b446973169d3eea4","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJyO:xGBzd6BgJn+wT8ZI3I5Z7y+","tlshash":"688533582a6bf3849409d0d7f9373d84c59ed19aa44764d24fb24bf31bb2352eaacd03","size":1831195,"data":"","first_seen":"2025-03-04T03:23:02.060485Z","last_seen":"2026-04-13T13:13:58.719874Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/InternalDataspotTracking-BqaVTBCs.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"433e8baf8e198fc1e93914fd19811faa","sha1":"17b5fb0fe50dfef08816bab5ae8bd5f337b1cdc6","sha256":"748fdd262952c788c37e6e45617b15010b467f5f99dbb30db03357fade7190eb","sha512":"f4dd64de9ad1c1a474a85ebca40043a5e98b362141bfb6186f39985ba9ad9540043ce5b89edd66d064b54a8df53b9eea557244452c4dfda793a87e9a3983850a","ssdeep":"","tlshash":"2081841fd83c09b1706489ce5877a997c5a8388e51c0c8f0603a9aae561be04d7f6ed7","size":4061,"data":"","first_seen":"2026-03-07T12:53:24.940061Z","last_seen":"2026-03-08T10:47:57.866411Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-B9hXZUKv.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdab058fe5f0a31fb6755a8c7629ec6d","sha1":"6ffb4a07ba1653b5113005b4ca5f84a9452d9fff","sha256":"38b63b3ff50d95c1444608ea6befed32efbf459474f7161839ae46aacd4e8a14","sha512":"3104334f35801f4146d5b0edb6a3ea4fd4db11a3abe68dc08acfb44736a60088d13662ffa9acd1cfbf67238cc07812906521ced2373b4974acf8dba0f134253a","ssdeep":"3072:mkwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:VwhFHU4HNwFH7MoOWexZFHV","tlshash":"33f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","size":157556,"data":"","first_seen":"2026-03-07T12:53:24.953131Z","last_seen":"2026-03-08T10:47:57.936367Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/AiPromotedGamesWidget-BHt7VhYz.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4afa8e8ef9f22447abd8fffa444696f","sha1":"3ee3381a75cf38112ad3dd9a043765381411fa2c","sha256":"82cc48fd74ae0d2403911294c4200c25a17e71d7436b5c4293d5cd1618994072","sha512":"062e518457b30fbf71bd64638acd7263fe0b819bde9ad745a70151a6e26dc373787b3f8a115d41a2140dcba514b01f5ef2f47d823b90d215ef93d3082f163726","ssdeep":"","tlshash":"0341642bb019ca7cf21c06a05294f745a42177bcd719a0ecbaef1900771409d337db81","size":1924,"data":"","first_seen":"2026-03-07T12:53:25.034327Z","last_seen":"2026-03-08T10:47:57.915901Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/tr/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25968e8050b03a228b4d547826b098c6","sha1":"b15ac3dce03be69ab8e198afebaf9cf761cf9da4","sha256":"583e20359cfc6a64154b601fc47309be1e57fc2b89434d8a7649445fc66af0fd","sha512":"d2256261787b021c3ef34b69e3509640f04abd03353b7dbea1d8f07211764770e8b0a4a1ea015475e3c326d1fc797d8191b87834550309076754f8b1213dcab0","ssdeep":"","tlshash":"89e0f1e77817486a749f01bd6bb5902431832119640dc922fcfdd4241f60693cc0e88c","size":435,"data":"","first_seen":"2025-12-24T22:39:16.413128Z","last_seen":"2026-07-06T22:32:47.109477Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/tr/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-07-06T22:32:47.104782Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/tr/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"932d1c008400401a55681904391c206c","sha1":"7cc9f4d6461805e1878406a830a785ed08d9adbb","sha256":"24cbc4e4b2c15b32036fbb84d653cb480e0818fda8318d2a806d8c3e8666dcdc","sha512":"06be73e2b9709f0164075b7fe30d5f2c03288af4d97b5eac9c0d77cd04b238efe0bf6dd746c6c9063b2f2edd00fa981d58769f76a1439687e7b0582a4d78167c","ssdeep":"","tlshash":"b421d6e238630473061625f7a93fb188b479341e2e0dd821c04fd9a839a9fdf81a3a08","size":1405,"data":"","first_seen":"2026-02-24T14:23:51.476805Z","last_seen":"2026-07-06T22:32:47.10213Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/NotificationsButton-BSOVhjLm.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10f2299bb01af4a4e5dce9e406cc155d","sha1":"38bb2ff5be74e8d0d14aebd2993609fce33c17c7","sha256":"c51bf3d094154526a746ccec10401bd4b5575d34837f84752a352d281eb63113","sha512":"32f2fa4d7316ff169cf6bfb4ee542744a0c337ddb74f20875e87abf145a94031f7c9aa40822884941312e9326033dfcbb3ad9f054a8702b408f4b76dbff752b7","ssdeep":"","tlshash":"f5f0264ba668d4b41f834a30623b9026253b693cde0a944040e62c55177005ac55f99f","size":558,"data":"","first_seen":"2026-03-07T12:53:24.957388Z","last_seen":"2026-03-08T10:47:57.815189Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/GoogleTagManagerTracking-CqQ_KaHL.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"431bb1bca8cbefa36776b520ee0f0f05","sha1":"0c4142c9cc0e51cdf013a75138ee799a12aedd9f","sha256":"cf4bbf25628f7aa8f002c5547c9bf48628c435f63843d4d4a6f3b856d815cf73","sha512":"81f73b56769b82397f8e387106e0a70d4cfd158721aa906fb0e114590797595191311b6ad315d2325e17d2b6485375346bd767e7a3bfdb4e15e07bcd6cc9740d","ssdeep":"384:Cb3bEI5wT9aZdtdoNc5GRU52iWD+FOTVKWZxxqyuQPfg1F0TQOmJNw9vU6:G3bEeScDdoNcwiAiWqFOTVJZnqyuQPwU","tlshash":"1c82b9d7f96548e0a5bc1fe81f92428b35b1b669f49140747c9e7c0c233cc4ef2a5a99","size":18918,"data":"","first_seen":"2026-03-07T12:53:24.899363Z","last_seen":"2026-03-08T10:47:57.842532Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Tooltip-BLA_pMUT.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6c7057db325e193ce09cf9260e7f4ee0","sha1":"46ed3e572e5d21c491d210b2233c9370c18e19e1","sha256":"b91d7f3ce8fbe513d7fdb401deb850771be30f75eb801ff191f53249bd624c67","sha512":"063c0532b8164e6173b6f62acf5d6e94266dbc03585f8e1266c50c9de2b6d387b83deaac8dd703dd3b73d02fff55e662c7704f6f8f07240c78217c18b94a0b9d","ssdeep":"","tlshash":"8601c256e032fbf4e57654da142d956d7253266c7e2f58f0a038058e0ae4984d317bca","size":820,"data":"","first_seen":"2026-03-07T12:53:24.984904Z","last_seen":"2026-03-08T10:47:57.75838Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/TabItem-Ccmm6G2v.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"274d3fcc5d12924d6fde4c466910b3f9","sha1":"aaedbfd3435a270ca1c915b90480451e9a98e457","sha256":"ad5c72bad1d274f7fcb583fc7f294829e031f95f393a730131f5e54e5f66e05a","sha512":"25cfbf9f4b969aa4c6a02db1a4e881fe0d27c1304d51c3e34fb46a171cb3df35f4397f600cbdf1d5ca19219d00311b9612c230fa6d8bf5d9e142b6238addbdca","ssdeep":"","tlshash":"8ce0e552a020f3f5982b54d6d26e94c732120998da6588e6e0a22040062e561f65ef8e","size":413,"data":"","first_seen":"2026-03-07T12:53:24.916538Z","last_seen":"2026-03-08T10:47:57.879052Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1063galabet.com/assets/InformativeWidget-Ctxpm4s4.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/InformativeWidget-Ctxpm4s4.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"43f-70rFTpiUdSt1chmQS/O0agYthVk\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUwzb%2F9Rcvv4eORALKaOjNz83gsoTWZI2YBTasP25j5Lz1HSOclJtgjzbBpJDp06Fld9cuKH438pFwbQC5MzI7wwaTvNb8hjBguZk7PCoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcee7d3e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1087,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1086)","md5":"033f843d28de8a688876f3e7945d641a","sha1":"ef4ac54e9894752b757219904bf3b46a062d8559","sha256":"c007b003b4b436920144c22722062ed0a93a232305787426f0e65a321c969fe5","sha512":"67712c0634e53e98d227cef81445a8a21f311e176bd987b4ead69bddf927c3311049e8a93aee793afeb2777a2669c07993e8155c6d7978e412cac6587eaf3896","ssdeep":"","tlshash":"8f114646f594e67db0354dc4425790a169312ee4df39d4edd8b13408a43010b76ebbec","first_seen":"2026-03-07T12:53:24.879361Z","last_seen":"2026-03-08T10:47:57.808Z","times_seen":3,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/DisabledMarketEvent-ll7hHjmc.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/DisabledMarketEvent-ll7hHjmc.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"a9d-EblDdjhAZ/YSZTmshnyrWj87Go8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppFQWcMloPO%2FpzyrPjGJbVaupgWQjyEQAWOGPM0ABg4U8a%2B75QtgwptSDcIaMDbbFkXL2IL2dM3zjRlhH2uelPZkxNSoYIn9%2Fas8l41Ivg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceede499cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2717,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2716)","md5":"7f4336781f33fb8717916fe5f5b36a2d","sha1":"11b94376384067f6126539ac867cab5a3f3b1a8f","sha256":"a5a74f232e9f39fd8bc47cec59844d3b6bf0b5476b8ab55746229697935e5f1a","sha512":"ef888e73747a57e46c1a6ec0a73db51e541ca5ade191fe99259f63cabd0c3ea59d1508e67e1fa474ac171a5e262269cbd8f8f7604bbb7090b2fda2e828a38528","ssdeep":"","tlshash":"a951736db290fa7d593500ccc23b1f1f641913e2c6590992d0be8c29151c0dd32aefd9","first_seen":"2026-03-07T12:53:24.880739Z","last_seen":"2026-03-08T10:47:57.92538Z","times_seen":3,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FavoriteGamesContent-CbirymKU.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-CbirymKU.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"ae1-sTLhclPWpj0rgGYjL8NOkn3IQWc\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FfKO%2BUGrUGgjITIy%2BzB2kND2i4bfWAqZ8BJ3nIKOPFBt70s%2FsvnM%2FBdkzbkYB790dVwvPFBchZTwGLkhbCtwg7p0bI2Npmh8aC2PyhZIpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2be2f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2785,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1707)","md5":"34f7c75a43ab01f789245fd57ee6a43d","sha1":"b132e17253d6a63d2b8066232fc34e927dc84167","sha256":"4abaf502a72987e4cdf37c4778c2cd5cdd11f95047ecb7ecfd3373d275a7ca88","sha512":"c83eff030e6c29fbad041029ab0507f13ee8a66d179801b0a16e4e25b1b8afc2e531da332e8b1a62670071ceaac0441597a7c3e5d97f45b1883eaa5961f0d383","ssdeep":"","tlshash":"1b51a51140015ff8af8eadea5e27c060197a438c5285c17ea8794e3e3428685713bffa","first_seen":"2026-03-07T12:53:24.881757Z","last_seen":"2026-03-08T10:47:57.763731Z","times_seen":3,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/459.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/459.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/walletConnect-CiycSUBb.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7ce-4NL9XQUE1X1LJPUYsilS0smIp/4\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3BRhRGoqeayN0y3eUvlswHdltw4W9ZuEoG0Qpah7Jk%2B1jiMdwzDMy2PbxGKTv4HdO6i99TI938%2BciKQFw7%2FHjxM9Yw000sfL7TWU181Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce558ae9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-f8Qpuhu4.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:29.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-f8Qpuhu4.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1135c9-+62LZ/6I7Ej4uRoRGavzfrz0/KU\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIkHjW8oXlbcl%2BA%2F%2FdSSzNMyja%2BQA1DBa0plM%2F4WKUDAjM7vzScSEz%2B3Lo7b3g2CPiP53QQeH4nl%2FkauNTIhrG%2FsqlpZkG5bGXE1oMU7sA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcd40a599cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1127881,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25281)","md5":"02de8f1d58024dc65c39ae707b591c49","sha1":"fe83a6ecd6419e03403469c493121b89d91354ee","sha256":"73d4faf0ada115c233dc3cb3fd9c1b3b179497cd8fe818a0a78cff51b76db819","sha512":"893e7ef697d6141b8bd43c13f2e91f227ce68f21ef94bb7632ee58534207e2c11863a5931a774b5ef3f39ac0b87d05ec65a72d3eea5c332ba81c15bce2f5cca5","ssdeep":"24576:SNvQ/muVGZ8px8knDkLmdPpyP2e1fPOrj3Z/sb/Sot:qvQ/muVGZ878knDkLmdPpyP2e1fPAj3E","tlshash":"b7256c85b055b97997b709e560af1102b1391e00f44cc8a0f57cedad29bd848a2b7ffe","first_seen":"2026-03-07T12:53:24.883979Z","last_seen":"2026-03-08T10:47:57.739122Z","times_seen":3,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/BetConstruct-Icons.CmXE6UQk.woff2?d8tprd","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/BetConstruct-Icons.CmXE6UQk.woff2?d8tprd HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index.BC3qGf-p.css\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 417996\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"660cc-l/Jy9rBMNLREvzfoi7yj4XPaGtc\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RuYhUbSslhU9iqog81XXdWdSZFK0hLU%2FBsCUAfrIY0F2wB%2BK4COHi%2Bb3EIXEAsoQl9Xe18osj%2FOq4ffLP%2BfQ1o%2BsYeoP%2Bw3VWuA8Vch5HQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bced2a5e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":417996,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 417996, version 1.0","md5":"670b28831826913aab5775cbd275bfa5","sha1":"97f272f6b04c34b444bf37e88bbca3e173da1ad7","sha256":"7de205b32cfb2b5c7ddab22f0875ce7d61f41a80b51c2209bb6d4c534ade170c","sha512":"cf74946cb54f36817f7955fff86a755ddbdd39779094ef883c6a3d7dc0c03fbf1cbf4c3b14dfa65431d6c4f05e1f97284165afac5d0cbef24cdb73d8363404d3","ssdeep":"12288:h1gO87Lz/xo4gsw6OO71/2uqSqGfGCczwjqqz9VmA:h1a/xWswfM2uqSqGfGzc35x","tlshash":"1694230968a9a96dd3387b35bd679e70819eab07207740fcc48dfe800d70f499a6c65f","first_seen":"2026-03-07T01:21:42.837262Z","last_seen":"2026-05-22T19:19:21.17349Z","times_seen":18,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/jackpot-jNbP6Duk.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/jackpot-jNbP6Duk.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"178-HTAHDn0O0IONuuIsgcQUMPs9DUU\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FQaYBTzlyYTjCQvXKFYqO43G%2Fu03%2Bt24JPnKZaRXjz%2FWnV1n3lkjkjpL5C8wSOg%2BGFvQwoJQsrA9DXZDsYLohkkvpQb3rX%2FM5CFalXa%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebe069cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (375)","md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-08-02T18:55:38.523246Z","times_seen":146,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/___vite-browser-external_commonjs-proxy-Bzld9tdJ.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-Bzld9tdJ.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b2-YRNFpB/iQGg2uMDj2AnJQgly/3Q\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KsVQHfhL0PCbKWQkG8zhyB0gOfOmOg1QHZUd9peZGklKC7WsK4e1Sfey64Q2baCRluED7wFWqtQyFrnhMyYGMKTEup0IKEUFI2K83m%2Bfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce5589a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":178,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"95cfe4b83d6eb8f7ef53813947f39143","sha1":"611345a41fe2406836b8c0e3d809c9420972ff74","sha256":"2e245cd777470e30217185b8d092706437c2f8872303738cea579333bf277265","sha512":"127a0350bb7be8b1ed6228a0d7b999a92ccd4fdd4ca834ef7789c8794d11c2a44790002b4aa6683049dd4fc2b5156a89f6cb7d1139cd48f63116ab52de7c4ee2","ssdeep":"","tlshash":"8cc080451654ecb452471d8286159401d55c4e6eb3f4f5d0fb188d5512015cf62b8f57","first_seen":"2026-03-07T12:53:24.886791Z","last_seen":"2026-03-08T10:47:57.921047Z","times_seen":3,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FastTrackTracking-CVjGJF7f.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FastTrackTracking-CVjGJF7f.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"52a-BIh5cpKbGai0QcLVsik7YPIrEYE\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1pyRYrFTucb5zByBGl6u6rDslALShOFlS8gUKJMl%2F%2B973M5QmLA0lGun%2BeNUBLTic5hbeg9UhlOCLOW%2BZSEN3QAMNe4s35nKsi9ouDmjFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced1a3c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1321)","md5":"25be6c85570e77d961873fd301a9f6cb","sha1":"04887972929b19a8b441c2d5b2293b60f22b1181","sha256":"850f9f24d5a5ed407ad4ee4bf1739abef9bc67c393068a8bf9f182da3a6cd726","sha512":"82c6dc95fd087fb7621ddd394ea087cdf3ed11810f0636200dbb0e07bd9336ffa057ba27352a24cbf9ee1928ff87fbfff67f5abfa76586d7372ead2c043aa349","ssdeep":"","tlshash":"cc21234f40d593b47c804e8da3e7a261953e6975711ec4e1f0760bae3a0caa983dac97","first_seen":"2026-03-07T12:53:24.887807Z","last_seen":"2026-03-08T10:47:57.857036Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/DepositCountTracking-BpZZdIph.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/DepositCountTracking-BpZZdIph.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"285-W91rw/uaXfmKhcGpjpkM7dCTWXA\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LuOlj7CXvo5ddo%2Bw6AOiNKArtUWudQhJCgJK0K5%2B9rQ%2FmWAG3mOfSJxhhhI6rIHuNbsONdV53Pyy1b8VfaTmZ7OhPpJpnu0XhKfWV1Xstg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced1a479cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (644)","md5":"6967666ed02768afe5d53d1670eb3686","sha1":"5bdd6bc3fb9a5df98a85c1a98e990cedd0935970","sha256":"3f9e551e1eecdd4faa1c9c86aa96528b8307c501f922ef1f045ac2cc0113e80f","sha512":"0a3a32b172dc75a9e174f873551e248cbb6fa72e8edfd77830cec91e8ba14e59920a4984ea2cae05b7fe43fbf63ef45b6f6f837f2ce3a6452c4e53b1f0472555","ssdeep":"","tlshash":"4df0dd5768b8e6f989493a8072c7a8b363f1755cb91788c385b94d460248046e4d892b","first_seen":"2026-03-07T12:53:24.888574Z","last_seen":"2026-03-08T10:47:57.831478Z","times_seen":3,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/useJackpot-C--XCS77.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/useJackpot-C--XCS77.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"585-RJrrVjs7ZXrJsTHv466jTJRSrs4\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6u0CfO5xr0A2yXw4BM5vlXju8li0zzIbYhdXKB%2FlIbZzsK9NDmb5b3gKPWNLyI8VV0pvGJ5z02JuW%2FdvIPXDvbOa56BZBZMve%2FM8lm8Iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebe099cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1413,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1412)","md5":"7e34169a343002f524fef5ba037f6174","sha1":"449aeb563b3b657ac9b131efe3aea34c9452aece","sha256":"5ee01792423ee717bc22134ebe64399dd78c66226722b76e89b2eb47b34945b3","sha512":"63d603a080b6b3825264b3fe027ca060690cdd0d9e3a5bcc4c1517a22c61f7f7571cfb811efa6ab3cc02b9888fdd4fed43403dba78d5370a63e284c6a1aa78fa","ssdeep":"","tlshash":"76211045c059e5f8f88d8cb10077973a273c3f3a7440a0a0a0fa5ebd57a8d45b6a0f92","first_seen":"2026-03-07T12:53:24.889351Z","last_seen":"2026-03-08T10:47:57.872629Z","times_seen":3,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/css/fasttrack-crm-app.css?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/css/fasttrack-crm-app.css?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zbjvR4XmwNBIJlxjEvxcm_sn.IUZfztx\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MY7sUi029l35V%2BjlrFesNHBv3%2F9i5ujG%2F6ugn7a8xAP22PwZUXWyMqBlo0aSETpxOvDPN%2FbAgieEsoapp8mbVv7hPkrMROSh1QjTtGkGow3OQSJ8ri2mqAaYmYNh6w%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 9KhslYRHlXl3Rqvjq5P4y8WxPukR6Uq1PgCIgFw7gLIoDJKItcVjtw==\r\nage: 1585\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"7906aada543698dba1005a917ffae2a7\"\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf30db40daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":27953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27953), with no line terminators","md5":"7906aada543698dba1005a917ffae2a7","sha1":"7f00d6655894909587fe280ebf09bf57f66b4100","sha256":"5e2a69854668603fcd556f0b8a3da306e3de6d5ad4dee7a9e9a57ca998269d76","sha512":"262f19709cde3e7abb7bb6d9724437b042fe626636083b80376e35a91d1ea9b39aec82463626711cb60a8c516a1b909d53aac644f056e77929e736fed6d1706b","ssdeep":"384:cFukqharVUf5rKbHWkAB1MG4TmpcHyH3XHZw/XNPalHfI:ckkqharVUf5rKbHWkAB1MG4Tmpc+J6aO","tlshash":"78c2442302c02288ac2b892b73d50599d93ec836651b6dedd7433955c7cb77e3a6b34e","first_seen":"2025-10-24T22:03:16.572036Z","last_seen":"2026-06-19T22:22:48.441807Z","times_seen":146,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":51,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_c2798e3c84b9cdb7f38468addd0d2cf3.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_c2798e3c84b9cdb7f38468addd0d2cf3.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41468\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"a1fc-n6PMWrmsGnDIwo44TOaVvSkE+to\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lz0garkORJCo9kc1%2BWZeEVvHFNdcW16oLt4R9VReOcOlaS1OIn9XNZc6T%2Fa5B%2B3ImTvK9nfiSvn8YPVR07%2BEXe%2Bap2UvdgjWKCy7lW3%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf32f139cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"73cc0bbb436e26b9b598c9e48ec14826","sha1":"9fa3cc5ab9ac1a70c8c28e384ce695bd2904fada","sha256":"fa1c9533908deb22f89990a240a1c0ac2aa61a5a33e8faffc1dc0475e33c639e","sha512":"195f91ab33d65511b31e95308c95b79a5c097f78a0bbe4a99e081a5704085fe8fcc601ae0d0adcb0a439b0a9bc326f597d62e31c26eb359a610f474a41aaf2f8","ssdeep":"768:EeFn2FhdX/7CJjYdDHjp/VvUlF9791MUC2Fon7y+sHuwQn2iCP2TqbyTu:i/ajqTv8lF95+fTou7CEWF","tlshash":"5013011dde495ba80772339c878fee86d0924aaede24852b18ff112997047ec43af594","first_seen":"2026-02-24T14:23:51.089025Z","last_seen":"2026-06-06T23:43:56.054142Z","times_seen":53,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":398,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/conf.json?v=1772887800000","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:30.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /conf.json?v=1772887800000 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"2dbe-7R73eLMZJPzwKfO0yoISKhb9/vY\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z4wPuHd%2BbWDPEIbiv0ZqbquCcXBnGDKSeUy5AztCfoMeG3ygYEIhgEgWjLqh1OM4dDdmqRc0J01p3T9WcBUP%2BFxu8U9%2FIAG82ts68jsHnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcddaefe9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11710,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3b86b3575d0317ea73de15be53669db3","sha1":"ed1ef778b31924fcf029f3b4ca82122a16fdfef6","sha256":"c7b576f084527778a9e03be33bdd8c15c74835b6201973408d5d06c636d79193","sha512":"c070c9ad7f2646d1516b1c2adb7079ecae591c291131e6ed458459595206d8c0e5bbb82ead17746d109ba7af4818ceb365b1d258b68647d561537217eb7dafc4","ssdeep":"192:NT9qoAsco7sco9MhY9sW8Dx6lAXWAoIVIa10Gc5ZNdNH5S4b+evuUGDhGtCm0:NTAoHC9MG9L81SAXWAXKGc5ZNdNH5SqE","tlshash":"c032c76363549ebe87c993c871cb7f0bd4be186be9c6f495c94cce2d4079a590213a0b","first_seen":"2026-03-07T12:53:24.892021Z","last_seen":"2026-03-08T10:47:57.830159Z","times_seen":3,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/pageBuilder/pageBuilderCssConfig.json?v=1772887800000","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:30.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /pageBuilder/pageBuilderCssConfig.json?v=1772887800000 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"115-/4ZOdO5b3KpOnXEwZOyebX8afDM\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SbpWD7cfjrcnvjMB58XApX%2FkOR6jTxbzvALeJ6YNY2khRzo5lKL1RYpp4qjw5%2F%2BqdN4UnHAACCu%2FHfSLCiZRQ2%2Fjl%2BsH3bRMg8EZODE1QQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcddbf1d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b840efc6276e4fd17616273698453549","sha1":"ff864e74ee5bdcaa4e9d713064ec9e6d7f1a7c33","sha256":"01976b4e4832d5fbf632314e6b12424691dce201138109710061a398178dad89","sha512":"35bb7dc6b4e44da9f15700eeebe04d122ddfdf41af0834f0329169c0fd98d3a9de79ca9c879d92f1727985ca07ad519870af961ba75a865a898cdc2d5035fd6c","ssdeep":"","tlshash":"c0d02b119679cf52235a51b2028becc1641bf207118086896485e2bd70c96581993f24","first_seen":"2025-12-24T22:39:16.255341Z","last_seen":"2026-04-04T19:51:35.016652Z","times_seen":24,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/AppSettingsButton-BcUSR4_y.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/AppSettingsButton-BcUSR4_y.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"181-lex6r9P5MEGa0tmcV+7wlQQcfyQ\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrIPAYYI8A21WMSkeRJ9qg27lbhjZDPGkw5kaq09RbYAvgBfkpOIo2xYQX6yn%2BKp8m8HKNi2tvT6xDSfY5M3toVLvJtz3F9UCzgdUAERZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced1a2b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"df503e003a5565630ff82f4f0c7b7fb5","sha1":"95ec7aafd3f930419ad2d99c57eef095041c7f24","sha256":"9750fc9a50955bc972c9fe4bc2e1d43a5d0e1bb02ec2daf028098761a12356be","sha512":"aaab376c6859b010897ab9cd9e13bfb33a6e82f0e6292818a4984a7484d44f88b157cf3c2096d45da7663796156b22493b25d9f4709f99dc8733dbd5c4ece6b2","ssdeep":"","tlshash":"b1e0688b5186d2fa0b962ad1c11b8201262a6d78c348da0180b8605176b01c6919e6af","first_seen":"2026-03-07T12:53:24.893726Z","last_seen":"2026-03-08T10:47:57.837149Z","times_seen":3,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/if-defined-CWaLTnLW.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-B9hXZUKv.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"cff9-3CQS8BSHCmzdXT/mRzShI3Ky5mw\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j68HYbJ4disGyaV41XSCbnq8uHHuyzz%2BbGlIRNEREBJ%2FKsq%2BpQHZV0uAr10gxcVMmhfYYtitG%2BNI%2FGl4VojWLARyK9FpxsVdQOtBA9ZIOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcee4cfa9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Odometer-Do8Tj8YW.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/Odometer-Do8Tj8YW.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/JackpotPoolsWidgetContainer-DdYWMwEX.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3ccf-asK5qaLRwaYW5+EQaU1BxOitOSc\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hzPfoevGodq28opnlpDmHuzN9bZOozI0fzUZdsgU7uyPZz%2B0YMOEQYn7JCgBvDnq7h9EBw%2BYs%2BPPkCzU8BzSVLx8orEDJUiWnYkw2D1qGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf099df9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15567,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15566)","md5":"cf2762e194a6b319e7396b3c666e20a9","sha1":"6ac2b9a9a2d1c1a616e7e110694d41c4e8ad3927","sha256":"19016b907c7c612259db60ee4bf63ce27ad79cafd04f2226aa4ffa9cf8e9a174","sha512":"c7a6c25ec14a3a579a309ff7c2f1962440d294b2919fc51b81a8686bf45e6cbdefb3e0621966316b46f18089f637b7e38d05190ccc11c2ca8f55baf0fd16bf71","ssdeep":"192:+Rd7KNJtQae0S09YJFF2UXxx3HjmHHUkauLPHMBNeSYpkYDBlC7TlzUgrPND:+2VQae099YJT3DmHH1PrFtDbGxrPx","tlshash":"b662098a7a6272344393b1a015bb0609773f9d6a3808405db27cadda7e32c09d12bff5","first_seen":"2026-03-07T12:53:24.8952Z","last_seen":"2026-03-07T13:29:05.577256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/useNotificationsProvider-qvUrF8Ex.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/useNotificationsProvider-qvUrF8Ex.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FeaturedGames-nbD3TQZs.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"5c-JfM2fftO5+nQgLMOYk/D73ponLQ\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7tlwFeEKePi7adDkQd6L06p3qmOodsTSOmyPkHA4yyLsjdD08b3R9f1%2FStrzYxjfbawmzKpYw4h1%2B5WRC3YO1BIF%2FjQLaRWukCRS%2BpqKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf099f89cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"96c0ec5f839a0377ac4b4c7e3c4ed42f","sha1":"25f3367dfb4ee7e9d080b30e624fc3ef7a689cb4","sha256":"fc097b72053a02d757d2b1c9d91b2e09d3d5899337e953ccf233b497453531eb","sha512":"6a7909eb6c7ebfff333e095dba85036faf6427a7fb97ff540f509da362a11ce27d8acd1787f7aba2bd9c1b2efdb43fe68e06c589315034998099ed3b65cce6a1","ssdeep":"","tlshash":"5eb01223049057f0610108dc11245c3a0b31093c33518ab09030110811e40c9831e991","first_seen":"2026-03-07T12:53:24.896106Z","last_seen":"2026-03-08T10:47:57.759448Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-BN9WG7Oh.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-BN9WG7Oh.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"35fd8-K83n9KRCNdCntym06iAberKCsJA\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aWP%2FakoW9X%2BjBIiaNYtUM1%2Bb6NwqfR9HkhruB3vqZLyjzb3rzXcDUV0BSmfs7aFT2mZsnhUvpMBoj6eBwPeUGyAWLllCPZ4FrZBmWwlSXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce5488b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"79d6c752f856dfb9a97fa7be95d12541","sha1":"2bcde7f4a44235d0a7b729b4ea201b7ab282b090","sha256":"5087a6551a97584bc523a4155721927042fcb4891268263dd48ec8f5cda1c155","sha512":"af3d09f43981490562c9eabead1bdddfb9924ea872f5fafd1b7105b47c18c9d9efdf85d8403d3e43670b873d6b10c032854f7949712a5600e6422c7569607559","ssdeep":"6144:QfeL9y0h4R78o8e4YCIALoh6wj9Sd51jjVvFajIRcDGRD6On:QmJy0h4R78o8e4Yb/j9e5xajIFROQ","tlshash":"6b240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-03-07T12:53:24.896966Z","last_seen":"2026-03-08T10:47:57.801092Z","times_seen":3,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-CHoKJwGn.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-CHoKJwGn.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"173c-Y5J9ENCY6ToAL5aOJLlgGtOTtjk\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05vVjoIsoVERxp%2BuNpTyFI4sfusaLXd4JQEXp9D10ieZ0WCSey00OU1UFt9h%2B92264v%2FrEF82mbsSw2PyG24ievfQLNEP9ddiCuIsPcq%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecc9839cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5948,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3085)","md5":"e202258c2ee48070d0d88dbf9403bbf6","sha1":"63927d10d098e93a002f968e24b9601ad393b639","sha256":"beedf1ed2e271da702310f2de309be950cc873ce2fc6bb70010a9fa7a91821e4","sha512":"15a716eb9b0938d355822aeb6d1bd37f7b2e4d75b9eb42bb0ce7dd86e418c6f4c834f1ef9f126b80bb22ba2aaa124f57a95468ae55014e92381a30ea4e20ab78","ssdeep":"96:e1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:l+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"50c1a65631907530c6d204a6914f42aeef3e6638f00f50a0b23f9c6d3ba1525daa3ebd","first_seen":"2026-03-07T12:53:24.89776Z","last_seen":"2026-03-08T10:47:57.834918Z","times_seen":3,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/GoogleAnalyticsTracking-Qt671pNl.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-Qt671pNl.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3588-tY0wBxoZ8tQi5jpUinyeFv4lVFI\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQ%2FLnF2Iaebuy%2BajeFwxjDQn%2BiGdtRmgw2wriTc112uzWlHHL0DIdNxe4SzVQ%2BS2lIaOQUniqwBEJK5nAH0X8IEhaMdSA3SR2pB9q8LnMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecc99d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13704,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10208)","md5":"3f8c73430db55a5e8144127b652ad193","sha1":"b58d30071a19f2d422e63a548a7c9e16fe255452","sha256":"1fec33f26a30af7c6d5eae1edb93397be02b5cde9da713dfbcff820bb2f04e24","sha512":"a5fd195f31427cd76464e866ec439cd3fb790b4cbde21d0caef4ff5c2b2d4a07c45e2e9e1e61de84d20481138c3ad4480307871acc4c19a8d265ba11f9c1d0b7","ssdeep":"192:BWYceR0SE+m/CTb3bHXCT76hoxGE0VK7D6L7kBNrnPWh52Lz2PmFmBE:0YcoE/CzCIEP3Byy2PtBE","tlshash":"cc52b55c32adb0b682df6054487f720bf1755910a458f480a265edf46ef8caf02abf36","first_seen":"2026-03-07T12:53:24.898503Z","last_seen":"2026-03-08T10:47:57.812046Z","times_seen":3,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/GoogleTagManagerTracking-CqQ_KaHL.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-CqQ_KaHL.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"49e6-DEFCycwOUc3wE6dROO55mhKu3Z8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b3Oq2YR8ZAvUHi1Usa66iVtigtCrEPLglc7mGAfR5D6pQcPFzkCof%2FrnQQhgvjVyeDyIqfO%2FA6GwQnF6%2F3KTRFR0bCN71C38Un4oiFRVcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecc9a09cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":18918,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17622)","md5":"431bb1bca8cbefa36776b520ee0f0f05","sha1":"0c4142c9cc0e51cdf013a75138ee799a12aedd9f","sha256":"cf4bbf25628f7aa8f002c5547c9bf48628c435f63843d4d4a6f3b856d815cf73","sha512":"81f73b56769b82397f8e387106e0a70d4cfd158721aa906fb0e114590797595191311b6ad315d2325e17d2b6485375346bd767e7a3bfdb4e15e07bcd6cc9740d","ssdeep":"384:Cb3bEI5wT9aZdtdoNc5GRU52iWD+FOTVKWZxxqyuQPfg1F0TQOmJNw9vU6:G3bEeScDdoNcwiAiWqFOTVJZnqyuQPwU","tlshash":"1c82b9d7f96548e0a5bc1fe81f92428b35b1b669f49140747c9e7c0c233cc4ef2a5a99","first_seen":"2026-03-07T12:53:24.899363Z","last_seen":"2026-03-08T10:47:57.842532Z","times_seen":3,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/UnavailableMarketEvent-DwcMz1ce.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/UnavailableMarketEvent-DwcMz1ce.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FeaturedGames-nbD3TQZs.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"134-isYAq0rlCojmuXl7L5VmHsfvH2o\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FYSgEFl6iSTUU4xyQqwkFUJDatcavzNUahBafbL%2FZpuUy1BenHV9hra8PJtseMuRXeusG04cZd6h5H233hk%2FE2jaF42JqkqGC3Ee%2BXwxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf0aa1a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (307)","md5":"f1decbb002a5500e1881cde9897f3c61","sha1":"8ac600ab4ae50a88e6b9797b2f95661ec7ef1f6a","sha256":"2dbc3db80d158b8c6bda40ba723665db2c03a7c5f7f421d7978451127aa3d929","sha512":"42c2d402f7d62237c28a79829c122ab7f3cf6e2586836c10384c6f2724356a3167b2ff6556c7c65c31284bb1ab28be5ca652e559e24b1cbb7416ed7e0fe76fdd","ssdeep":"","tlshash":"f1e0cd1a6144bffad5251cccce394b5d511307a5c7e945d3d1a910281b34266351aaeb","first_seen":"2026-03-07T12:53:24.900256Z","last_seen":"2026-03-08T10:47:57.789944Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/1314.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/1314.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/450.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/450.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nage: 0\r\nlast-modified: Sat, 07 Mar 2026 12:52:47 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6wTSxnof%2FGIbPGcnvLsxLre32QDkVThTi77Fu1COBLYrHycAjvvCtfYGTj3Gygh2Ea4afKgtdOjn6ZOyJGJ9s14D4%2BrYf3RWYsJKH2gQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf748519cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c621e52d6b711ec345a8eaccf9912212","sha1":"5cdd33fa5427446f27ae2d5d99de4ed458f4ffbe","sha256":"0181a3b87cffe7f19d7eceefd667a310ee356a09f39d0fb9aee47c228ac636cf","sha512":"8c3cbad9100e6b7131f61eb01f25e1c04f46708174e93c0cdf338f71645db838366a6d79d5840f5ef3807384743ac13d3a7bac0fe9b7502c7cca0e3be504c740","ssdeep":"","tlshash":"ec31e7b47781822dccef10a195de2254c4a1a0eabce03fae1f10822012658c93f75ba6","first_seen":"2023-09-23T15:54:58Z","last_seen":"2026-08-08T13:53:53.978892Z","times_seen":175,"resource_available":false,"data":null}},"time_used":12472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:36.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d89bd02bb5b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":697,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-05-22T17:22:58.055376Z","times_seen":51,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":22,"dns":4,"connect":1,"send":0,"wait":46,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_fec0ce3fb838228909c143d4c2cd0907.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:39.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_fec0ce3fb838228909c143d4c2cd0907.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955; ajs_anonymous_id=ebc478bc-e7a4-4a6e-af89-8b9dfbec23b7; _ga_2CT6DSEQTF=GS2.1.s1772887957$o1$g1$t1772887957$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49090\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"bfc2-ugkYJgodDGY3oarLzrngCuUUJvQ\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1YTUnaJDPWUuNK9HlMaTLxW2pqqgbMijqbsSny7qB5xf0VVLx95wMZsIwFqlipvEGk8VAKLjrNQlQx3kw%2BJ0z7tKdOZRkbOAksz7H5k0Mg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bd1428b79cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"554a6a60b6ffca448ba10b49245ef022","sha1":"ba0918260a1d0c6637a1aacbceb9e00ae51426f4","sha256":"072b206ca7103452a85057bb9b4e7cef928ab648bca6458ac244f8ef86be5d9b","sha512":"79847851f93587d1aea114fc35dbd63b6b3882e932bb5469240f4fc2f28a01a866e883ad3440cd0ea3c641210821304a34031889973a3c0d3d75df70982baef7","ssdeep":"768:F093GeFzB7B+3nq/0hWz3f2O8euie3REnwUuaXPdTBvETOP2x1RkILzP+81dzNI1:F0NjFzeachqJleBEwUTETOux1KQ28dZ2","tlshash":"e9230233c0f23a3c236f235e6f4f4be42998a54ec7a79158a8428737631f0944f995da","first_seen":"2026-02-24T14:23:51.345694Z","last_seen":"2026-06-06T23:43:56.099179Z","times_seen":37,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":561,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/LiveChatAdviser-BbniN4di.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/LiveChatAdviser-BbniN4di.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"35e-ZxDxg0KA11mkPGEiB6bVaYfcbS8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5oi3NFHn0YpvAwWAJoTNo0tnWsdhEN1JIAmNjXM1%2BXKT1w4rwctdP2fqQJNNZZIGi7ikuzf1JbrJX9S44lILdARdb3ovqf7moVi%2BCgkm4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceca93e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (861)","md5":"55e0d52c0c568b8de3e7d0eb2f877ea7","sha1":"6710f1834280d759a43c612207a6d56987dc6d2f","sha256":"6e58a9614774f7c1353012a9b3e4645135728d3c968d8f349480ab69a1abb170","sha512":"44839e3af98f369c5bc07dca2dd4dc852cf86eb796116b20912694e3bcbc5eed03c1833c543edf79e415524b7acbd8054633c0bdbbae550e39a6add17f35a99c","ssdeep":"","tlshash":"5011ef96f0c6a3fd6a67284dd6aa2443600a4fa5c22d0db5807b15641a6ce49a24eed4","first_seen":"2026-03-07T12:53:24.902793Z","last_seen":"2026-03-08T10:47:57.856459Z","times_seen":3,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoJackpot-DPd3ISvk.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/CasinoJackpot-DPd3ISvk.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/JackpotPoolsWidgetContainer-DdYWMwEX.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3803-u9cgJF1QhvWyD97BTddAmx/+TuM\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EOgUUlwInPTh57YOSEps84N4iE2uiC39N1eDP%2FU9gqQ1Iuaq8RRsxj3fGRDDa1PrsDTG1BifiR%2FeFMJlNot2Y1bA1FvXPWtDWN6XEkemEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf099e49cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":14339,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14338)","md5":"4cbdb6735220d7dedb6dfafcbf36790b","sha1":"bbd720245d5086f5b20fdec14dd7409b1ffe4ee3","sha256":"d13ec45d48c55e720d945b72ea71d492173d45c2afe59178b7f60fb16c464049","sha512":"f4f5ce6be72d54d2387f3ad84b99544425472ffe68cdf7adfb361f6344504526ba18cb8e932d6343301365f9d292d05d32e3ecea609b28cdd232594af91b3de8","ssdeep":"384:7m6srKqqF3EjFOFEGOpOpeHMtGRxeG/Pcy7x299pP8FJgr:7mB7CEGOpyts/U3Qgr","tlshash":"b0524c05f016b7fdbca954f7887ee0297a5e1aa9c71808b8d1bd6c313c2c855760b7ac","first_seen":"2026-03-07T12:53:24.90355Z","last_seen":"2026-03-08T10:47:57.743669Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_5190b7559bd4f49435a4ddc881319993.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_5190b7559bd4f49435a4ddc881319993.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 177342\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"2b4be-ZQiSBS4OMClAV/Fc6fDs3UKk1cE\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=st%2B29DRPBgPycs6BkLp2sEOVpNJBuRchMiEO2k21bNfs8a37m3z%2FJqQxXowmmYo%2F%2BBbkQXgfpwsmWhEiN7YokhSuYL2waRricPrRV9RNew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf5dcdf9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":177342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"23b7f207e6c092098d3bcdf9d2f14be1","sha1":"650892052e0e30294057f15ce9f0ecdd42a4d5c1","sha256":"c717fab7712e62e0861549eb4bc1dde3117f6f0c62338c757d13eb509f3e7269","sha512":"b0c204fb35dc5d43d2ffaf56bd2639d23eb5c6b84e65262dcee19de8dd2503bac124174d146c3d3b4b3dc6ff67e2bb2e077628d7a0b36e45c57a0bec804d2bb3","ssdeep":"3072:rycjQ6Y/ykNdJQWPmWQ2Q5BlUrAR9TM3b15l9BSAAQZTT932WJEWPjd:ryFJykdQWPmWpQZ5RMl9BS3lWiWLd","tlshash":"61041227e6ce744c2649067849e0beb972f4542eeede7719e72d42880881296ce77849","first_seen":"2026-03-04T19:25:33.683812Z","last_seen":"2026-03-11T15:08:03.055565Z","times_seen":5,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24390\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"5f46-6jG1mUptvF4sSdX27q6xxrFt8/Q\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmB0%2BArcK1MYogjp3FZt30pNFv1ZvQmh%2FcXq0ksuPCW26UhJ9QE9CgK2MA%2BOUPGalqdP%2FNVXUibcusXv%2FhRB0W0e1XFgX6q9TjEkvRu%2Fww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf5ed1e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a343e21bbc8dd82b9a351018ae46fe","sha1":"ea31b5994a6dbc5e2c49d5f6eeaeb1c6b16df3f4","sha256":"08550d26480f3f6cf58fb6b50ba9c247d35c1eba70b6f2ca467abec7c84a19e8","sha512":"7c2cd2364f94f5a82d27ea07f251eabd2b42a03d1e2ddcb671abb80b897803941c05d8d3e2910c5fcc9844d5fb0e608c6b2063f1bf7c932bcd501efc709f5921","ssdeep":"384:lKjKORGzizM3XqK4PhCDkQcL5F0cqx1/v+zgxjfTE/a7PPY+xbyWBuPcCgfLdC:lQ1GzQM39QEkPF0cSN2zWjfTIfKjBe5x","tlshash":"5eb2e089da8861645c84f4483f4e24d7bb7816dcebaf083e978d0ee835c99b577b610c","first_seen":"2025-12-24T22:39:16.06566Z","last_seen":"2026-05-14T23:49:57.36494Z","times_seen":59,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/fonts/default/RobotoBold.woff2?v=583","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=583 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index.BC3qGf-p.css\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"f250-sdZeMF6FDN01JzT3hCzd/TDwjQs\"\r\nage: 1\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fs9bkNvm4cIWJuUqcqp%2BU68sDATOKcZ4Xt3TupHppI4veCDRfr01o4QZXXDavCuP4uGgn4S8H5T41oU6aCEOLgGSEiTyNnqImpKa4hiiBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf87aeb9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-08-04T13:12:00.070588Z","times_seen":2673,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:36.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 740\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 05 Mar 2026 10:27:15 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: AJQRi_Xq759V8yuXRFY_hJxcaaEWeTOv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 12:51:38 GMT\r\ncache-control: public, max-age=120\r\netag: \"458f9a63589ac21c7cd1917cdb56ecdc\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 193fe983778f7496cce206a132f2e55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 97qUvjolLwV1CBTRkmonn2cdQ9JVGOUIGAgHYoB1lsufRDsj9Iv1WA==\r\nage: 60\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"458f9a63589ac21c7cd1917cdb56ecdc","sha1":"c13fb68956e121a7bb96214f251d302bf60c1d46","sha256":"49bed1860ca019b9cdb293c4bfea2914cd0826c95a287b430a1c410dc60cfcf0","sha512":"34b788f38f794f7c0f5736cf21cf967b000352e8f2ec4085a15f5fcadda0df14764c0f34642752df6966d7f18c0a236bd1b81d5dafe58900ce14f14966a81dc0","ssdeep":"","tlshash":"ed01c08d3410b1b38d4a8b23c9193d036ff64878588a653054bf6b0c10ba9ed039ada7","first_seen":"2026-03-07T12:53:24.906253Z","last_seen":"2026-03-08T10:47:57.828925Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":24,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/events-C8SUJwrU.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/events-C8SUJwrU.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"17fd-tE4gc9R9+nFxX9IFOXy9oPb4l5o\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FmITU%2BPxEFQKQdEUlr72vwlIXyOiEUsJzI%2ByI6V%2B46tL7x2pemUiTJ4HQN%2F7mtoXVPktMY%2F7tYgsmcIJQ%2BN6Qbya7m%2B1KExZ4toSJf7rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce76db19cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"ab24183712c6a3aed9f1a2dd2afd03ff","sha1":"b44e2073d47dfa71715fd205397cbda0f6f8979a","sha256":"dde30bd91722beb3a9bc828f4c64f3da6e275747a168f8d7edf5543f636dd925","sha512":"f8107020b86fd6c5c91c50b16914b5d2046e52951695d0b2ef2db87c411ef78cbc250186613bc97276af3b483d8271d9ce7e26f8c0825fc4aa6bfdf3805d63c9","ssdeep":"96:md9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:m3IM2sWMtBq6n3PzH","tlshash":"0fc144ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","first_seen":"2026-03-07T12:53:24.90698Z","last_seen":"2026-03-08T10:47:57.802002Z","times_seen":3,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/GamesOfTheWeek.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/GamesOfTheWeek.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"be0-s54NzoLuwWZRVmkT59ihribuJdg\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=witI%2FBapiW7iyZBAtNtZInKj3eq5FnaPizN8ig3Hk7ysCd23TTst7A37AwYgslhnJK4mNDX%2BVfcbepXe94mmoeUHVd%2BZHQ9LEQIsReKDOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec281d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bd48bcac13b7af9a43338fa39450069c","sha1":"b39e0dce82eec16651566913e7d8a1ae26ee25d8","sha256":"e67476d135f1d3e566d62c017b8a4afa7b3013dc29540a85de3c9f071a11812a","sha512":"39c26cb74b8bea9fd071edc07b5fe1ef144747ebd23593b409aeb8f0e6894daf00a946805f222e2dca66dae48baa4adab0196a4ef71720fd109aeba8f11e1026","ssdeep":"","tlshash":"6951b0d8c5254afa1bcc335e6322542b0cc92fd6f7a35cd8b27c85985b13d062a7e883","first_seen":"2026-02-24T14:23:51.265611Z","last_seen":"2026-07-13T02:25:32.274163Z","times_seen":54,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/SystemBetCalculatorContainer-BWQpeoKA.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-BWQpeoKA.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"378-4OS9eYFVpz61ntqlrHcMmBPfEI0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdH25wf6aBRGYeamE5TfdWKG2QQUVdEeq8Uwe5MNARAa%2BJjcSmpskTMboFxHVm5HXNTTeyn45BQfMOaeHgEsc5Uu5Q5yHPubZ%2Feo5FeWtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec89029cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (544)","md5":"4c166042c2f141b16df97185fbedd549","sha1":"e0e4bd798155a73eb59edaa5ac770c9813df108d","sha256":"3bf698b29d114d002fc444a33e574df5faae6c1076054ebec079689870ebb58e","sha512":"1848f27dfea8259aa73698f5537dc9abc1f96883f535bc46081f3a3e7f4f79fd568d15569fc591ea15647c2763590850e44e5a461fb56dab6c773df5a09b99b3","ssdeep":"","tlshash":"f6118ca75369cf74c88e0fa20956646409b107186a18e678f6b64c3ce0145d683faffb","first_seen":"2026-03-07T12:53:24.908226Z","last_seen":"2026-03-08T10:47:57.745295Z","times_seen":3,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2483\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=mMHdTfgq12q_ikqTbgfeWVczcV53QqBjSVinvSAYzXU-1772887954-1.0.1.1-JKRjpx4y.p.m5zOABPwCnWHGvCvfXdHfpGEc0cVCoQiTyZ2a6qPcX0KB8gHkaLI02HPTRknpPPoF7WrO2reLFyPloywFcbbSzO7qVjEzYeY; path=/; expires=Sat, 07-Mar-26 13:22:34 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJ6Zdb0whMhPhUUH96kSZeDYZmoCE1eag0GCkMS%2B5vbT3mkExU%2Be8KG8cFIcIp581DCSZvCYiqWGhcJJp%2FzDKCZ%2Bb%2B4%2Fur%2FacFZBUAr%2BCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcef4f659cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12342,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4472076eee6f2a26d2442e66fe163919","sha1":"ccd8816dbc64fb631e9261d9e3abc01a5810e14d","sha256":"9f1d36f508c35336e45e07f27eccfd99656e25ddf249ddbac0cb7d22b76cbe0c","sha512":"341f10a5077215abc73e5ce138690f2e3818e3609c3dc77810db522f04ef59f1464ff275fd7e9e624a5bb2bce1284e6db457acffb44ba4a298861d24b7c3903a","ssdeep":"384:JKeY/mxvLLWydllpsCKUif0DQM675ZZOQpaZtRRus5Cr3A/0QqiXJV7vp+doj:kvOpCKrX7A6tw/Z38dIQEw/x1ZFxuoj","tlshash":"f442ed23b02ddd6a5b547b40b4c3384ac9ae5447dc0e9a70dc458f8d92ea62ec6e33d7","first_seen":"2026-03-07T12:53:24.909155Z","last_seen":"2026-03-07T13:29:05.651839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/casino/partners/751/platforms/0/games?category=406\u0026limit=12","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/casino/partners/751/platforms/0/games?category=406\u0026limit=12 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1237\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=5pqRCEKuY4qovu9OxGP3vVQS.i5Juf6ipcafF419rkU-1772887956-1.0.1.1-OmROWY7b1R8ZOBqGpBPFg6FOQJiFdO_bz20HrrmGXKxQBctVNNI0m5tx6juMohTKNlNT5VeFCMwXVMa3hkp6nwVXMQSypbN3isxhSV95zNk; path=/; expires=Sat, 07-Mar-26 13:22:36 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iDhoVhs1Tbaa%2Bejx6azYYsw5OVks97tU5XSbikdx3GRzrqg5RMJTwQM4BuE2t6uC6kJtbeTaXTwSKE0P%2BnJ6LJhLFcG1ptwml5wjuOeCNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcef5f849cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5989,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ead840ebef95f38e84085d082bdb37ce","sha1":"675bf775ebad9696ad5cbb98226fc460164e5df5","sha256":"f8eef41f458b4a0fb59bdfc9e10832394c52c02323bd31bd437f9c3048bba0eb","sha512":"40f6a2a53feb0e360aa7588f24a646b4011761a056075329a0eb3f32dbc3794c8b3c099208f8aec88ccfc59299545085c2ecb2dc48e6035175347c1a707c243e","ssdeep":"96:Eg1PG1yd71ea1b41YKYwYYCpx1/3/j1vZYYvxuYYCNCjYYvKUYYvV6Vl:Eg1PG1yl1ea1b41YKYwFCpx1Pb1vZFvB","tlshash":"9fc19f5a4d34faefbb490a8074523c0c9dbe53c26a8dbd10cc4ad95e60e50e527726ef","first_seen":"2026-03-04T19:25:33.601423Z","last_seen":"2026-03-08T10:47:57.76292Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/usePriceChange-Bj-TfIxD.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/usePriceChange-Bj-TfIxD.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FeaturedGames-nbD3TQZs.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1d6-ag3mCw2npbtmxdOFSEd/8Cjo+L8\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ELJTLc37IMVmwkkLRG9dig5n2nj0g5L4EtGT3kXPqSoa%2FvRqB%2BUdAOho28IEJ7mUIgPw47Z40rt%2B3RLj0OEkyNTwZLLrNbXDaDT75rIbFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf0aa189cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (469)","md5":"99492642135904dfc29586f5a12db1ea","sha1":"6a0de60b0da7a5bb66c5d38548477ff028e8f8bf","sha256":"160d16d14d0796311862023967066bbd30ae1df60a89edd8439b29f3b4d37895","sha512":"472d2b18fd235e54a25b47fc1c306d76bdfcd074bed7a28ce4b3048edaf67adece9e581647edc289cdcfcde863900476e9fab87c28cd9e2c76c80350d5e9f922","ssdeep":"","tlshash":"0df05cbe14901c23985f0cc4c26485571fd126d56bbdc32eb230882d37589af06beea6","first_seen":"2026-03-07T12:53:24.910858Z","last_seen":"2026-03-08T10:47:57.769921Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FavoriteGamesContent-CbirymKU.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-CbirymKU.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"ae1-sTLhclPWpj0rgGYjL8NOkn3IQWc\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HR1yHld1WKefAHwcI0h3wZ2YVcg77tjZfW2uLKvg0lV9QbGHbn%2BMSUBXAOScFUOTOnfsjDAnhV0ElvAw1a9wJ%2BOOvxYuC3arr0i0f7XPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2be1f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2785,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1707)","md5":"34f7c75a43ab01f789245fd57ee6a43d","sha1":"b132e17253d6a63d2b8066232fc34e927dc84167","sha256":"4abaf502a72987e4cdf37c4778c2cd5cdd11f95047ecb7ecfd3373d275a7ca88","sha512":"c83eff030e6c29fbad041029ab0507f13ee8a66d179801b0a16e4e25b1b8afc2e531da332e8b1a62670071ceaac0441597a7c3e5d97f45b1883eaa5961f0d383","ssdeep":"","tlshash":"1b51a51140015ff8af8eadea5e27c060197a438c5285c17ea8794e3e3428685713bffa","first_seen":"2026-03-07T12:53:24.881757Z","last_seen":"2026-03-08T10:47:57.763731Z","times_seen":3,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/387.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/387.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/loader.png?v=1767600520","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:31.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /loader.png?v=1767600520 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 456\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1c8-ia8wVKtM84nn6QXS7HVglYAWgM0\"\r\nage: 1284\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ho30tCldkad87mZWr2lLssajbzvp%2F%2FxgdJnY9u8lAbIoBc321aJz1lSHMYdG6RqfvdjlQtCzHwfwy3yWFOSFoQT3GjRvaqMyMUPgMv81eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcde587a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced","md5":"ce13d4aab7656181924146d7eefb42a7","sha1":"89af3054ab4cf389e7e905d2ec756095801680cd","sha256":"393b5575ab9863a7702eb2a6bd7405f3118d0da53ff1a3257d1d7353a056a59c","sha512":"4153a0d45eb10ca02aa1bca3f3dc78529b3d1a23d582ab9f5831ba71b9a5de126253d469d28276160f1ed27de41049491125726144c40e17a5fe2c26a77406b2","ssdeep":"","tlshash":"14f023d69fe31ffaccc05a9a7437c3710c22824a829936149107009c645ad2f8dc4e1d","first_seen":"2025-12-24T22:39:16.322656Z","last_seen":"2026-06-03T04:20:31.988411Z","times_seen":59,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/Promotion2.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/Promotion2.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"382-4HOw4J/NQkT2yGuPIiBqRsSvnzw\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIdtpaR2GjCHUs%2BfOM4uG2eFN9NHOVWCTNjnfMeWqUjDgc%2FJXv01Dv1Q6TBVWEzFB%2BIJ8X0vobHxGCzep%2FNYnNXZuaJ8uaDCx1HadvF67g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcebffb29cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"31cbecb2c7e793078b4a8e43100c2e33","sha1":"e073b0e09fcd4244f6c86b8f22206a46c4af9f3c","sha256":"a7ec0feda0f0f44aecb09628876438cf31a3d33de7393d25fc1b39d6251bf104","sha512":"6762313ddd6985ca71ea5e90b3a05664d0d1a3cebfafa6da07ebff76f62a3c9634d17ac226a4fabdc606ddc5c7c7adbb4628f3e0c8a30d5e5f96e574266d2242","ssdeep":"","tlshash":"7a11cce88739e7b438cd1f4f9a3d4dcf3614261a683de034e73eb9c4a61391c652119a","first_seen":"2025-07-08T23:44:04.701479Z","last_seen":"2026-07-25T08:10:51.788491Z","times_seen":196,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FavoriteGamesButton-CS4ivfe7.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-CS4ivfe7.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1ab-PCxqFmtPRreuZ6UKtXkQoRv22/A\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1eEcQdF5AjkVxMTs5iRrc1fNrN7uZzvyW%2BR9xAdwVWydAjf7LY7f1i%2BVyzzC2%2FcILViAUvLu4R%2BOM48swhRX6G8txkHgZqBeXKDcnaZ0OQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced0a279cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":427,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"b18de2a8012450899ea82415a9c98312","sha1":"3c2c6a166b4f46b7ae67a50ab57910a11bf6dbf0","sha256":"8b7fda528bb825243799804bbc8af252a165433bba921b794fbddc88ceafbc71","sha512":"35d9d81e4e8f0f68205fa4f98395776275f2008a81f8eccf8fa6bb5435d98087e7ec421b7d0b708ac4fb68b102e8b6f7f0c8191806bb6bbc14c2493ff35e9d45","ssdeep":"","tlshash":"fce0ab0bd099e2fa2f422ba01517c438253aa5bce75ce590809a1454397049bc55e9af","first_seen":"2026-03-07T12:53:24.912858Z","last_seen":"2026-03-08T10:47:57.960491Z","times_seen":3,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"1063galabet.com/__swarm/dataspot-wss/socket.io/?partnerId=29\u0026EIO=4\u0026transport=websocket","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__swarm/dataspot-wss/socket.io/?partnerId=29\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://1063galabet.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: vfStuIa9yndsBxHct3h8Xw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 07 Mar 2026 12:52:35 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: fw6GJnCY+etsjK3N/TXbukxgLwE=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AmrYGdCPCf8ONlnYuy8F7DfZ90C2YHy5lrEQRqT6%2BZFsngDZhPj2I0GtBrA%2FzmYKf4GufGNKmVkStq4svaMAZzesqxsQzCCHlvUNWpXEchG9RHLNNQ74MhExrn1MDDMy1HQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d89bcf6da215610-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7641\u0026min_rtt=7606\u0026rtt_var=2169\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2429\u0026recv_bytes=1419\u0026delivery_rate=380551\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=5b9e1d88d91c6f67\u0026ts=780\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":766,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/454.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/454.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:37 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nage: 0\r\nlast-modified: Sat, 07 Mar 2026 12:52:37 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFRBkicz0y%2BmskjU97at%2B0VXy1e9E%2BvGrLNvRupql4nyFA%2FttMGAEKH6BfL%2FGF%2BwCglAe5PASRd0SuoxnB91umV7oOMzlZT9uSjxBeGK8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf748569cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"afc3a4da5fb039d37bcfd50861d4954a","sha1":"ef9130577e78a52760a6d45ab20ce2c155c324ab","sha256":"bb958610492c84590233b0d30c27e5f1d5fc320d4ece0f29c61828eb349b9fff","sha512":"d1fbc915e520885b5baa728288e7508cc8abd0301d36d14ab4d8fe1a5db86c8e67473c97e668cc758bfe1334970b2d4ef6ea16cab64c8160421f1fa05be1cd8b","ssdeep":"","tlshash":"b021eaf33d809e7271c160b9576bebc011c5637f04616384b5e5f2b40d2ae8671d56f2","first_seen":"2023-09-18T21:18:01Z","last_seen":"2026-08-01T05:50:49.044771Z","times_seen":382,"resource_available":false,"data":null}},"time_used":2298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/PromotedProductsWidget-CFAHI4XD.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-CFAHI4XD.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7a0-/CW1Z5yFdqxVcMsx22e8hfKfvio\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBqgHshrTYfKwckApClAP2D3t764tQsNiyIUNJoRZQZ%2BSlCxUj7YP7oaA4adRSW%2BVXAMHW0RRlCUJXp6yx0yvPG1CuSAgOgB3t04%2BEhodw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceede599cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1951)","md5":"03a15519643f45d52bb9962d9881cdc9","sha1":"fc25b5679c8576ac5570cb31db67bc85f29fbe2a","sha256":"93d134bc62d160cbbc1d9a0dd2f55883bfb9abc2d5d62b28eab8c2393df32bab","sha512":"26db438f8ebc4bf38b9897e7bd6be2efbeb93f1475ba91c5a92c960cf9dff1a60bc913243127016a2f3888bf5e2fb7a38515fb22e2a3bce973c86d7387f1b653","ssdeep":"","tlshash":"e6415443d034a279f53a6dec214100c53c163d28d6a14965e0a6bd0ad038826bb62efc","first_seen":"2026-03-07T12:53:24.914577Z","last_seen":"2026-03-08T10:47:57.762287Z","times_seen":3,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BjgPl3QA5IK1JuZYhXx185roQriMTjA2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLUsIeaTxYtYh0LPY3XZ9H6tWvRcK0nSRJ%2BKUmtk2uwvw9yF%2F2W%2FPMYRTIHgFXI4SUoxBeQqgMVBOQ0qs8oDq4SnsyCgn%2BaV2HjFYRSsvPU6MpCSRopjqXq78houIA%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P1\r\nx-amz-cf-id: FzEJvDamJYcCVReQmHCSwZIi4TOsYxmJu_fAfRfPZwX8YLsHyhczTQ==\r\nage: 1585\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"a2363889186e23777b4b704661794f3d\"\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf30e1b0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1831195,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36723)","md5":"d451364fd2d882387a31a6b5265ce722","sha1":"75ddbd0440f4359f21b1f3e99c4ad0a11e00f944","sha256":"a2fcf79eb7f43bd8411c2753127ad9128ded481ee642acc2aa6b91263eff3699","sha512":"69849310c5d5e3326feeafe4c0eed744c262e4a23e65439a564197a2d5b719c52434a2b4d99fd9ec8b01d76c68982592020edb40e335699e3678aea49adafdf7","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJ7P80qIpCFaFIpSAJf:xGBzd6BgJn+w2P81I3I5Z7yu","tlshash":"15358388295ef7500957e0e7e03b2d08d22ec635f847a4409f7297b36ab2357e3ade15","first_seen":"2026-03-07T12:53:24.915394Z","last_seen":"2026-03-07T12:53:24.915394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":19,"dns":0,"connect":8,"send":0,"wait":53,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/TabItem-Ccmm6G2v.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/TabItem-Ccmm6G2v.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FavoriteGamesContent-CbirymKU.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"19d-qu2/00NaJwyhyRW5BIBFHpqY5Fc\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Po7yuDhVMgpnWW1TnqfyM7RRuzD2XlLRv7NsMpDtlzGhTYS9zXomFnL3tuw7dysWAq3jjZl9BvWWZyMU9ESWJ1XSRqqU4ROeKv5N3bSgPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf38fd89cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (412)","md5":"274d3fcc5d12924d6fde4c466910b3f9","sha1":"aaedbfd3435a270ca1c915b90480451e9a98e457","sha256":"ad5c72bad1d274f7fcb583fc7f294829e031f95f393a730131f5e54e5f66e05a","sha512":"25cfbf9f4b969aa4c6a02db1a4e881fe0d27c1304d51c3e34fb46a171cb3df35f4397f600cbdf1d5ca19219d00311b9612c230fa6d8bf5d9e142b6238addbdca","ssdeep":"","tlshash":"8ce0e552a020f3f5982b54d6d26e94c732120998da6588e6e0a22040062e561f65ef8e","first_seen":"2026-03-07T12:53:24.916538Z","last_seen":"2026-03-08T10:47:57.879052Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/465.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/465.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/logo.png?v=1767600520","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /logo.png?v=1767600520 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 6298\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"189a-+HtasizIfsW177Bom7wDr1biHKg\"\r\nage: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWdfNNmIuuSW79OeA5g92jgTlQrNqFOkE36Pb0%2B04IrVf6TzMWbCQ5IJCbofgLr6zkqKT4EdODvpv9rl%2Beut8DOPmsRw0kn2piPZvX%2BZ9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcebef919cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 120, 8-bit/color RGBA, non-interlaced","md5":"740f71b656e07233cd24db82f62080ce","sha1":"f87b5ab22cc87ec5b5efb0689bbc03af56e21ca8","sha256":"c854fc2b538c99190a6a3099c09058d7cc97778984d2d5b462d0b8bad97c103f","sha512":"28a0190a0bb8e7ae3c65e76862548a9883a76a041595808b84ac6c37206dc0d5d340046a243c17b41352fee5d1aa27bc1d3c6f98ba5dad565981719c8adbfc8b","ssdeep":"192:yyXvgn+XKkiA1mF5HWneYkXMKgbekoqDT4f0CbhxkmUl:yyon+XKkqlWeYs2e/2alxO","tlshash":"dbd15c98482bd5a2ca2f6339de062fcd1734c4711209b1d4a35919e9b46b39ebf196e0","first_seen":"2026-02-24T14:23:51.331762Z","last_seen":"2026-03-08T10:47:57.970766Z","times_seen":8,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/getLiveGameAdditionalInfo-DO084QGJ.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/getLiveGameAdditionalInfo-DO084QGJ.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"47e-vTqVjnCjiYjehdmIlYyvq2S/ov8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6iNE%2F%2BFVJ%2BGMIbXI3dKpVpXAv8%2BsP3G5C43y7GqyDFxYRZCbFjjaHv48IrFj0%2FfWK%2FkLGEpc1aOfKuL2RYBwhiyj9cKnDDrQe%2FkEkX0LiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceece3a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1148)","md5":"b97ef20125e23659fd2a41b98b103422","sha1":"bd3a958e70a38988de85d988958cafab64bfa2ff","sha256":"28d415da832f44721f25a4f072f1019e29eac55f146aae6e01204489cce5411e","sha512":"f620902465e72e27bccf7e40caf74a890265429a3bbfc872472fa13b3c14c05b2c356310ab550760641135c51c8aba4d015ef412cdc62171542c4c1b43352c5b","ssdeep":"","tlshash":"6e2114b3606e93bfe9c94d9456b01b31a2b5ba09390445ccbb3cc91928774c4a7e2039","first_seen":"2026-03-07T12:53:24.918735Z","last_seen":"2026-03-08T10:47:57.809207Z","times_seen":3,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.1063galabet.com/core.js","fqdn":"dataspot-bucket.1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /core.js HTTP/1.1\r\nHost: dataspot-bucket.1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"184d3-GMX8SHp2vxZV8Wp/LTOuFfne/iA\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lH6ixWyx9O5qOPDuoi3Ir7Un4gl0j2X1c6JO93BURdxyJzEC3nIoBsHUiFGJQvdn4gEm9nrP09T%2FKD11RIZwZaXMWWzHHPMq3yMOT38XnsPUHrO5XmEfwy1V%2F%2BErxdo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf30ebb9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99539,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0aaec2aa2a2043eac13f5387591d00c9","sha1":"18c5fc487a76bf1655f16a7f2d33ae15f9defe20","sha256":"755c2edb565ccde0411e59ce6a22d781ceb1efb270f0066ce986526316716fd8","sha512":"ae5bea1a9e51e5a99b4696fbae4d2c1c57e7b8c605cb70b116123558c816fab75c55353fa37ce93761dd7e41bd286fa56e5b74c67b5427c7f15fcc68ffbaea74","ssdeep":"1536:GupZPEs9W0ACcNBvMGgMtnf0Cp91V8kXXz2a07REWvT:9Pk0Af3n5p9X8kia07RpT","tlshash":"daa35cc672a160f083939bc1d4750253e32c68653901859cf77ceeea6f29dc6b166fb8","first_seen":"2026-03-07T01:21:42.591745Z","last_seen":"2026-03-08T10:47:57.82615Z","times_seen":5,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"dataspot-bucket.1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1688\r\npriority: u=4,i=?0\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: 9d89bcfaeeb0783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-06-06T21:30:11.571202Z","times_seen":1649,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/Casino.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/Casino.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"50e-8BEGloSGScLJTeB2X1sitGF//mY\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgj8fHgsZPOX%2BRb0g%2BA3yQfbmtQAMM6P9Aep3nxdhlIiWVs9KDRm1UiR4q%2FFkd8h%2FSmBsuSRZue4mS%2BicqeaLmlvlI4e9jhUp58N1382PQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec0fc19cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3df444684921a4a44f2dbdf6aee0972a","sha1":"f0110696848649c2c94de0765f5b22b4617ffe66","sha256":"d4f76e693c5a014a2184795ea113ff8f42a1f7196243728ee128fe81ed5b30c0","sha512":"bc7fb348d4746e017aa074bae5f3b106d6a3db9c1581876ba7db93537b1a4643a8c2695b424ae4d584d03664bfdafe1b3477134f7bc6f5bc142f8a5aa54fd4cd","ssdeep":"","tlshash":"1921dc3d470289f86e455db5e43a0934c69d817ab1c2479cf23eca2277220d8c7ce468","first_seen":"2025-08-22T01:08:50.698252Z","last_seen":"2026-07-23T15:17:13.267907Z","times_seen":116,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/games.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/games.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"525-lpdRr4CS9N+kRQ3vEdxhbv+ZqOQ\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cd3oWHwGTOyhhPVhasMrYeDH15vGsFKVJG8Attw8YWAgvDGXnPDEUtbEgUYs3G1zOFkM9O5hP%2BEv6n1ckZMzjO%2BrBSjipxq30Xz7BD0cFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec383e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1124c704ce353b78a51dd2190edbf761","sha1":"969751af8092f4dfa4450def11dc616eff99a8e4","sha256":"02b58d0aaacddd78f61fcc4a92e72d8526294443ec8e695fe41a763a24d873b7","sha512":"62371f1a27dc5a9f43dc9d738c81641e16ad577f02a50973cd1515f41053160ac5286128dc60ba13ce57271eb462d1f258f830125048ecaad0944f9f5153e39c","ssdeep":"","tlshash":"fe21e14c573150fcfd4fb3e9a32e6b787449f2156823c878c05e45cc268aa4b64dc861","first_seen":"2025-08-01T03:40:47.562391Z","last_seen":"2026-08-09T00:35:02.17114Z","times_seen":1088,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/casino/partners/751/platforms/0/games?limit=12","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/casino/partners/751/platforms/0/games?limit=12 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1394\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=IIhyy9o9Iw9sIwyI1LPV5VZfLBRQuM6SUWZ.t0qBD7Q-1772887957-1.0.1.1-uU_j7z5YuWNJPwp_H1l3VkH8npi0JNZbPVPj4sont3_qVerAMDGBKOQ2qYjDti57wdzKfhQyHRVxWwjCtsJBUhXK6SqNGo8INJoYt5W7PZM; path=/; expires=Sat, 07-Mar-26 13:22:37 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJlyFEaqT4ZPz0yogu4KIcEYeqoYJClja5invwiWGWIT01sN%2FrabJwd0gnfMPFdFiz3MT3u8jo7%2BGG%2FuHlxWzQFtiZOv%2FZCczV4%2Be4wZMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcef4f689cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6319,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d0b0abbfbb0b485016ee6e8830516d87","sha1":"4aac6539c3456356c847a5a79fbb0f76317f2306","sha256":"d0d5ec6fd4c00f1ba69e85b0a919424c77270a8fddd537aa9bf979e87b1ffce2","sha512":"4722f7fe72ce3a53fae8996698ff86d2f4061cf452a9a28c006f0df322d74be0cf154dd03f0ff5fd891e0fe4d44da022276e9ccea661f59ab30fb092f7591e5d","ssdeep":"192:E4FvaSFvvPvxjZcCMFvHe9IeQ1zvzMIl3IephRd1wJFveC1HkRkZ:Nb13xNm49WGwHdAx9","tlshash":"68d1be4a4d24fbefeb4d094178533d0c987e53d266c9bd60cd4ad94a20e60f666332eb","first_seen":"2026-03-07T12:53:24.922659Z","last_seen":"2026-03-07T13:29:05.74888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2444\r\ncf-ray: 9d89bcfac9f2783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEskOIKWizVhJrvVnrMlrV9p-fmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=19+0 c=6+17 v=2023.9.8 l=2444\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b44902a539b26f42ca501a8fc2eca9a","sha1":"c9156f826c8af47c13c4e95a4953987d2c34a74f","sha256":"e1473cf463a4e737486548692bef2ff33e1435ccb7b1d4d9e4428371b57a2666","sha512":"2dd9d9716c420f8d993a738149c8ed8a18bb8ee2034cadb05c3743cbab9ecb9eaabfa064be34e53fad571e80eeebdf7292cb9811a369dd67d51da327fd80fef2","ssdeep":"","tlshash":"db513db78f5778c0ec5c0e4b60017a48e401be0053f0e18caab51dd2069c629d371a8b","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-06-06T21:30:11.65097Z","times_seen":1640,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6341","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:36.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:44 GMT","end":"Mon, 27 Apr 2026 08:36:43 GMT"},"fingerprint":{"sha1":"60:4D:15:F0:37:85:71:03:3A:5F:40:31:C7:D1:01:D3:83:25:3A:02","sha256":"67:C0:9E:02:17:D8:19:0D:DC:84:B7:81:9F:AA:72:31:D5:26:0D:A6:E0:AB:41:AD:C9:26:05:57:7C:19:35:3A"}}},"request":{"raw":"GET /gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6341 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\nexpires: Sat, 07 Mar 2026 12:52:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 151413\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":457141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"86c11890f614da48f83f0b376b7bd3dc","sha1":"a52e35eba7c9dcd311378269c57200073d99aaa4","sha256":"f6f44c99114865f8b6fece1512abcf84e6d64e912323bcfc1612308ce5ede201","sha512":"97ae778671f60408ade0737ac286de5256eab722bfeda3004ce892da83cb0c92393a01fb68823182abaad40301921fd3eebd614d83a25554adb3735586406063","ssdeep":"6144:d4kKfNl3H2vNQBaKI0SfZ8RGw/V0sApXx2ZAJJx:W/FxH2vnDfZ8t6","tlshash":"1ca41ace73d674225396f478503f018ba57b28a2b48cc89af189cce46e7469a4137f7d","first_seen":"2026-03-07T12:53:24.924138Z","last_seen":"2026-03-07T13:29:05.622607Z","times_seen":2,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":56,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-media/storage/medias/galabet10/media_751_e36e767f918c2e0b1323c581778f3e42.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-media/storage/medias/galabet10/media_751_e36e767f918c2e0b1323c581778f3e42.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 3162\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=604800\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 09 Oct 2023 06:12:46 GMT\r\netag: \"652399de-c5a\"\r\nexpires: Tue, 04 Mar 2036 12:52:33 GMT\r\naccept-ranges: bytes\r\nage: 73991\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=Ek1YbmN8lhpxKcJ4lQnuraqeGXMjXBWrkiZNo67m4j4-1772887953-1.0.1.1-DhVCN1r_6prXrMBsWfCgCcYOakO3xNDJ_gFCPM0Yvpt4LhML9Vb0zFV.uVpmHIH6RDeUvDx5M9RBpFXrjHuJJybEnFNH7BOaq2zXfU4AoC4; path=/; expires=Sat, 07-Mar-26 13:22:33 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C4p289syamO8jLOmo6HA%2BhZyLrZe5UulO8NosM7zASDFSBN0cicWU1ASteSL2ruRZ%2F1u0uK8w7pQ%2BddK1%2B%2Fx7o45Vfey6FVt12%2BoaxfN2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcee2c929cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"6b367a99bc86c352b5f45eb76ef837d4","sha1":"18d9b34beb5b22f7b086c4f803e6f21a95c3d22e","sha256":"e54c8f4ed20a3052a3d336f6084e083fb5c040aa67d85c170f0380ed0a74b75c","sha512":"c616fdbcf246d21c51373417c69af47c207bc8e6f36d4f3b3c53b83cbfe41bde4562cb147087264c68d1133c7378f477be104e8ab5c3927f7ca732981416c8ab","ssdeep":"","tlshash":"e8510af5f108241fc7a4c9721d59e0d3bd6af44e942d998f70a0d71e343b0a9d1c6966","first_seen":"2025-12-24T22:39:16.355284Z","last_seen":"2026-06-06T23:43:56.119039Z","times_seen":54,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/games.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/games.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"525-lpdRr4CS9N+kRQ3vEdxhbv+ZqOQ\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FF10JOaC8jSBpx852livoJgnl069hqFXRX6r9DeKV%2F552QvYIW0JCMEbmWNfeLeMyBqVRQnHpylhjPKKCQQYwhoSej2WjEA5A7YkSKbWXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2be3d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1124c704ce353b78a51dd2190edbf761","sha1":"969751af8092f4dfa4450def11dc616eff99a8e4","sha256":"02b58d0aaacddd78f61fcc4a92e72d8526294443ec8e695fe41a763a24d873b7","sha512":"62371f1a27dc5a9f43dc9d738c81641e16ad577f02a50973cd1515f41053160ac5286128dc60ba13ce57271eb462d1f258f830125048ecaad0944f9f5153e39c","ssdeep":"","tlshash":"fe21e14c573150fcfd4fb3e9a32e6b787449f2156823c878c05e45cc268aa4b64dc861","first_seen":"2025-08-01T03:40:47.562391Z","last_seen":"2026-08-09T00:35:02.17114Z","times_seen":1088,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/TvGames.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/TvGames.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"c81-+AYeprpdWZtGP18Ua0B7D2++S/4\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJQNTJBwyJByGm5wvktWBAyeqzipR6vsRjXa8K%2F0r4WhzX4Gly9E%2FbgcUkH27J6Jgfi%2FLd5ibxO3w4Rus7ad%2B%2BEnK8TLWOESWy1u3WZ0sA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec38469cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8cb4d739571507bd6cd3b25a15163537","sha1":"f8061ea6ba5d599b463f5f146b407b0f6fbe4bfe","sha256":"3b2f15bcef3e58ac040feea4d073d42f18e48bb6f399c4f9f89845931f87085c","sha512":"38862ca5d9bb144dfa4b9c0568f05439e788848d45f8891fe508570322d34200ecb0e3f70dd9f1e8ae5659ae3333fe154d439e797c556ee94fbf88f47ddc3cb3","ssdeep":"","tlshash":"41619c87ff3089e04a7c5f99af6840d76689c05dcf731118b23c643e5af7d5884ac9a9","first_seen":"2025-07-08T10:50:27.694177Z","last_seen":"2026-08-09T00:47:56.587886Z","times_seen":545,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-Cdis3cgd.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-Cdis3cgd.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b6b-iyg/BWWaNZ+0nUhgFwr2MOxN9T8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhXvUm19k6znXPuqE7WDAqe%2Fu0TWpb47dz1pAqeIasl1WL3V05AoBupSbkhTCsEMWGQp%2Fq3%2BOJxJG5XBezvNuUKO%2FBoyXma4TQQOYUd5rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2be1c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2922)","md5":"9238e84abc7795316ab493ed40aa930d","sha1":"8b283f05659a359fb49d4860170af630ec4df53f","sha256":"2bb262b81d1fd10d87dfd66c45896a9c629da9772f3c2ebfad5ab36be4801bbb","sha512":"692ca58b06ff7bc23f73388c631b16e099958f9738ad4730faf74d3db6a74b75f4bf10dc3d8d9fdf04853d025365b0f84a81117cd2dfe9e8ed7d990a788401ba","ssdeep":"","tlshash":"4f5130c76042e7f4afe748e6429e10b064374e5cfe1f44a082be58864998792e35bf8d","first_seen":"2026-03-07T12:53:24.926335Z","last_seen":"2026-03-08T10:47:57.855849Z","times_seen":3,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/944.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/944.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 07 Mar 2026 12:52:35 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGs9UpxR6hnpWVg5%2B9k8LcrgjDSUkHMEb62BsTNzP1MygkxENEThOwW%2FSvFBBzvDWFr6DjJJvM2aj64EXu8KEC7w7HECtAhTTrd1%2BPh7sA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf7586f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ddfff9d5ccdad2adabd2e10886be1a9a","sha1":"00470d3b972fcf703999a7c0f3cf55e585b3976a","sha256":"2b01aff2b6cd9693e7938f3f72ca832280f963d160269ed089ab263d0ffa1742","sha512":"0f891050b574350a5fea4037f8019ea7ed7b7c732bc0b29ac85164a1da7c4791f669656da591e5a993bc6a667e8fcf94c8a93466c1b9f6f806092cef0f6958a4","ssdeep":"","tlshash":"17312ad75914fa4e365b759ebee000445e2376ffac8ab00808b1b4f7c142f0a03a1bad","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-01T05:50:49.407384Z","times_seen":68,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2176\r\npriority: u=4,i=?0\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: 9d89bcfaeeb1783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=16+2 c=0+1 v=2025.8.5 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-08-11T09:52:03.033663Z","times_seen":3367,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.btcoservice29.com/?type=json","fqdn":"geoapi.btcoservice29.com","domain":"btcoservice29.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:31.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice29.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:26:52 GMT","end":"Sun, 26 Apr 2026 10:26:50 GMT"},"fingerprint":{"sha1":"B6:84:B1:0F:9C:9C:B7:42:55:71:86:33:49:F3:3F:AD:99:9D:3B:53","sha256":"15:20:8D:77:5A:89:1C:BD:65:25:95:9F:29:0F:81:1D:73:00:9F:5D:AD:BB:AF:65:9D:18:2C:F1:87:54:2D:22"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.btcoservice29.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UbjLfjsGcPLHxnSpXKSRblwu30yvSOdEfkghplNgMl9yxuOI8wtf%2FHtxI5Pg8HBtJetfs%2B6XUm%2BojMCfZIsM3XC72CcFVT2lyeVoQeW54Wfp1DQNxQRc2Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=nfHUS72J_bM8pGhZ0jZnzGbfd.PtiLBWXAPtCz2wbGc-1772887951.383335-1.0.1.1-KSiVnzFvVN891Jk9YpFAjwJaGQ6j.4RdRsFgS0r69Me6RKbVLd.V8LRXOdxakPwnhHyhRi.dI_SAI31a1LTIDcTVCXb._WDQP3M60uosVygPSp5MZAXmhDAsnnpH02TE; HttpOnly; Secure; Path=/; Domain=btcoservice29.com; Expires=Sat, 07 Mar 2026 13:22:31 GMT\r\ncontent-encoding: br\r\ncf-ray: 9d89bce02fb9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":78,"dns":46,"connect":1,"send":0,"wait":94,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/tr-Vrn7Qn4-.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:31.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/tr-Vrn7Qn4-.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"5b3-DX/vHzM/+iSuHo7G6Z05TNqjySo\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W359srAebPJsvno91B5gjqZT5Plxwwtbbo%2F4bPDdA2RWHXc3uJolsRVekDcGwFr%2F76ZZzrem9KPkCfJnRA5x46jYkYMsVmPWM5h0neG95Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce1b8cf9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"ede1a2404e15572246d22e9d02047c9b","sha1":"0d7fef1f333ffa24ae1e8ec6e99d394cdaa3c92a","sha256":"0f2cf05a3919a7a59779bbdeddfb7e49038aa3e50857bf3c61da436dac5eb74d","sha512":"5e30f339fe587d6f599040074be1bf998ad003804d2ab2cc25ff52caebced9cf263d9e96bfe5ac95b1da52da36d7f47f348ac4c31f8507dfbd100a5968f9e7f8","ssdeep":"","tlshash":"fc31a44d2906ebb2cb016987882f1f04f41d2b087136f1709be0d421bab09ed807eb3d","first_seen":"2026-03-07T12:53:24.929327Z","last_seen":"2026-03-08T10:47:57.829372Z","times_seen":3,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/if-defined-CWaLTnLW.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"cff9-3CQS8BSHCmzdXT/mRzShI3Ky5mw\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3AOYxhxGlOo8NxatJqFaEmA2fzxhT0dHEkT7aiGDivazwo2jTUOeMF7OiqneyMSlSMbKxxeS1P9cpc4XD3pGODHkD5co8bKXSMwLuxsPZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce78df39cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/bookingBet-SQC_5csA.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/bookingBet-SQC_5csA.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"ed4-tQw1bFsIA33g85vrd8lVvAePHPg\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfHolIc%2FyvDfWfjgwqn%2BUIQdgt8jGR45F6whA%2BJbzMDSj8ra%2FqTEhTtIkNUu%2B0HO4Pf6g5dNh3W0Z8FLGeCqjid%2BpYaAgIiUj2OLz6xBFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecb9659cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (3795)","md5":"f00290d73eb89859b6e72a9f542488bd","sha1":"b50c356c5b08037de0f39beb77c955bc078f1cf8","sha256":"6eeb087a45791ceb96afb8bc63c417b760a57667a96ceffabdb2a74068a84853","sha512":"2590990857adc7d1fb92021d6933ce7e21ad96242d487c9947ece4f3b06ae3e8cd430643048fb0a21e28043a6b30966ad73fa44933d982c6b8ec805295a38ecc","ssdeep":"","tlshash":"1e71e664fd70907e67f2317df4de7b426b2c4ba871a19a40fb6b5d0841848cbb534638","first_seen":"2026-03-07T12:53:24.930256Z","last_seen":"2026-03-08T10:47:57.810253Z","times_seen":3,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/HorizontalNavigationListItem-BVePVD40.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/HorizontalNavigationListItem-BVePVD40.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FeaturedGames-nbD3TQZs.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2d8-sTs7KN0LmIBlC0SOt+joSrru4pg\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBvPVo%2BYeQdiGOmBH3jABn%2B5EuYnJ1HeE938IPdbC6hGp4knsLk9T8gMAvB02qBCgqY65ijeZjXH8kIWbMN82tPD8%2BwdTSFCnbCXFu1GBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf0aa129cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (727)","md5":"a7be236c08f8b027c5de7a2d754e0fea","sha1":"b13b3b28dd0b9880650b448eb7e8e84abaeee298","sha256":"902423fd0ee6bef69ea2bda1e4f85c5c59dad8812721a29f90b85412457a9045","sha512":"9186e95eca9d6659b26f479188605d9ad9baab2c8894256ad41df33ed257584996c9794ea075a2dbbf8d2ab8d43362563127dba63496648b454c134b5ea8010d","ssdeep":"","tlshash":"1801c002e014db7c9a2b55c86b9d1089b1479afedf382cf1a0f4b11209344593646ece","first_seen":"2026-03-07T12:53:24.931276Z","last_seen":"2026-03-08T10:47:57.766427Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_8a1f24e57b59177d99a8b21ad2454ebc.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_8a1f24e57b59177d99a8b21ad2454ebc.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 218594\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"355e2-tGYvmVroeRtRfQXMEcGCDOtfBBw\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TB7sLEhExvBtAZquXjMqwZOHs9w%2F7z7O3JMGPmMB2GLmo6M8%2FwHryFsttZ6BQAAt%2BMh9vj4hzMlg2QmZfTimOTTVoSlIRgkxCQD8U4iiNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf51b3d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":218594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"017aeb5d7b6f842bb41a9769984558b4","sha1":"b4662f995ae8791b517d05cc11c1820ceb5f041c","sha256":"a5371e2b878deeb15a63beb4386ac5c38db5c2305d08afaf8c7102ff0ddbeb74","sha512":"02f9c581936f725e562928609396f228fcf5c64fbde71dd46b6f329e46f9eb3a3486a5e77b193af3621b820f9fb7ee8151ef561cd683f807456cc16229c67799","ssdeep":"6144:Ge5fmiCshDpj/iQAvZ0t5YZOUO4aqkorO+:R5fmiDg1R0HYZC4aOh","tlshash":"b824231abb59393688031a619416b5a1f238a4f3f7140e7c49eb6dc7ade670bc917388","first_seen":"2026-03-07T12:53:24.932328Z","last_seen":"2026-03-08T10:47:57.916824Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1057,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /loader/fasttrack-crm.js HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 13:55:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: X9ovE_PVlm7QTMnZs7pgGdxk3XrTsm57\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxMwwhCiPoobhoV3V%2BZ9kedPkCHBvx0QyTzCg4lgl%2BEB1AR%2FzaY76iWLl4n1W5VpTaXCKt4yt94qNYwSuZ7GkUzOyvdgh9eqibPwskTWRX8htWsQLN3hyFUhNI8hxg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5e29eae3156522edc7886df59287259c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: sRDbkR-LbAlPYSqnaE6V9Xu1Ra9iJHQJQ1F-Cv0unOc8ZGgj6wq3og==\r\nage: 526\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"0e62b669f80928b5dac9ece193256095\"\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf14d0a5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":284,"dns":251,"connect":1,"send":0,"wait":17,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89bcf16973783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4368,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1594744c430c14575dd987b06663f8af","sha1":"6ae3a00b9045083fc80dba950b908f9e7513e211","sha256":"db922d127c83813e54ac9a7e4fb61318bdc34765fde199edd3859da07f9b1a04","sha512":"6dbc4888f6eb430e5c148b063707a5488e01f7a4ffef184ac67db37cb847c0d69eff429b0c1bd3122ca4b1594229d6f4f600497011a876d5ddaada4d1fb9569f","ssdeep":"96:nNSNbh/YiOQxX+1A2teUB7SOMVMrhIa1WUqrZurozkhLQtwN:8OQVqfhSPbUK6J0i","tlshash":"ec9110b79f444a5e2b2407c9702d3e9c855e250bcbc09ceaf0c0cf2984f9eb967559a6","first_seen":"2026-02-01T05:09:11.282943Z","last_seen":"2026-06-06T21:30:11.817911Z","times_seen":246,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":280,"dns":243,"connect":1,"send":0,"wait":69,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/DataspotTracking-B6EJqyf8.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/DataspotTracking-B6EJqyf8.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1fe6-n+ju8/jliIe0h6v0nAM/RGgaVJk\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7d9yx5o1nX1qGhm6sZxyjNHYdU0d7xLopTB0EJC5FR04LuTVNI41NzXd8G%2Bjrs5KfXvjDZH5oZj2Be6ew4ecKtxwQMKEmVsXeTuU87L7Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcedab799cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8166,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8165)","md5":"dedb443041485b1b061d159168ec9ebe","sha1":"9fe8eef3f8e58887b487abf49c033f44681a5499","sha256":"7b731c0bb8d0983ea9e4fc8b93542b370aeeb365e3c45804f65e291153189ded","sha512":"62fd9b9728360a486f98632f35b9e63b7db2c299d6bc35a9e80a7ae8ec74455fb9de19564756eb6cadb745d58e4bf782e1d0701ee8d2f4f066b64bb2911e4c71","ssdeep":"192:v0wDqXQcaXE/ucCOi1Kb0cHHnBxCHenNvuvXvqvxuhqVeDt8VZuS:cAqXQcaXE/QAxCHen5Q/0gh8k8juS","tlshash":"8ff10555641e78bc6033c6ad0d5721a244387051e2329de076aacf5a9e3d9c28ff77cb","first_seen":"2026-03-07T12:53:24.934631Z","last_seen":"2026-03-08T10:47:57.952873Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.1063galabet.com/configs/928de3c284a560a4ec2990544700741b.js","fqdn":"dataspot-int-bucket.1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /configs/928de3c284a560a4ec2990544700741b.js HTTP/1.1\r\nHost: dataspot-int-bucket.1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"9a7-61jEDlOhXjtV/WDAcnblR54HqJ4\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbjRIKIOGoh3gTT24Sz8Dt9GMdWuaMu2OHvf72STFsUNjH%2BK15ToADwkvfrhnq7Yhxxllsi4A1Q0zoUujdJIoxdk96jMEAzZTK%2Fva%2Bp0MG3uIv2MHD%2FsUM10NCIle5gWsxTz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcef8fe69cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2471,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (399)","md5":"1e2a6c49770a52100388701459104032","sha1":"eb58c40e53a15e3b55fd60c07276e5479e07a89e","sha256":"161586af456353acc3ccfa1748aa3886066bf8f3c5614a5c4db0e4df676adb2b","sha512":"b601200e6ae6894ca67b3afc195d37fea9db1864900cb63b60428df3f106c70ea2e379566d43c326c3b7d439895f609866b2c4a54d77e7a2697f066c05db6a8a","ssdeep":"","tlshash":"aa51f31578e21e7300751435a55768c0b422bb47152ad88c3bce760c4f7db7995b5b8d","first_seen":"2025-12-24T22:39:16.396562Z","last_seen":"2026-04-26T13:53:22.552111Z","times_seen":29,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"dataspot-int-bucket.1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 401\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=0rX0sIDhGq.gBzNzpturNc3Z8xIFZfXYjVeDpJiP3IE-1772887954-1.0.1.1-ycYIS9HJAiah_dEHUEyEeStf0aIIsaoHM2_8FF3sCJpBqlgDudWxYv3p19AoAt0JsyXLFPkBQMDRGZhVNLUne.P_XW171vUIchvpZR4OrWo; path=/; expires=Sat, 07-Mar-26 13:22:34 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3jv0DjiUTcxSH2Ti7kvfbmkskhn%2FsJytvNfdehu5%2FIn%2Bsl5aezvc3UtlucBu3BEg4B%2BIvEWKdBx8k%2Bkan9gmy793vY%2B3zhz6xr%2FVgydPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf018d19cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":442,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"78fc1c93600bf9ef21431d63c957c1c3","sha1":"58d2d8be510c3f9363cd0bc743ffa1eaea53fe99","sha256":"d1dce7ab310baf406c36e804faa144babc7c09492cccf9900b4e41cbf7743a50","sha512":"03a38976d6349398c1a3735eda63b0b3df24f6c23d2ff60f6c0cbcbd0ae303216d2d44d4ee3fb42a45de1422adc248a0cf589672feff6f2e7a122e652203fe0a","ssdeep":"","tlshash":"79f0dc37972ec92477504290c04f343a185e028cde04ee6c999dc37044e83b9a1220a9","first_seen":"2026-03-07T12:53:24.936348Z","last_seen":"2026-03-08T10:47:57.816114Z","times_seen":3,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/397.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/397.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/908.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/908.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:41 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 07 Mar 2026 12:52:41 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Py4PaQODxoqfwqxnAt9Fehq2N6bOovK3oMgGbzGV4OGdPTop8P1%2FcwnywJw8e9ulVCE1VkPW6S2N5seu08Pq%2FA96QCafsQyZCmbwJWtJNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf758719cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"1199fdb58ac1a99e043680569092e756","sha1":"067f690f935c456537b41a9d406d31ed5a2e5006","sha256":"2e00ed03b86d9c78f24528cfa564a5d5ffe5d393e78880072a7d0da3c14f24ee","sha512":"9f544d3335f0a96237d702614e14c6ab78f66e5fdfc1c2aaed148dcbe60a36148a55c06f797b576975e7980e483daf314fee9b613f158de3067d1a2918650b46","ssdeep":"","tlshash":"2b21d8c03bca7f77b12ee5e55da9256780b62596618b534166f2e0928b182e100c42e5","first_seen":"2024-08-20T15:32:18.948122Z","last_seen":"2026-03-08T09:29:47.426902Z","times_seen":24,"resource_available":false,"data":null}},"time_used":6424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6420,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=ff83b5d6-c81b-46ff-a19f-41e5f7ea1cdf\u0026version=238.0.2.32.102.113.2.3.2.219.2.9.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=ff83b5d6-c81b-46ff-a19f-41e5f7ea1cdf\u0026version=238.0.2.32.102.113.2.3.2.219.2.9.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 1861\r\ncache-control: public, max-age=600\r\nexpires: Sat, 07 Mar 2026 13:02:35 GMT\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6116,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (6083), with no line terminators","md5":"f4791aa91186ee5a3f9b349e118da2cd","sha1":"576d72de55bd436f91cf137589c66bdd1691da1f","sha256":"cafe7a3bfb032e3b2af03ceef1aec68601d89b67e3b483a87d66ee2a740028f7","sha512":"040e211e1d3b12c23d22e5742b5d962322e8184ffb5387bdf2ca9c38db202489ff6dc4b875591a9dffefb3c55e01f9e991eb2c1c89933348044c0a1acf9eab22","ssdeep":"96:80hUsXhUA4hUwhUcaDl3acJlt017gWrZSN+/9YXtJ/xN7QcGIIKTe3+/vCaq:FGsXGA4GwGJD0gSZTqQ1Ih6iKn","tlshash":"32c17526835fc8bb7377925a62cbb70f3108517da5f8593fe464ca7072861c7d202e9a","first_seen":"2026-03-07T12:53:24.938281Z","last_seen":"2026-03-08T10:47:57.919715Z","times_seen":3,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/localConf.json?v=1772887800000","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:30.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /localConf.json?v=1772887800000 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"1177-VN35mVLPmw+r2CmSgSUCavRXJAw\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kM8DebrAqqy2WoIq7Lm2i%2FMaW2eIOZclJrg6Q01LBfC0GCotZC%2Fp9WKM%2FTtJHg3T2ot84G06cEcUnRqmhWd4TOY8Ptt5r6HIZA9VByVBSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcddaf039cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4471,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b406e9c7fcaf80e5ab91f27ea0f0294c","sha1":"54ddf99952cf9b0fabd829928125026af457240c","sha256":"a327cfe81199467e7773a331449db596ff5a5da012ace64d4ae1889c757bdf15","sha512":"50bb2149cb4177578ffd52d275d2f399922cf5dc4fe93ec9e32b840532d1dc7cbf148a136fc965a7e353fab249d5849f33dba3146a47b9f8053a574661b71f4d","ssdeep":"48:YuTyTbGhzyQnA8qA+9nIok/we+NPhwxbwPAjgCfk/wWp3Copi279lMFDQJSLhHan:xu2ByQA8qAHTwAsAjgCuE56szUn","tlshash":"7391cc9d31458cfec75eeac3788b679f3042811387982c06c27cef4c5676f19650a2ab","first_seen":"2025-12-24T22:39:16.189594Z","last_seen":"2026-07-16T16:07:12.928095Z","times_seen":87,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/walletConnect-CiycSUBb.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/WagmiConf-CYI_Wcna.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7ce-4NL9XQUE1X1LJPUYsilS0smIp/4\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJ3NSx9jCa8rxw3LZhlW%2B0xEPu33Zikr2bq1N1NV295D2cWjwp7LRiv5%2F3qF%2FoGZ8BM4F2vazaXVX9dCa9OVHVrFS7O5ZlmZe5mHWPnrmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce6dc729cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/GameSuggestedEventsWidget.B3VqF5zK.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget.B3VqF5zK.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1ee-X27EksX9+CXe1JEPOARmuyOlAzI\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XeZKlO4RWc8eklo7J9s50NXmcnh9ifaeD55AiPjEuEP%2Fgx3Acpbf6HMhb4jO%2FRgwjWrlv0pMgwOVGwwD6VZyTTFU%2Fpao%2BUYAQuNdhQbTrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcebdf609cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (493)","md5":"3d3f0fe9e1a11530bcc5b93d9a483aa6","sha1":"5f6ec492c5fdf825ded4910f380466bb23a50332","sha256":"bee73c23ba614c70cddd4a90715357b4e5247e83db72e74289f80e59f6349fc9","sha512":"3fe221c3be766eda2e1f32ce4d86509e3766421cde94b5098cce1e9a4dd253c550901190f197e517d10e96322ac66e357e727e78382480d92bad2d1efd53d670","ssdeep":"","tlshash":"a0f0e9218f34ed35a4ac03ed2a77005a5760e195bc5039f86fe1bf158a087e61ce82cf","first_seen":"2025-08-13T22:32:23.57413Z","last_seen":"2026-04-29T13:47:02.73876Z","times_seen":41,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/InternalDataspotTracking-BqaVTBCs.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-BqaVTBCs.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"fdd-F7X7D+UN/vCIFrq1rovV8zexzcY\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hXwl3EzZwcOj%2BRBriznfaI0BEq8ObRT%2BS%2BwEffSFNpcT6MOHBev%2BRlq3axsqui9pj50Rm7%2F5c%2B%2FP%2Ffi8wwwm%2FNFoM1T1Ytyg4havwileQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecd9a79cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"433e8baf8e198fc1e93914fd19811faa","sha1":"17b5fb0fe50dfef08816bab5ae8bd5f337b1cdc6","sha256":"748fdd262952c788c37e6e45617b15010b467f5f99dbb30db03357fade7190eb","sha512":"f4dd64de9ad1c1a474a85ebca40043a5e98b362141bfb6186f39985ba9ad9540043ce5b89edd66d064b54a8df53b9eea557244452c4dfda793a87e9a3983850a","ssdeep":"","tlshash":"2081841fd83c09b1706489ce5877a997c5a8388e51c0c8f0603a9aae561be04d7f6ed7","first_seen":"2026-03-07T12:53:24.940061Z","last_seen":"2026-03-08T10:47:57.866411Z","times_seen":3,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/SmartMarketEvent-D3bjm-1x.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/SmartMarketEvent-D3bjm-1x.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"393-I5SWjeXQH8PVWqXv+ZdP9SrJTb4\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aj6h7nPnbcQJdHVVhqzurM2IYOHOCBeuI0uFbiZbNSXFqF%2FywMIu0Koylfd8ta3ss6RLvMAYn9okg9dQpJfOEZ5ZeGZO752sw40oW6pEuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceede4f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":915,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (914)","md5":"d37f428b0dc20b678a550613982a39af","sha1":"2394968de5d01fc3d55aa5eff9974ff52ac94dbe","sha256":"9283a44e360e474d43ea28833ce526d29a5d073945453d2de7a7bc5d018b1209","sha512":"e4a3c6ae224b2d694e18796f4eb3c61124a2618af0785b6ef80f5d4b2d28a456938bc569bb55faa545fd977eb5c45b93ffd83bb7680c34841d754888a7ad8b31","ssdeep":"","tlshash":"b911cca7d580723a0a32c8bdd1109b42426813d7cb600269e58b86f573ad0fea25de99","first_seen":"2026-03-07T12:53:24.940986Z","last_seen":"2026-03-08T10:47:57.858737Z","times_seen":3,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/UnavailableMarketEvent-DwcMz1ce.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/UnavailableMarketEvent-DwcMz1ce.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"134-isYAq0rlCojmuXl7L5VmHsfvH2o\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYjS1rwAtJEm3aQGbrCwRsqgAAvx4I2Ph8bUMWvqYOLW%2Bto%2FjJW5ih%2BDmosu5WnvIYIMIUnHHyQuKdzONzMBGgp5ig2KyVxlAWnrE36Vlg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceede529cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (307)","md5":"f1decbb002a5500e1881cde9897f3c61","sha1":"8ac600ab4ae50a88e6b9797b2f95661ec7ef1f6a","sha256":"2dbc3db80d158b8c6bda40ba723665db2c03a7c5f7f421d7978451127aa3d929","sha512":"42c2d402f7d62237c28a79829c122ab7f3cf6e2586836c10384c6f2724356a3167b2ff6556c7c65c31284bb1ab28be5ca652e559e24b1cbb7416ed7e0fe76fdd","ssdeep":"","tlshash":"f1e0cd1a6144bffad5251cccce394b5d511307a5c7e945d3d1a910281b34266351aaeb","first_seen":"2026-03-07T12:53:24.900256Z","last_seen":"2026-03-08T10:47:57.789944Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index.6hr6LgI6.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index.6hr6LgI6.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"4e4-6s/qza/fhzjzJcukzZNSutKCmk0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvCY%2B8on5JTHwb%2FrjHQxxh02YnsjGAWu1XV46S0XmVumaiDKloU85nIB9hub0D2BTM1TFO7f6fXpSPAFNQTctR233FoUKYDQUD3OZ26%2FCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf20cc89cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1251)","md5":"d03ad7d634db584e4aed770123954f9b","sha1":"eacfeacdafdf8738f325cba4cd9352bad2829a4d","sha256":"7dc01c1d9e89862143b3c4cc81a2255e63cdb8412bf7421061819919fc2c6bf5","sha512":"e4641ddc5f100aec535f0f87f4b4cf617ff4fe450de4ed993b3681bec62023646689f9f12edc7b03c4dbf21e0b98081e4e8dd5b0b0a13970fd25946f953bde37","ssdeep":"","tlshash":"f0218ad7190b14feba73a6bf454346ebe5238c5bce63114ab6c21729c4827a2422245c","first_seen":"2025-10-29T09:08:38.623149Z","last_seen":"2026-08-10T15:32:58.857872Z","times_seen":1526,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/tr-Vrn7Qn4-.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:31.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/tr-Vrn7Qn4-.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"5b3-DX/vHzM/+iSuHo7G6Z05TNqjySo\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2B3mgWB00VSh1%2FK9P5B3lnI5jw4KqGjTQSfwKctZrH0jw86GgM0NIRXaR4ZadMpURuBfuMSxJgZpHbH3MQfsW6PoJwFbERKFqC1nrq5%2Brg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce1a8ca9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"ede1a2404e15572246d22e9d02047c9b","sha1":"0d7fef1f333ffa24ae1e8ec6e99d394cdaa3c92a","sha256":"0f2cf05a3919a7a59779bbdeddfb7e49038aa3e50857bf3c61da436dac5eb74d","sha512":"5e30f339fe587d6f599040074be1bf998ad003804d2ab2cc25ff52caebced9cf263d9e96bfe5ac95b1da52da36d7f47f348ac4c31f8507dfbd100a5968f9e7f8","ssdeep":"","tlshash":"fc31a44d2906ebb2cb016987882f1f04f41d2b087136f1709be0d421bab09ed807eb3d","first_seen":"2026-03-07T12:53:24.929327Z","last_seen":"2026-03-08T10:47:57.829372Z","times_seen":3,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/ButtonWithAction-OOcwu9ST.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/ButtonWithAction-OOcwu9ST.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"10b-GQAds9n+2ZXXiYTf+nROqaD6ULo\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jyYM6B6GfPoRaO1RA%2FoinJujI%2BuNNWV15Yzbk%2FBsFlRlG5QDZBRowPcW%2BA1a4cMgJ1B43mZEfuZiltFRaZNcoEkooH2E%2FvjN2%2Bh%2BgKksw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced1a339cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"378d5d4560363423adecce451e2607da","sha1":"19001db3d9fed995d78984dffa744ea9a0fa50ba","sha256":"fde1696cfa636a21428c7a2203b44a3bc38b37afe2cb7ad99b2759bde8c5a6ba","sha512":"a449cb56c2cf76af15975e6a0581463d2950f3b63c1f5910a99cc7554e9fa9d749dc9b346dcb7b478aff91beb71c1cef46311d8ce53aee58158d2a36cff944c2","ssdeep":"","tlshash":"bed0950f5455d2f907c57aa0513b812126256e74f794c551c058244036315dec16ea3f","first_seen":"2026-03-07T12:53:24.942388Z","last_seen":"2026-03-08T10:47:57.864505Z","times_seen":3,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-CHoKJwGn.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-CHoKJwGn.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/DataspotTracking-B6EJqyf8.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"173c-Y5J9ENCY6ToAL5aOJLlgGtOTtjk\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3G2Om3wEgW99DjWbkhyPmaZZg1z6davoJJryXyQ4HBxvjFTChwFArQlcO93hTnYjDbIO%2Bu5g8PftbsGHC4S%2Fz8tolk%2F9wKo6iLasFoneWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcee8d709cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5948,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3085)","md5":"e202258c2ee48070d0d88dbf9403bbf6","sha1":"63927d10d098e93a002f968e24b9601ad393b639","sha256":"beedf1ed2e271da702310f2de309be950cc873ce2fc6bb70010a9fa7a91821e4","sha512":"15a716eb9b0938d355822aeb6d1bd37f7b2e4d75b9eb42bb0ce7dd86e418c6f4c834f1ef9f126b80bb22ba2aaa124f57a95468ae55014e92381a30ea4e20ab78","ssdeep":"96:e1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:l+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"50c1a65631907530c6d204a6914f42aeef3e6638f00f50a0b23f9c6d3ba1525daa3ebd","first_seen":"2026-03-07T12:53:24.89776Z","last_seen":"2026-03-08T10:47:57.834918Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/JackpotPoolsWidgetContainer.Un2UkSBp.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer.Un2UkSBp.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1d7e-QHKDTeqzemssx8QAlvXnKN9Veeo\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UitnFl7fOuEaYIvctnelYLvS7unOAGFObpsweNMNCLSzhlnYdX5JG0q507K47zl3UoJHDxuA983bnI8Vt4wf5FJxS5wG7a0jb%2FRKwXTSNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebdf89cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7550,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7549)","md5":"a8dcd19925315b7c339bddbb44a1ca1e","sha1":"4072834deab37a6b2cc7c40096f5e728df5579ea","sha256":"ed02af32aa166d53da0d7a050bdb294a8c18dff986baaaff132267c0b3e0ee96","sha512":"ba60b957a619e1c3f99e5159d67aeddba810a78eba10abc9c86b7dab967d1d54b53aa06d36c565c7bc4e1cd70843b33e186a1f5cbbdebffae057e7fe7ab9eaa3","ssdeep":"96:Xnxo6ZIBmmohvoDxTTFQPHf9bzsV/bV/YgV/FxV/QV/OV/tV/IV/EVSVqV0VOVBC:XnX1Xx3erZg+qTPyw","tlshash":"10f1731352ab33ac6eee6937a170e75c7b3c083dc3131659adaf124a4d9aef0061871c","first_seen":"2026-03-02T15:10:58.403672Z","last_seen":"2026-04-18T22:45:47.728226Z","times_seen":8,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/useNotificationsProvider-qvUrF8Ex.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/useNotificationsProvider-qvUrF8Ex.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"5c-JfM2fftO5+nQgLMOYk/D73ponLQ\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibTa71VXn%2BPRjmZBin5woHemnwWRenWubgoF3wMksX6HMl%2BJfYVwD0fYSwo5wIskC6xZduHYxsbqhFchk57TYLGmt%2FU843quOLBo3pq5Rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceece259cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"96c0ec5f839a0377ac4b4c7e3c4ed42f","sha1":"25f3367dfb4ee7e9d080b30e624fc3ef7a689cb4","sha256":"fc097b72053a02d757d2b1c9d91b2e09d3d5899337e953ccf233b497453531eb","sha512":"6a7909eb6c7ebfff333e095dba85036faf6427a7fb97ff540f509da362a11ce27d8acd1787f7aba2bd9c1b2efdb43fe68e06c589315034998099ed3b65cce6a1","ssdeep":"","tlshash":"5eb01223049057f0610108dc11245c3a0b31093c33518ab09030110811e40c9831e991","first_seen":"2026-03-07T12:53:24.896106Z","last_seen":"2026-03-08T10:47:57.759448Z","times_seen":3,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/450.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/450.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 628\r\ncf-ray: 9d89bcfab9b5783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfaRKjj98wG78-Q94g8ciN3whHfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1019+1 c=0+1 v=2025.6.1 l=628 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07a8ca43077147f4b93899efbe31ed8d","sha1":"bb87180866adc635991e4867c8222fc4387331ba","sha256":"b22b238c613c9bfcf13e8340213b734fea3bd0b9b2fe67648e3ba6decc104e89","sha512":"6d9a2235c65c224e78bd78025eacb630cca9bc9c4a838fd540de031cca2e8c442460eae186359cb98dcb1f1eb867414c6b5b77c78a2f3e1be6f6f36b254111c4","ssdeep":"","tlshash":"90f062be0d21c29ae04842881a0c6c5da472a9b9fb4424c4eaa5f7a67c0319433a54b0","first_seen":"2024-06-15T18:00:08Z","last_seen":"2026-08-09T02:39:29.019843Z","times_seen":2322,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_2fbcd393de6e2087aa59ff73668d3cfd.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:45.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_2fbcd393de6e2087aa59ff73668d3cfd.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955; ajs_anonymous_id=ebc478bc-e7a4-4a6e-af89-8b9dfbec23b7; _ga_2CT6DSEQTF=GS2.1.s1772887957$o1$g1$t1772887957$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36902\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"9026-r9Xe3E2bbbIewxSojM+P/bSn41g\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMREVSGKDxiNPXv%2FtM2KsMYAZeWC%2B6M5J9pXovohay1tJwkHYboovgfD2Chh5a7rH0%2FW02skyVch1kSlYvfEaHMetTfvY1rwvrcduN4EqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bd358a3d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":36902,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9178dce074f6f5da14aa962d2d1eff1d","sha1":"afd5dedc4d9b6db21ec314a88ccf8ffdb4a7e358","sha256":"952f7cb545a4d304de18f0b58657973281cf89598d682dcca9fed33c513ce9b6","sha512":"30721d72dc204df72ad17431c1731cdc5e2f16d3d5406c3799e64872fabc9891c2028086ef9d7628b75a26fb15f839b822ea83f5fdf76b6200d7127c88bd9de6","ssdeep":"768:llaVUjckpH6fDslCO+7tpfQL3ocEvIIkr0wYhr8R0QfnAutxKF:llDjckpHyO+pfQL4cEXkrqr8KQPMF","tlshash":"94f2f18b599c03d0b9bfec30ab2983f7a45955cd44b0416abf8aee70d2135f94b86358","first_seen":"2026-02-24T14:23:51.465777Z","last_seen":"2026-07-06T22:32:46.479661Z","times_seen":31,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_8e1a9dd6f2c20486d9a74d6fc24c1437.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:45.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_8e1a9dd6f2c20486d9a74d6fc24c1437.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955; ajs_anonymous_id=ebc478bc-e7a4-4a6e-af89-8b9dfbec23b7; _ga_2CT6DSEQTF=GS2.1.s1772887957$o1$g1$t1772887957$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 155714\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"26042-92KkhID4Qb6stS2iKxqfJCXAhro\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B0RRVfpnIDGtwEFEmIDIyOgCC6otV%2BAwbUTizrU7nH9JP14zvGmYTKlN%2B2fvmTxZWRlpPUmrusTJn6GFfgJKVTaeABbk4YC%2FwFxeVn2ZHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bd379e4d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":155714,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c4d9f52b259aed16382fd331ade70b3c","sha1":"f762a48480f841beacb52da22b1a9f2425c086ba","sha256":"555cfdf4e02405bbcabf3eabaa349be0dae1e581fa3f9e0bc9ac6d7cd091dd8d","sha512":"cf45168622333516ca9ddfa97ff696478cf03c90e78fb95fdc2b376adfb0e850e4df200447f318b7f10b226ed2eccbc2c749d8c5bd7e8eb8c77d1398d63c4281","ssdeep":"3072:JiWsUXuPrmpRkl461Fm8czxEQPNi6rMfgdyLFwBKov6oNEh/b:fuKpeF1exEQ1LrA1snNEdb","tlshash":"04e32254af90c8e0907f7327e06e1c4dae90b43b66ee5c242d919ebc68d10d37396a93","first_seen":"2026-03-07T12:53:24.945041Z","last_seen":"2026-03-07T13:29:05.633482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":715,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/DataspotTracking-B6EJqyf8.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/DataspotTracking-B6EJqyf8.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1fe6-n+ju8/jliIe0h6v0nAM/RGgaVJk\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0o7FzfqRq5VDSXRkrTLSE%2B13RFi%2F8kgA%2FX%2B3g40MkyMU8LGi47jl%2FLgpyIvaWqWX5beV4M7NWkZIJR1dUnip7pVEP5uwh9HoqhsBLktBlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceca9589cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8166,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8165)","md5":"dedb443041485b1b061d159168ec9ebe","sha1":"9fe8eef3f8e58887b487abf49c033f44681a5499","sha256":"7b731c0bb8d0983ea9e4fc8b93542b370aeeb365e3c45804f65e291153189ded","sha512":"62fd9b9728360a486f98632f35b9e63b7db2c299d6bc35a9e80a7ae8ec74455fb9de19564756eb6cadb745d58e4bf782e1d0701ee8d2f4f066b64bb2911e4c71","ssdeep":"192:v0wDqXQcaXE/ucCOi1Kb0cHHnBxCHenNvuvXvqvxuhqVeDt8VZuS:cAqXQcaXE/QAxCHen5Q/0gh8k8juS","tlshash":"8ff10555641e78bc6033c6ad0d5721a244387051e2329de076aacf5a9e3d9c28ff77cb","first_seen":"2026-03-07T12:53:24.934631Z","last_seen":"2026-03-08T10:47:57.952873Z","times_seen":3,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:44 GMT","end":"Mon, 27 Apr 2026 08:36:43 GMT"},"fingerprint":{"sha1":"60:4D:15:F0:37:85:71:03:3A:5F:40:31:C7:D1:01:D3:83:25:3A:02","sha256":"67:C0:9E:02:17:D8:19:0D:DC:84:B7:81:9F:AA:72:31:D5:26:0D:A6:E0:AB:41:AD:C9:26:05:57:7C:19:35:3A"}}},"request":{"raw":"GET /gtag/js?id=G-MCEY36CK22 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\nexpires: Sat, 07 Mar 2026 12:52:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 151475\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":457219,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"dddb1b860c6944f6890f35993aa01688","sha1":"0b0ca26496daa445135db553c3384bf729965726","sha256":"535e6aa807d6385ddc256328970920f6839702d5cd9b29f22506c44cdc2fd135","sha512":"d81aff11e18b3d243f6d2e01cc5e6534c52c26080ec5302386c39d6c534d3b769a03374b70d7b7f760d30348ff2fb8f76dddc5013afd27c2dc72836a9447cad7","ssdeep":"6144:vMOkKfNl3H2vNQBaKI0SfZ8RGw/V0sApXx2ZAJJx:vj/FxH2vnDfZ8t6","tlshash":"58a41bce73d674225396f478503f018ba57b28a2b48cc89af189cce46e7469a4137f7d","first_seen":"2026-03-07T12:53:24.946207Z","last_seen":"2026-03-07T13:29:05.590704Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1072,"timings":{"blocked":454,"dns":121,"connect":28,"send":0,"wait":67,"receive":78,"ssl":321},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/sealassets/49ed08f429633e05619309b05ec88e62-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-07T12:52:34.084Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /sealassets/49ed08f429633e05619309b05ec88e62-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":76,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/VideoBingo.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/VideoBingo.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"7c7-DRQPwAswP9IyUCGOA8KMz5hqOcc\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZRrDNeWuw9tMdxOvNH4xHL5Wi8WXCaCVy0ZRyY0WE7btDZVpXffpF6QHoK2Si7V3x2Z3baBq2bRRwOtayin3aPxDW5FqSl3sdGnTU2Kbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2be349cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cbae8aa582bac1aa011b5159e475a38f","sha1":"0d140fc00b303fd23250218e03c28ccf986a39c7","sha256":"dcd44096973914fc9f8fdeb79a3dc5379403c3d1411854e634ab7fe444578271","sha512":"05e2c75c337a1fad9f895fa0b1635725d1681e774084ed34084444508df8dc8501c01644b19ab4f9a948c1e5b6621fd67df4fec41eaaeaf187d1a9e90c58244b","ssdeep":"","tlshash":"e24133d5e7b0a6ac2ccca59d6f2148d7350ae0bf6db36a5ce22edc580b53e1c0611c99","first_seen":"2025-09-19T18:19:26.310809Z","last_seen":"2026-08-02T18:55:38.496245Z","times_seen":85,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/immortal-db@1.1.0/dist/immortal-db.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 19803\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.1.0\r\nx-jsd-version-type: version\r\netag: W/\"ee25-pMHxoJFNs7/Bok84dZEhK2Ol9UM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\nage: 1136393\r\nx-served-by: cache-fra-etou8220189-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43474)","md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-08-10T15:32:58.760263Z","times_seen":457,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/948.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/948.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/lodash-P_UKhmef.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:30.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/lodash-P_UKhmef.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"28697-OszRyCvtfBRmVgnCvjmWWNh9Wrg\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o68M6Bg5p6rORFxOYgYef2%2FLXwZg%2FRl4vr5gyGzP2cFEOPYCXf274gDNC8TwUenejFbKFFSWJDvWKuCQRRmSpU8oT0b7kh3TRNT%2BBp5EHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcdd0dda9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":165527,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35522)","md5":"7355d513125039aa121eeeaa5f416932","sha1":"3accd1c82bed7c14665609c2be399658d87d5ab8","sha256":"dcf61c3b1c412b9033fd69a0dc4d9a236534d871549d79cb7826d71542b3f4a6","sha512":"0cb083377530c9f7dda16f437767725974de5b7dff482d4d7cbea9257bb9ee416feddafd9c5b7f99334f5bd2b87d957c4b5a54c06a025780a35a764c3912a2e8","ssdeep":"1536:dHPJrcfcPiT24/HpSOEoRyLmmE6HZxEehT3npdV1j6EFBKgTtJz7GSTbVCmddVK/:dAcYkoRr+DKAtESTbVRhXMF","tlshash":"bbf390c835d3f4a283a7287440bf084ff23dad65a84cc554e1aae0dd7db89198277e6d","first_seen":"2026-03-07T12:53:24.948693Z","last_seen":"2026-03-08T10:47:57.772618Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/favicon.ico?version=1772813990022","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:31.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /favicon.ico?version=1772813990022 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1b67-K5P52fXMuAnkVOgS+d+nzpqwKwo\"\r\nage: 1285\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8e8IbY2rZmwSmnhs2JUgIXgcdJRyRVx7Dup25wkHmcrJ05oFcuXyKA18rZmpR2RizZ%2FGdgyvXpurkzMSSorJ7VMDhf6ZvmzLYLZevFzHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce188679cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7015,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"96a66de67adef28337580739eab71404","sha1":"2b93f9d9f5ccb809e454e812f9dfa7ce9ab02b0a","sha256":"1b029ff1969f7f867742ed30370ab8f76f58f3a00c102b51740cee61a5bae6ca","sha512":"efd763159644683e2aedb05be3a541cc4792938d3755e0b0a1e8850c6240e04c3ce03e465ac5160ebea03b7ba0e9a948bff584fb163ab1db1677453bcb13a7fc","ssdeep":"192:AA9risdBVS6QwidYsQ6ujzwAzxyKjuDqc:AA9pORYsKIAz0KjYqc","tlshash":"40e19fc31979540617e9f2df05c4386ab74ca88793a2a4f927b931343ff19cda613229","first_seen":"2025-12-24T22:39:15.963833Z","last_seen":"2026-07-16T16:07:12.998292Z","times_seen":119,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/withPanelButton-Dfy2A7It.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/withPanelButton-Dfy2A7It.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"441-uM7kZW2RhvGQyZWdpmtW+PNnDMY\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASaj6gfruhflok0z02PQdt0MRPi01p20KBcAp3d%2BzoyP%2FzXpaWkxqZEj77VPNqFpsL0DJE4b8OjJji8BzH69zmxoqnb0yKFHmW6G5n%2F5MA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec890d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"b68cdaa28be25ab33a4f3b67e98c4440","sha1":"b8cee4656d9186f190c9959da66b56f8f3670cc6","sha256":"a1ac916cdedd060dd8eac93c8849ee59f2cb4392960ba6fd8cab5078e3149b8e","sha512":"b31fcea2f039d8f10acef2b3be54ec649ba589f41f5c648df6c08a3e7d37c7749dd79616f620e8b3b6d788e69af9b301c8c9d281bc2d9df41d3f398fa4244570","ssdeep":"","tlshash":"2011f0e5f5c4a9b1e4c41188577b2cb2719b32d9dce114d031b2c8da5fa8048995e9ae","first_seen":"2026-03-07T12:53:24.950902Z","last_seen":"2026-03-08T10:47:57.839029Z","times_seen":3,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/Mobile.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/Mobile.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"155-d/D86R6CN5t1NAvvi885UJ0cVes\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Buig8dcwsOgppTMeQkZJxsVOWyxOCZPCc%2FNxN38HlH5rujXFPFZh2DbQLgAtmh5jArcSYlwgUj%2F0RvelU5nnAxkwRecwCjCmgx0%2FHdAwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2be469cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":341,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b140aef15c3a0e2328970dbf675bda24","sha1":"77f0fce91e82379b75340bef8bcf39509d1c55eb","sha256":"08c2a0b66d7c329ce1e9e957188e98e920311984544c6d824a29cb8c73d668c0","sha512":"06c19a313efcafa154900f41bd864dc6bc5764a82dfaee82c91ec6fb360d61e0da1a1bb8fa6c58dd8a14f6cde01b85fe25e0ab56a9ba3009f4be67f99eb1ddd5","ssdeep":"","tlshash":"dde078e5b250d40ab5557d53b3fcd5a35e69f0d1da940c39713e791e0fa3034128d14d","first_seen":"2025-10-24T05:32:28.297874Z","last_seen":"2026-07-06T22:32:46.839395Z","times_seen":57,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-app.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jD3YWZG5NtFt4BcajB7OMpiBQ.UUxxmD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbifWx30M8xx6tD5y40vZrDIuBBm12K4Clc7gz0%2FEmZzd31Dm%2BeAcyaGJ7RIN1jQ3mQRGNO2JDw0znxnuWWsnAteY%2Fz7OewmDl4OV4sI6uVgim21N9haNJTQrxa2hQ%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P1\r\nx-amz-cf-id: FVdJ3fnWrCHuOe_qZY_Q3es4MIYVWYmlXTNIuTnrbkuqK5dn8OA9YA==\r\nage: 1584\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"c2b96460440b1358a43a511913fcc46a\"\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf62f140daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75107,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/456.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/456.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-B9hXZUKv.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-B9hXZUKv.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-CMdBczWY.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"26774-b/tKB7oWU7URMAW0yl+EqUUtn/8\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2B085l3YJPM2yEMfY8XRdTmIo3%2Fy%2FZkOhsoN31Vf2cu4lBNLVxTjwGtLNzt8wtbRkhDTaGU9h31j4YFDaZ%2BfUim8GwEpn8cs%2FCsSzpj%2BLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce78dfe9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bdab058fe5f0a31fb6755a8c7629ec6d","sha1":"6ffb4a07ba1653b5113005b4ca5f84a9452d9fff","sha256":"38b63b3ff50d95c1444608ea6befed32efbf459474f7161839ae46aacd4e8a14","sha512":"3104334f35801f4146d5b0edb6a3ea4fd4db11a3abe68dc08acfb44736a60088d13662ffa9acd1cfbf67238cc07812906521ced2373b4974acf8dba0f134253a","ssdeep":"3072:mkwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:VwhFHU4HNwFH7MoOWexZFHV","tlshash":"33f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-03-07T12:53:24.953131Z","last_seen":"2026-03-08T10:47:57.936367Z","times_seen":3,"resource_available":true,"data":null}},"time_used":850,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-media/storage/medias/galabet10/media_751_d9ae3c894307358d99e0d666e91a8018.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-media/storage/medias/galabet10/media_751_d9ae3c894307358d99e0d666e91a8018.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 3192\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=604800\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 23 Aug 2023 05:40:31 GMT\r\netag: \"64e59bcf-c78\"\r\nexpires: Tue, 04 Mar 2036 12:52:33 GMT\r\naccept-ranges: bytes\r\nage: 73991\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=BwoHwt3pq1MSM1aKi.LIUqQx7PZBxZhrYrYND2JDyo0-1772887953-1.0.1.1-d4xwMuaJ1okikdx85QLDztxxyEsbZvhTz6fS39Zf6TgAcLKVUJf0Pl5k8KBf27HT1CAbbayBBe2.OjslNIf7AQZ8UCIMAZTD6Ce7EMr7DH4; path=/; expires=Sat, 07-Mar-26 13:22:33 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8aKf%2B5ekKQ%2FwCkSLO7yDcTP4yvEQ4oo0q7H7y9mZLjwn5wr8VqMiZX%2BGlHBTVAiU7TYJyDwvE3YBZUZYaxWpTv0KlMs9llFIhNf0qlwe2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcee1c919cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3192,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7abcec36faa73c3c894b361fd966fcf6","sha1":"46f3c98f019e59da6263dc8278edd18eeb5e36eb","sha256":"1084b9e09a8774b738e99814bf9869be91b3c154d88bde64c9eac5e399153b19","sha512":"bbe0c85875f870eafc2ecc05b3c21d5a8c0022f1fe92224e65d3fb3f11d68f5793947b810d00c612361e96bd113a510f2329aab9437de415f5be3e1551800cb0","ssdeep":"","tlshash":"ca616df43548b234e081f076129690e50436be4e219eee17b597737cbf2515cd0c7149","first_seen":"2025-12-24T22:39:16.116509Z","last_seen":"2026-06-06T23:43:56.103943Z","times_seen":54,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/HorizontalSportsList-Ca0fFWfC.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/HorizontalSportsList-Ca0fFWfC.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FeaturedGames-nbD3TQZs.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1a6-4N3rjr4LZj7arcqSfg/4xQkmoyw\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oD5JfWg8l2gevVIsIqwYUdxqJi9eM3jX7YA1wuOpTyJ9MhA6uUvX07EDXGjFGzwZjJ6uNaQ6My2teY%2FiOrVIaKxFVE4eQGi1RMcpLiVxHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf099fa9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (421)","md5":"0c239f2023e85f6910b6bbda9cebd050","sha1":"e0ddeb8ebe0b663edaadca927e0ff8c50926a32c","sha256":"91c13028b754fd9b450efa191ad27bac18238c337993c6c6508316d65957f4ee","sha512":"bec44e03d25d9c07250c6754c97bb508a438f5e0fea0cd3036840b78871df9335e000f806ee7d36761e9909b19bc77f89b835ef70f76c566330fd4e70f778352","ssdeep":"","tlshash":"97e02b8298658ef55a1a84efb95c24846122057cef5766b4d294a2182b7408bf66904d","first_seen":"2026-03-07T12:53:24.954868Z","last_seen":"2026-03-08T10:47:57.836709Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/454.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/454.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-CMdBczWY.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-CMdBczWY.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/WagmiConf-CYI_Wcna.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"466b-gUrRjziI86gKd5Y1L65N/QNw3rQ\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3WQGcYrFFxQXRThXMgYavpGPOHUHkGwsrute5fl5jDg5d93TN%2B5Ta2wRXsvrr9IFFgt6kl1wocvEe3qswafXnnRtGWsT7%2F2f9TBjQNDzvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce6dc719cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"2a1eb82b37c24ad125a732175b2b9b91","sha1":"814ad18f3888f3a80a7796352fae4dfd0370deb4","sha256":"4fe2eaa5b1e32d7f41dae25e31be6f1fade008f97509ee5765e06b536b9ce72b","sha512":"0925cd7c81d483ad8e16238edd68c752f4e107050a86a78ec5a8ad23dedbcf0f0c687132cb989882f4a4451429ef482dd25e32120c8b3f21ac11c5c8ebab1d8c","ssdeep":"384:0Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJH:0Mci408FFnJrIjE3D/OY2E0xqpc1NKki","tlshash":"6b8209d0e2b4f7a642e86add80392074f2258c28343dd0f1b6b6adda70664ca956dd37","first_seen":"2026-03-07T12:53:24.955699Z","last_seen":"2026-03-08T10:47:57.805428Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/Popular.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/Popular.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"6b3-ii5pU/fxbjjSxPoSc93CF81iPV8\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSKA8SBqOVp9Sh5AhKJyFqZpt8GLlJNgbQDA2ESUYWjCNHaBg6GYT7ReEyveJgcRF1In2OUdGMo30cVCUKVZZTpHkNvt4GzgpTE8EtSJtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec1ff29cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c5f467071e8144988f2ffda2539a7fc1","sha1":"8a2e6953f7f16e38d2c4fa1273ddc217cd623d5f","sha256":"c8979e47d3d8b0c74956b41914c9b7628b362e6013d9f040fce1ea2219e64857","sha512":"1e58d1f9a594b6d9b0e3968c137216904a37abef225ebf00b88d6764df8c8ff0226f5f6307a23e48944071bdc36ed786297968db893be66cf7ddca778015e6c3","ssdeep":"","tlshash":"463110e8da56ebf43c54a30ef7386cf13157085b78d38224052f1e8a23dd519afa8862","first_seen":"2025-10-26T18:38:27.855792Z","last_seen":"2026-08-03T17:16:44.669007Z","times_seen":70,"resource_available":false,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/NotificationsButton-BSOVhjLm.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/NotificationsButton-BSOVhjLm.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"22e-OLsv9b506NDRSuvSmTYJ/OM8F8c\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3AFDAwtoP6rfTZMuGNbBdYR0YemQ1tQ2BmJGEVSakbGZR5YzjtpVGIhHtorc9Ek0ln2tMYj5G9N8QVp9a2boXSan67C5rqiOQOcT%2BDbfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced0a229cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":558,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"10f2299bb01af4a4e5dce9e406cc155d","sha1":"38bb2ff5be74e8d0d14aebd2993609fce33c17c7","sha256":"c51bf3d094154526a746ccec10401bd4b5575d34837f84752a352d281eb63113","sha512":"32f2fa4d7316ff169cf6bfb4ee542744a0c337ddb74f20875e87abf145a94031f7c9aa40822884941312e9326033dfcbb3ad9f054a8702b408f4b76dbff752b7","ssdeep":"","tlshash":"f5f0264ba668d4b41f834a30623b9026253b693cde0a944040e62c55177005ac55f99f","first_seen":"2026-03-07T12:53:24.957388Z","last_seen":"2026-03-08T10:47:57.815189Z","times_seen":3,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxf4UgrJgNsIuhkVTDSx1kLIeX_KV_gm1q9KjkrL1r6AOtIrjsatFTh7lM1v3WyEpI6dBvzCyw\r\nlast-modified: Fri, 06 Mar 2026 10:48:52 GMT\r\nx-goog-generation: 1772794132666339\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 100997\r\nx-goog-hash: crc32c=NRaSkA==, md5=w5YFxiX/xULAxuL652IGrg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 32759\r\ncache-control: public, max-age=28800\r\nexpires: Sat, 07 Mar 2026 20:52:34 GMT\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":100997,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"c39605c625ffc542c0c6e2fae76206ae","sha1":"693066e92cb2dd6b9c6984c7241bb7a6f94d2ee8","sha256":"d4066a3c3a481dc90ea4b2280075e6fe6a88a7457dbe235d6765ce2f71379d98","sha512":"f7e5cc7bb016ebcdb05a1fc5be83f17a1196138b1534ee862c91b61f45fea03027a0268c5490e34b856f509b4afc20d217d20670151043ef2a0d91b4a155753d","ssdeep":"1536:E5hboeri/BevgjTcAhWeypynDx4Wwwpw84Io6eFlIUYog8:Evboeu/kYHyp0DPheF4ox","tlshash":"51a34ada7282b03453f786e7a17fa216b3392818340d8420f17cdd6a395a9c79177f6e","first_seen":"2026-03-06T10:57:00.109634Z","last_seen":"2026-03-10T07:35:49.483109Z","times_seen":318,"resource_available":true,"data":null}},"time_used":631,"timings":{"blocked":305,"dns":273,"connect":1,"send":0,"wait":2,"receive":2,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-03-07T12:52:33.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /public/proxy2.js HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 3781\r\nlast-modified: Sat, 07 Mar 2026 11:49:32 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uy9g3ij812KAMkTOJ%2FsPDANbXA%2BeBVZu1YoYzlUYT03gAtBPQOXlhk%2FLLmWWb6ZkXuHJaCS5Gx9TjJBEHpXWIfk0hD%2FI%2BG4eNXv62Ivqo4MbhZqu3YU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89bcefae9537c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19498,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-07-01T19:33:43.411538Z","times_seen":59,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"1063galabet.com/__swarm/rgs-wss/jackpot","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__swarm/rgs-wss/jackpot HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://1063galabet.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: joIXDdCwhTBhERQ1gSgwfA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 07 Mar 2026 12:52:34 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: jggOOA1Obk2MGo/7wiwxyzFi35E=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HhJTVWecqQipQlPp3FFB7z7oXAiz9ECLqE6X5FPw%2FAkboyJ1P3KqD2Y7JaluOeidk3tZYM4se6gYsa%2BNo7t0Cq7Czmf06WtxPXG3uWfNupfCcwc%2F7eiB95leF%2BaKEHsnNOQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d89bcf19bb59e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7522\u0026min_rtt=7508\u0026rtt_var=2137\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2428\u0026recv_bytes=1372\u0026delivery_rate=381604\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=690c6f86506709a9\u0026ts=710\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":699,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/TabItem-Ccmm6G2v.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/TabItem-Ccmm6G2v.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"19d-qu2/00NaJwyhyRW5BIBFHpqY5Fc\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UteXOPz3zclJ4sYdstDeWDBWf5vgMV8X7x2DZ84Ep6Axx5wTNmc9ki9KP%2FQkvgjk6ZZyhGcn8k8SZwitO%2BnZAz%2B5dsv9e4RScseMg9hBuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2be2b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":413,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (412)","md5":"274d3fcc5d12924d6fde4c466910b3f9","sha1":"aaedbfd3435a270ca1c915b90480451e9a98e457","sha256":"ad5c72bad1d274f7fcb583fc7f294829e031f95f393a730131f5e54e5f66e05a","sha512":"25cfbf9f4b969aa4c6a02db1a4e881fe0d27c1304d51c3e34fb46a171cb3df35f4397f600cbdf1d5ca19219d00311b9612c230fa6d8bf5d9e142b6238addbdca","ssdeep":"","tlshash":"8ce0e552a020f3f5982b54d6d26e94c732120998da6588e6e0a22040062e561f65ef8e","first_seen":"2026-03-07T12:53:24.916538Z","last_seen":"2026-03-08T10:47:57.879052Z","times_seen":3,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/img.png","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-07T12:52:34.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /img.png HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: image/png\r\nage: 3779\r\nlast-modified: Sat, 07 Mar 2026 11:49:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxZGdQmFuziGoG%2F5LoJjEl14G8eKYTXHMhkn2Y4COs06ve%2FJ3oLNHT%2FnS2WQjfVb4ufuCoGQCBW8UF7TB7SILS9eAn04nVl60Sj89qFU79n3tSCNbNQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d89bcf42ec437c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"2ad3a45d82e0940f4c3dc90088721bdd","sha1":"a85bbcda89334914c332b2315aa94f32c843c867","sha256":"bdeff9d8a5ad9b3cb7dcfe91fe91080359bc5a836d18d2f78e1d308c412d87b5","sha512":"06a4f493c0b3fe9ca7ecbf17347ce0aab1e3447c4c62e2876b945fd13f40140cdf11b66e8a799492d8709ba21ccd90c54c7c5f446370bbc7e2579d0b0477360f","ssdeep":"768:VQRzoYMic5jrKBzf/csKDh/GxEsBJWnO2iPRvzLsiWY:KpMVjOzcPVOKJn1iPRHx","tlshash":"3ed2e12fe1997b7a550136f649372eb5124b0e5a54c3f878c31c68a8c217b08cef5ab9","first_seen":"2025-12-24T22:39:16.249591Z","last_seen":"2026-07-19T15:19:37.892402Z","times_seen":86,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/events-C8SUJwrU.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/events-C8SUJwrU.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index.es-f3BQBIkH.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"17fd-tE4gc9R9+nFxX9IFOXy9oPb4l5o\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPyaJBEITDB57pwyJc0q2FVkMian1Ikm9PAJhmbM%2FlxjCvHyNankR5kg5ZoKR%2B2lbOBJfp8%2BhBH7%2F8GQzzcQ37FqZkXRhjcYF2611kQRmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcee7d3f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"ab24183712c6a3aed9f1a2dd2afd03ff","sha1":"b44e2073d47dfa71715fd205397cbda0f6f8979a","sha256":"dde30bd91722beb3a9bc828f4c64f3da6e275747a168f8d7edf5543f636dd925","sha512":"f8107020b86fd6c5c91c50b16914b5d2046e52951695d0b2ef2db87c411ef78cbc250186613bc97276af3b483d8271d9ce7e26f8c0825fc4aa6bfdf3805d63c9","ssdeep":"96:md9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:m3IM2sWMtBq6n3PzH","tlshash":"0fc144ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","first_seen":"2026-03-07T12:53:24.90698Z","last_seen":"2026-03-08T10:47:57.802002Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoGame-BkwemMy5.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/CasinoGame-BkwemMy5.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"16ee-z9qEGLVO1An9064/hx47ouQ0wdg\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvgC2wxlsQV%2BjLf5J%2FH%2BXlGloXrA53MiLkk58XGPqAtMtmxjy5IlSv88ypYCT%2FvO4fvnT6c2C%2BOLxSp3eIsZK99bNhGXjO3JTmPfU41VJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceede569cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5595)","md5":"c64316e813c93bf4567843c97af4f5a0","sha1":"cfda8418b54ed409fdd3ae3f871e3ba2e434c1d8","sha256":"ea3bdaea5eab58a52470b1c12e5b864dad6a2f2811ed9b29a3c66cd3b656765f","sha512":"652654b688376396e05a4b9eb87806572822962257cd7bde8f3523fcd62959a112e2f5fc40a740b9d4892f8751348a06d655252d6b0dc9cf8cc5842e3acc410d","ssdeep":"96:jpX6LDqh2iJMeVZhH+noczxF+zZZ9LNbUMM+xA5Z9gvWwBV6aV+6bK:FX6/qhCexetGFhbUMFxABbaV+6bK","tlshash":"0ec1a545e024ebbeb83a08d9982f102574192fe5de1980b5f4bda839313c15db527bdf","first_seen":"2026-03-07T12:53:24.960495Z","last_seen":"2026-03-08T10:47:57.858102Z","times_seen":3,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-07T12:52:34.085Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":74,"dns":1,"connect":1,"send":0,"wait":0,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_d74a4ebe29a311acd768d7a041714545.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_d74a4ebe29a311acd768d7a041714545.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30648\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"77b8-E5Ru4s2Mn/a3TOgE/8lQsG07CW4\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZIG0znI4et%2Bxu1GD5fbBkN%2FwQ57OdmrZFPgWHNqJ2t%2BoHwuQX0bTlk67zHjMOZvAILF6aNhz7uXT6oTKkr7b2QnimcyAqbLeKpH%2B09PlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf5ed059cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e44c769c8b50867b3c5a5f351efe25c","sha1":"13946ee2cd8c9ff6b74ce804ffc950b06d3b096e","sha256":"ba8112aeb4f696d5320c61972a04ed6a623bcab169a49bf3e4c15309c1b8e013","sha512":"26c9ce08f0b8b8059777d5dd806b09613006bc84cedc0ff3ee4b8c01e3e1b07f3a5e06a698ba2674a46128901ae5dfff43ba656124bb8a6ce9b135d6008fb378","ssdeep":"768:wj3t8z10BKltBMdANvhvUsEDcb4f92KK4cduloRN1YfSh2+:wjY10oVymvU9Dcb4fkN1Yfy2+","tlshash":"0dd2f1f45e14f4d273822d3b6783643b64a7c0ff2e9b5db1279a007d9e36859540e28e","first_seen":"2025-12-24T22:39:16.17862Z","last_seen":"2026-07-06T22:32:46.729407Z","times_seen":59,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/387.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/387.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nage: 0\r\nlast-modified: Sat, 07 Mar 2026 12:52:47 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyZWO9oLGKDjyO6ZO3WqCWOg39BaxkG0LNX1WDJadULkha6fhwBfBwcDG3O%2BQFMpXactOfPaC%2Fd%2B%2FVMPch5NIorUafM8modODsCoMH%2FQQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf7381c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b16f64e207e4368dede3fa6b06ff0e5c","sha1":"cc79b7af6a799d1c4dab98341c43a96638ae1588","sha256":"c28f5b69c14fa6cfd0ab8cd0cb5e5c6cfca7442268ad7c90e055104202987b61","sha512":"25f8724eb3ed32e6fa01a80126d735644e7c9c447aa30e69e0c43e877108349abcea5b47e5df524bab0f597fda0d6206bfc256ecf563e2c195c6b196f9924043","ssdeep":"","tlshash":"ec313c981f2d28bdb7c08d2289704853b4fb57d55dc33744273dd244ec886b97179790","first_seen":"2023-11-04T19:13:32Z","last_seen":"2026-08-01T05:50:49.443715Z","times_seen":499,"resource_available":false,"data":null}},"time_used":12458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12457,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/456.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/456.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nage: 0\r\nlast-modified: Sat, 07 Mar 2026 12:52:47 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bJG4ySv2vXO2Zk1Z7uGHgQB1wUlminKLRQVwfz2mVplIv3FJu7A0YFOXBeS8e67iS4T23VnL3SgaVwXEGgHfVBnTo%2B5Kmj%2FugsvI7ClIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf7382f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1061,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"dc142b4286c2f4c542da122edb7851e9","sha1":"d20c2d8239843bf6425c414ddc5482e59a591a54","sha256":"0af21af658044292876f71a35dfe316b9dbef457850d6c671c617e06ec680da6","sha512":"d2c1775972d49129037507f0a17113ca9f42997707fbd705b018a87dd57bc4758b6942602fee3c9dfb2faee3baf26b174d16f4d6dbde638770625ea2a66467a1","ssdeep":"","tlshash":"6c1186d2bdf8302da5a8212bea435d95a591736526931844af59ea1c0307d48c487594","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-05-08T19:17:56.083287Z","times_seen":204,"resource_available":false,"data":null}},"time_used":12830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/fonts/default/Roboto.woff2?v=583","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=583 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index.BC3qGf-p.css\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"faf8-1a8G5XndX0APgDtOJLwQIHQLC4o\"\r\nage: 2\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aaw0hw%2FIC2ykSHxcq6s%2BhG%2FHC%2FfnOF18kUbuZSsvHuQYh0y1PNQbzMdatL7vd9DDD%2FlzBzTG42AW0D7C0il%2BJqK1lG%2F7RvR1WU0FGZRV1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf85a999cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-08-04T13:12:00.038078Z","times_seen":2800,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/payments.json?v=03/06/2026-20:19","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:31.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /payments.json?v=03/06/2026-20:19 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"1b4c8-/YHPoTvdd0M3jr3JMmFiP/fAOTs\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FGt41uKo97f1qfdnJGpzOIycXWbnC5oIrmKi49OgJOAOdjXp278yE2%2F6zNMCqFD9UGAl%2BkC%2FLFMC6y3rWHjWnR67Y6y7CgbyZYTNt4AGyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcdea9339cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111816,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a44c839a8ca8431f6822e4dffe420728","sha1":"fd81cfa13bdd7743378ebdc93261623ff7c0393b","sha256":"dbd9f24a460055d0cb0d20bc85e7f5c9da0d439b61c991f87d0b3469b2e58a39","sha512":"42d08bd9f1cc6dda02fe594931e7c898888c267cce6c10475471ef673e625db44e95eede177358e0ca99f171fa173cf6c3945a02eba5844807bc7dc4a075b42f","ssdeep":"384:qSgZJGtBV2vn7JNdjLV/6+34n7JkYPhiEmnXJJby5yFh9ztQX3ltJirDcf7t2uQ/:QjB62YME6b7rEr/jPLe/ZLv","tlshash":"0cb3e1a4d8690ce7198572e468bf9207766046478e2dbd4eb75cc82c4fdec0fadb426c","first_seen":"2026-03-07T12:53:24.965058Z","last_seen":"2026-03-08T10:47:58.014265Z","times_seen":3,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/BetslipButton-CnDz10B1.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/BetslipButton-CnDz10B1.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1a2-ThbVBgb2N95WaTBZ0K4M0RPAN9U\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7q1hKx5SYyHf%2B8gIjSPMdjx9CadKz7iDjOXfZm42y1CMwLdFGMvbHGe5rH6v%2BnD3Uu6MTNaKYVQhYZC%2B01j3F%2B%2FfJmIPWzHm%2FD%2FQWjZMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced1a379cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":418,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (417)","md5":"699ca84c626a612deac359f1dbbef5bd","sha1":"4e16d50606f637de56693059d0ae0cd113c037d5","sha256":"cc4f024678c7fd9a2f4407de4edece80cfb1a0eb6fddfec5047e1bc12405715e","sha512":"286a02f623b4ca7487a0f971470a448055e5b29d725865ebfb0009469625b7d37abc2611af95f456d3203b3d2c2200e95312cba3520716eb70bbf15d1d0eb5f1","ssdeep":"","tlshash":"a7e0f147894cc2fe0b461e9111068112353756bca300e691c0b93c527a7458ac45f97f","first_seen":"2026-03-07T12:53:24.965988Z","last_seen":"2026-03-08T10:47:57.825416Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 709\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=JFD34aDTSeix9.wYt6Z5B0O9DaA_uvxVd1T3Ya.I49w-1772887954-1.0.1.1-PTsrWBL2GEubEkuWR0PKsaBZ4.RsMfXH1_cfvldKKpGWGSch7oyHG0CArNmxF60ffpVyw9jsbOQf93WLGwUdzxP.fTLhR3zKZDXdsrYGzcI; path=/; expires=Sat, 07-Mar-26 13:22:34 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9mz0pN1TOyMk%2BWcydQKnYHex3SZP%2BVaWG2LyS97%2BHN9doNI1pi8Lm6OmVidLzcxlSUaHZQtl58Roo36mnNbt4WNoYuz3ATXbiuOvlVKDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf018d89cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2615,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"57bcadb4fc8dd230f6f3adc9cfa648b7","sha1":"321770a05730c5f865b429f3fcc694ffc9fa5ec5","sha256":"1772e571c74fcc1ca93188d5e69f84c965c726a181a7b3d561755c315ef595b4","sha512":"cb9b859208257963cc58c460d277aae9b69d53bb7bfccc6a50c8d87c4bcc9500776b35e7f5268869b4ade92c59c96b39bb491046cd4ea1fab24db640d2e02027","ssdeep":"","tlshash":"f1518b13702d9d6a5b507b40b8c7394ac8ee2447dc0a5670ec494f8d82fa63ac6d33e7","first_seen":"2026-02-24T14:18:16.975259Z","last_seen":"2026-04-23T13:40:26.06858Z","times_seen":42,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_4c091674cc1b8a757edda70f9a97662f.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_4c091674cc1b8a757edda70f9a97662f.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19028\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"4a54-QmR9gAt1KBk24UJxk+Zj9sauo3E\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSi3qla6XU3GMTArqEChXmNfVCQ57Mx%2BwV5D8Cm0GmSuXN3%2F2iakAf2jnCVun7iRQ0lW25nIb0u9RjiYYEflUfCR7RO67bNNBQx7pFylOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcfaf8a39cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":19028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"470ce435d160ed8e1bb2c716c12f2bd4","sha1":"42647d800b75281936e1427193e663f6c6aea371","sha256":"adf12d4f2eef34d98c80198b305fc79522cef8ffe98b36263a852afe7c7d3a54","sha512":"03487ca714d93651cc162135dfc4558db1a3ed137e1386aebdf37fba4957861664f6461c2ee462ad22e21484e3e8d4c87286b1935b412972047668e6a063c396","ssdeep":"384:TTMuAQQFE/lQynoYVSZv8D9gHyuiL7vF11TN2pWeLTmSdF//xIjYhop1uCCKEhN4:8u5K2o0WHNiL7vF172pWATpdNxS5pxEc","tlshash":"d582d13a8138838b86d7388ad4dd1964ba674a4c6d2a3815d37c6f8fd8f114d137587d","first_seen":"2025-12-24T22:39:16.382831Z","last_seen":"2026-07-06T22:32:46.746165Z","times_seen":56,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/AppSettingsButton-BcUSR4_y.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/AppSettingsButton-BcUSR4_y.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"181-lex6r9P5MEGa0tmcV+7wlQQcfyQ\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cBPgB%2FgYD82gx8KQpL0jQMTJcsnR5ZQqnWTv1RNJBZZAgVQWTyFgVz%2BAsJWMvZbaHM0Mbz28GLuxzsDp8U2hqgOOwSesmIqW3AbrAv2bfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceca93b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"df503e003a5565630ff82f4f0c7b7fb5","sha1":"95ec7aafd3f930419ad2d99c57eef095041c7f24","sha256":"9750fc9a50955bc972c9fe4bc2e1d43a5d0e1bb02ec2daf028098761a12356be","sha512":"aaab376c6859b010897ab9cd9e13bfb33a6e82f0e6292818a4984a7484d44f88b157cf3c2096d45da7663796156b22493b25d9f4709f99dc8733dbd5c4ece6b2","ssdeep":"","tlshash":"b1e0688b5186d2fa0b962ad1c11b8201262a6d78c348da0180b8605176b01c6919e6af","first_seen":"2026-03-07T12:53:24.893726Z","last_seen":"2026-03-08T10:47:57.837149Z","times_seen":3,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/lodash-P_UKhmef.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:29.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/lodash-P_UKhmef.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"28697-OszRyCvtfBRmVgnCvjmWWNh9Wrg\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDBtJQ4e76DwW10pdr39VqK%2BZ11mlA7mfc7%2B29Aa6Yx9H%2FT5QpiBAFfUNA%2FOYm2wW37f6so73Ai1o82%2BHqZoF0hWFZXK2rxNg6U1deXJHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcd7a9fa9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":165527,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35522)","md5":"7355d513125039aa121eeeaa5f416932","sha1":"3accd1c82bed7c14665609c2be399658d87d5ab8","sha256":"dcf61c3b1c412b9033fd69a0dc4d9a236534d871549d79cb7826d71542b3f4a6","sha512":"0cb083377530c9f7dda16f437767725974de5b7dff482d4d7cbea9257bb9ee416feddafd9c5b7f99334f5bd2b87d957c4b5a54c06a025780a35a764c3912a2e8","ssdeep":"1536:dHPJrcfcPiT24/HpSOEoRyLmmE6HZxEehT3npdV1j6EFBKgTtJz7GSTbVCmddVK/:dAcYkoRr+DKAtESTbVRhXMF","tlshash":"bbf390c835d3f4a283a7287440bf084ff23dad65a84cc554e1aae0dd7db89198277e6d","first_seen":"2026-03-07T12:53:24.948693Z","last_seen":"2026-03-08T10:47:57.772618Z","times_seen":3,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/VirtualBetting1.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/VirtualBetting1.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"320-1vET4IUP4dzYBSjA7+QLG5sOOLo\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TaLOW8r%2BSMkTrQhILh1KzF0eRZFy8MVpbRWu9pNRTcfAsWgxHSnTG2%2FF6uKTr42pINi08MxOQVWURCWsQflpz8%2FWp9y8K%2BGsk%2BpM3%2FJFTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec18039cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":800,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d36eb3cba0196446e5ecd1a41eb6a1f1","sha1":"d6f113e0850fe1dcd80528c0efe40b1b9b0e38ba","sha256":"9e07f25c6032cecf5b0bb0c9fd6411af2930a1fa4be994a7c9125a9047e3db3a","sha512":"6eb0be89ad9c5f90473a271a751901c458c9dcabe6116b8fcdd95d97ed741328571fc081f4652f41f81a6a23eb7ff9e89e290b39af1799fe5d75b96ea78743b7","ssdeep":"","tlshash":"9201f1edd57025f0c4882befa76905652bff443b0552bb28ceaa0d0c3fc796d9210422","first_seen":"2025-07-08T10:50:27.844023Z","last_seen":"2026-08-10T15:32:58.663034Z","times_seen":1682,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-media/storage/medias/galabet10/media_751_81a0a78176aca202a6413bca3746cd67.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-media/storage/medias/galabet10/media_751_81a0a78176aca202a6413bca3746cd67.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 13516\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=604800\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 08 May 2024 11:53:54 GMT\r\netag: \"663b67d2-34cc\"\r\nexpires: Tue, 04 Mar 2036 12:52:33 GMT\r\naccept-ranges: bytes\r\nage: 73992\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=.8VdRqxDWKAlvjOb7IDkBHz.D2JAzDm.aM.9dZZJGOU-1772887953-1.0.1.1-6NKm5UAPnUxYHiJcDOt0zuUy6p9W1Zf_bV7ifX45HI9Gbuq7SCZWfetcNUfIFv0d2BHz30E9NQgSu3aPtmWceXeglm_jYo0mg10mqQDzMFQ; path=/; expires=Sat, 07-Mar-26 13:22:33 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYUZHf7zln6B2GsYXexJzbC7bjuVCM38w3e2eo3NpObqcB%2BINTdkFIiB4fGX7Zl%2FZ1bQ7CdpmQOt19FrQVpVVsc9oohUHfiw6sefC7mOsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcee1c8e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 340 x 340, 8-bit/color RGBA, non-interlaced","md5":"9fdfdff5cb870c3f0abb6cc44f262bb5","sha1":"c48fb4dadfa4e6b4de69ec0e7e02445057c7e0ca","sha256":"308a8c0f3d3f9792d26ea2d84bd633ff1f490ec83375b1613d29c0995f8b740f","sha512":"39264153a485e22fbc442e86234ce24863f5bcbfcd47cad34f5afc8715946825fc705491b2ef888295f017d98f393c44fb28428dd05b829327c7ed38db3d4b19","ssdeep":"384:CvHjxbUGUk1+EVWqPDks5r6BU+xND3AU8h:CvFHoEVvaDsh","tlshash":"6852d0f0ae72adf08ab16c81539d8d1e8473de7ea5913f0361f64077e64e40d390a4b8","first_seen":"2025-12-24T22:39:16.288188Z","last_seen":"2026-06-06T23:43:56.100804Z","times_seen":54,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/bookingBet-SQC_5csA.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/bookingBet-SQC_5csA.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/DataspotTracking-B6EJqyf8.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"ed4-tQw1bFsIA33g85vrd8lVvAePHPg\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jbV9i1BGdstvQvx80EPhJex%2FSFySPKYNgseK02Gkh5Be7%2F2h%2Fxrqn98Lz%2FLzFH7BZfwlh%2FqylVeiVW5ppQ8cr%2BYCDak34hihdR61RIyLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcee8d6c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (3795)","md5":"f00290d73eb89859b6e72a9f542488bd","sha1":"b50c356c5b08037de0f39beb77c955bc078f1cf8","sha256":"6eeb087a45791ceb96afb8bc63c417b760a57667a96ceffabdb2a74068a84853","sha512":"2590990857adc7d1fb92021d6933ce7e21ad96242d487c9947ece4f3b06ae3e8cd430643048fb0a21e28043a6b30966ad73fa44933d982c6b8ec805295a38ecc","ssdeep":"","tlshash":"1e71e664fd70907e67f2317df4de7b426b2c4ba871a19a40fb6b5d0841848cbb534638","first_seen":"2026-03-07T12:53:24.930256Z","last_seen":"2026-03-08T10:47:57.810253Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/TvGames.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/TvGames.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"c81-+AYeprpdWZtGP18Ua0B7D2++S/4\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcROANWfomNSYPif8vSPIkmaOQ5ZuRyKzUsjTpUFSth4tgth3YT3%2FZL%2B2W%2FinECPz3lUOlbIUhic5s%2B7Rb0dwEXkc0Ai4JNZ2mD4o24Zlg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2be429cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8cb4d739571507bd6cd3b25a15163537","sha1":"f8061ea6ba5d599b463f5f146b407b0f6fbe4bfe","sha256":"3b2f15bcef3e58ac040feea4d073d42f18e48bb6f399c4f9f89845931f87085c","sha512":"38862ca5d9bb144dfa4b9c0568f05439e788848d45f8891fe508570322d34200ecb0e3f70dd9f1e8ae5659ae3333fe154d439e797c556ee94fbf88f47ddc3cb3","ssdeep":"","tlshash":"41619c87ff3089e04a7c5f99af6840d76689c05dcf731118b23c643e5af7d5884ac9a9","first_seen":"2025-07-08T10:50:27.694177Z","last_seen":"2026-08-09T00:47:56.587886Z","times_seen":545,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39974\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"9c26-IlqRPoEqNbvSkrMxbDWZZ3V/OAE\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDHFc%2BnRdBW7RQAe%2FNdSl6yAmWzhKaEVnrPfAktiMsVYkHdJXvRoDXP5YWXKXas%2Bqb%2F8Yq3Otw482wjwA3X8Bw4%2BH%2BkESPOEP6sXY2jhgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf5ed119cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86013b42eae428e11372f049516b7ff9","sha1":"225a913e812a35bbd292b3316c359967757f3801","sha256":"e55c587494457c03fdc8be31a70077cbab07905855cdf253454ab76b7b069271","sha512":"524cd729a736a3cea55239e8a2cc8d1434bda345dc35a6e663552ba59db3be7adb4419ed21cfda32a1468a0dd735e910482186438c6cc119f70064e1d854771b","ssdeep":"768:IEmoxuaqs5NSF/H1M1photHZYN+MeKRlSGifuJvy2UbLWIKp8mkx+:xdxuUgFm1pmHOsMHlSms2P8mkx+","tlshash":"790302a130ad0760f79a56ebb11d8d3a91167fc149be3c782c780c5cf379fe64658650","first_seen":"2025-12-24T22:39:16.381848Z","last_seen":"2026-07-06T22:32:46.804574Z","times_seen":64,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/460.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/460.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/menus/header_menu_751_tur.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /menus/header_menu_751_tur.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\naccess-control-allow-origin: *\r\netag: W/\"3c76-byHuVN2nWlee9qGw8iF/n/qJJCk\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFKqPmpzP42ZVTcWdYx%2BQKVSL9JoFjuLXRzrWdpiE%2BMErdFxmuqvWJil8UvQ6IVD%2FAMk06dMzMfkvKdSJAvg6%2FDPifU4Qp97bUZfpjjjvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce77dcd9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15478,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15450), with no line terminators","md5":"3ef1bb3e40780a4849a9af904f873af8","sha1":"e5693d7e0fd6d9bc6baec7878f2f5a9565486535","sha256":"3521c378f23e001f063323a45e9c76f2064eeb3ce0938c4af1ea54894b96e633","sha512":"81eb67264afdeeb0cd4b4e67e00cd59c632e4130a020466a832e827cbc18b2c4ce0c9a405bdda7a807ef06f750f57568e91ad60ecf95c94036e0acae1a9cb415","ssdeep":"384:McwDCO9HzZmN3dpQ6evgsNnNTiAO2Ba3rqpm+x1A7TENAzgO+jKelF:McwDCO9HzZmN3dpQ6AgsNnoAO2Ba3rqj","tlshash":"67621602f01e5976d3183e007cc76d5b98cd509d6c9d49409d4e8acecbda4af8eca6eb","first_seen":"2026-03-07T12:53:24.970856Z","last_seen":"2026-03-08T10:47:57.847239Z","times_seen":3,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/HorizontalSportsList-Ca0fFWfC.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/HorizontalSportsList-Ca0fFWfC.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1a6-4N3rjr4LZj7arcqSfg/4xQkmoyw\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1rWjkeYEvce0TQgg5DmcQZ0PX3cyVW6wHHRJwieXqzYM5s3t83lgLPo%2BdLCy2wM2Tibmc8PalyIhFuMLGpI%2FtiGWOI%2BTzeGVogAqB9AETw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceece299cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (421)","md5":"0c239f2023e85f6910b6bbda9cebd050","sha1":"e0ddeb8ebe0b663edaadca927e0ff8c50926a32c","sha256":"91c13028b754fd9b450efa191ad27bac18238c337993c6c6508316d65957f4ee","sha512":"bec44e03d25d9c07250c6754c97bb508a438f5e0fea0cd3036840b78871df9335e000f806ee7d36761e9909b19bc77f89b835ef70f76c566330fd4e70f778352","ssdeep":"","tlshash":"97e02b8298658ef55a1a84efb95c24846122057cef5766b4d294a2182b7408bf66904d","first_seen":"2026-03-07T12:53:24.954868Z","last_seen":"2026-03-08T10:47:57.836709Z","times_seen":3,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.1063galabet.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /configs/d212f7f1f16e55d50593214ba05a0f99.js HTTP/1.1\r\nHost: dataspot-bucket.1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"47e-zYdCTcKSKq7bTXQY5YGhQZ6K5ds\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exX8Wfl3XtGItLW8SfUec0Tk%2BzF%2FvzJFsgPBn4XsmrxpVHqaJtbrLier6e4%2BxQlHSp08CoGMEZBNFr1MBAvoblY299KPdWnTB%2FeZ3s8pbvCdKUdkLQjq%2B%2FknQwi8Tjs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf10ad39cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1150), with no line terminators","md5":"c502cf55b2a3f78e648f2bf2b2eb6582","sha1":"cd87424dc2922aaedb4d7418e581a1419e8ae5db","sha256":"24f898e9c39f054c6511010c44744db4702dcbf9c75ae5cbacbca2fd852f50bc","sha512":"ae83a469460b683155b1c51ce1309db2b9324f146a6274fd33a18d7b5e2f6807baa4c9d049ae330e03917b4bb85ddaa33122250a7e286aa541fa0fc60cf7ad97","ssdeep":"","tlshash":"0221e49664d8bf7706f01ef8e3156a48b4567f487031c849529fa89d6c214c24579f8d","first_seen":"2026-02-24T14:18:16.940585Z","last_seen":"2026-07-06T22:32:46.912147Z","times_seen":47,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"dataspot-bucket.1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoGame-BkwemMy5.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/CasinoGame-BkwemMy5.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/AiPromotedGamesWidget-BHt7VhYz.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"16ee-z9qEGLVO1An9064/hx47ouQ0wdg\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l83FZCQdLKX1ltsD3LcN28zS8ldpk7a4DyDuSfUyWX4bHWFPHgSxQIE%2B0Gb8I8OfUAUQ135Q31JY2cMEMd69qMHwoMRVBI7wlqCH5Yiwcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf099ef9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5595)","md5":"c64316e813c93bf4567843c97af4f5a0","sha1":"cfda8418b54ed409fdd3ae3f871e3ba2e434c1d8","sha256":"ea3bdaea5eab58a52470b1c12e5b864dad6a2f2811ed9b29a3c66cd3b656765f","sha512":"652654b688376396e05a4b9eb87806572822962257cd7bde8f3523fcd62959a112e2f5fc40a740b9d4892f8751348a06d655252d6b0dc9cf8cc5842e3acc410d","ssdeep":"96:jpX6LDqh2iJMeVZhH+noczxF+zZZ9LNbUMM+xA5Z9gvWwBV6aV+6bK:FX6/qhCexetGFhbUMFxABbaV+6bK","tlshash":"0ec1a545e024ebbeb83a08d9982f102574192fe5de1980b5f4bda839313c15db527bdf","first_seen":"2026-03-07T12:53:24.960495Z","last_seen":"2026-03-08T10:47:57.858102Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/immortal-db@1.1.0/dist/immortal-db.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.1.0\r\nx-jsd-version-type: version\r\netag: W/\"ee25-pMHxoJFNs7/Bok84dZEhK2Ol9UM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\nage: 1136392\r\nx-served-by: cache-fra-etou8220189-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 19803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43474)","md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-08-10T15:32:58.760263Z","times_seen":457,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":70,"dns":0,"connect":33,"send":0,"wait":27,"receive":6,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_2ac9238fd8684537d6f4ef60e07608a9.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:40.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_2ac9238fd8684537d6f4ef60e07608a9.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955; ajs_anonymous_id=ebc478bc-e7a4-4a6e-af89-8b9dfbec23b7; _ga_2CT6DSEQTF=GS2.1.s1772887957$o1$g1$t1772887957$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 175492\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"2ad84-M0EoMcM4k0DxQFqKYSfRHUI6bpY\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exy2pLcC9U5Rscs9Oaao3WX%2Bf7Kan7Jo8E0KMDKywK2srjELRB4n%2Fuzl7cYO0drqLABGlu0AkOy75nDUJoa6WLdl8BTAwUCcbP8kQ3Z5Ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bd164d479cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":175492,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c45cb245847803d40e611456ddb734c","sha1":"33412831c3389340f1405a8a6127d11d423a6e96","sha256":"dd4ebf85e456372103474becb402cd62b1d3b2d89da84151bc9d2b53bcd328d1","sha512":"650faf53e33447de1644886e18b8df6fd7efc3e39dd15471ef7e626ab5a390830a9c2ed68f736a06fc550827b9c1b98b289090460c10b040696d2e78b149c9ae","ssdeep":"3072:fr983QljEjvclW+S6rQLdFv4ICYSTBCLB6TJuutN/B5D8dCZ6RW9jnSpwOc6:D983QljEzclZNr6FpnSTB+QJuaN40Z6z","tlshash":"810413154d2e8bb4e97c7b865519b81f3a2f5a3d9dc300921cb4440ac7707ed3a6bfa8","first_seen":"2026-02-26T14:54:53.836756Z","last_seen":"2026-03-07T13:29:05.610235Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1169,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/custom.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:29.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /custom.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:29 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"4468-1UEIuT3M4dSvBVgf7qaN9s+FlVc\"\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Ff5WlBxbvKS7sHUKZ3qudBEzDfTwahFype0Ggc55UCUa3TmUPyfhPycmjUkQo5ANhDr3cOOEAnoAPYJB9J9JpJg1kZAHGJ6e6B8gvszURQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcd40a569cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":17512,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"754725f6febd5de8530a9d735dccdf22","sha1":"fd07156bab464ba79ed1aeeb7ac0988189e8e53f","sha256":"be91b400946b81ba7cad36a41115cc4af23ea81b4abf9909d573ab9a61dbcb47","sha512":"b540f0a521c7a169b3bba529c885c5a2e4472de75f6bc27d1b1bb8f8a8ccefe5cb826203502a45b226ca178f9d71f571d23cfd79f7ca7d679e389095f45070e4","ssdeep":"192:52SyYVVLN2Ns2hamJqKbEiExkouE20R62UYx6lY9qywNqVh4P02pHnN0XzVZIC0P:wYUrhaJaW6bLpHP5p","tlshash":"7e72a653fae31999716b8198666bb3fc7e7d404387099d787b94b3748f837e28031a48","first_seen":"2026-03-04T19:25:33.629605Z","last_seen":"2026-03-08T10:47:57.998524Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/menus/footer_menu_751_tur.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /menus/footer_menu_751_tur.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"2170-5YkIaEW1VPWbGxGytJjt0PCdLFA\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuWidQGYhTCTvU8AzES22Wgsodfax51U4fPwOWkG7XAtpjiq%2Fja7okqflIp3MxHrpbTtmD0g7gndSycVEjwBOUZhnMsbtW%2FNAExHc8EP4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce78ddd9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8560,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cb7c741a547fc4a891e36f03de2f52fb","sha1":"e589086845b554f59b1b11b2b498edd0f09d2c50","sha256":"e1f2743754b756e617ee3307f8ac72f50f94263f3009f9aa90aec03edac6be73","sha512":"2d3da210a4cece77d8c2c5a21e57119c60f5010e02e3e86a8e7d3b1df68174b55f59be99ed140bf5760974abf623b8eaa24d96f0808498dffaae7723bf944482","ssdeep":"192:XSk0zkRSkukOkWkEkRSk36kphkpGkTSkEAkMlkk73kKUkwHknu4kQSkvIkWbkCOY:XvTNrLz5Rvn8xTvewIYfQQvVdqO3y/XV","tlshash":"c7024612f00d5576e7087e00bcc7ad0b84ce609dac5d49519d4d8bcecbda5af8ac62eb","first_seen":"2025-12-24T22:39:16.150949Z","last_seen":"2026-05-14T23:49:57.318125Z","times_seen":57,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/homepage.json?v=03/06/2026-20:19","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /homepage.json?v=03/06/2026-20:19 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"938-QlkLW346b2vIVRB346mLDK+Fnkg\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vl4w0ZkmgUlGgSvZxDBGKDxGIqHzqUge8SuCooRvYWe7brnrXQxNVbbPYZMiwmAGGCxXYi1nZtih8cAvXRf5ZscpDQgkiSY6cGDqRvV8xQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec38559cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2360,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"675b507b70f39e07be8925f75058608a","sha1":"42590b5b7e3a6f6bc8551077e3a98b0caf859e48","sha256":"947b6764624290fda0991b5e06f0cc8ec17f469fa6ea3abd374cebd9a25fdf93","sha512":"a11bbe53280dbad32c58212b454a474a02a254a4704964cda44d191e82e32cf6dbf79afb0329eb54200f9b07a4d89a5342b62c726bbe3aa8fb0888cfccfdadaa","ssdeep":"","tlshash":"39415d3d6c10deb8b3a08a23d28267c16546d968c7d44c5c1cedea6ad3ed29d1484fbf","first_seen":"2025-12-24T22:39:16.115426Z","last_seen":"2026-04-30T14:34:08.174115Z","times_seen":30,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/463.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/463.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__config.js?v=1772887893703","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:29.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__config.js?v=1772887893703 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncache-control: no-cache, no-store\r\netag: W/\"151-6tCuJ53upr2hj2xC6ORr5ixfA6c\"\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsCjI3U9HDVfMAaQ9Gu1UMMQ64NL2VbhaDV4BX1SW5rcWI1kn1AoIsDoIJpocHmC3dP%2B13tiaUut8FJJu4EqvOxo3mbd39cuyU2rsmafYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcd40a519cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":337,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f2d08e304d7d0afa41a1af070e82d1d6","sha1":"ead0ae279deea6bda18f6c42e8e46be62c5f03a7","sha256":"af0da6c8113972ed99d99ce61865207139a3a52386a130a78e77bc49a408fece","sha512":"b5109e8e66ff41ee7891803c5c52ff353b5e4820fc2eb7e1e67654b0519a84ca8c3cb94fbf7017b290c72a906a9aa8ec6835550d4ff4a44e92af7480e5fa6502","ssdeep":"","tlshash":"b1e02620ed640871132a642a551a2607396ec1df0b1dbe0632e1187def9567f8ef39ba","first_seen":"2026-03-07T12:53:24.975281Z","last_seen":"2026-03-08T10:47:57.97438Z","times_seen":3,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__inject.js?v=1772887893703","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:29.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__inject.js?v=1772887893703 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncache-control: no-cache, no-store\r\netag: W/\"11413-ga27yGWTlEqgQ087Ftry1yCgv1A\"\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B09OF8N2GENkYu6nkKQ6eOVEvxRdWff0tkiPzqj0UcoMP%2F3y9VrwnxwkGTO8BX5Jb33MotxUpR37Un6OP8wLRDZ46b5fHoTicOJqMtNiIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcd40a549cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":70675,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"dff9b409bebf67ab22aa6dbaf5559e2e","sha1":"320e9bccd7c8e47a29b815aec4cbc4ef7a939322","sha256":"949c814d46e7988972e60f8e4fa58c018b1d146b4c0b13c6d4934c3661e8337a","sha512":"ae6e449bccfde272c4a1656d426a85e5429612f740766b0c1978fe6950f8878d4d8b7135e11b0d468f55e5982187cc68a40942639a5e6b7fd8ee196b55db0478","ssdeep":"1536:oQEg8R/FBFuFMFPlO9jAivmGvpgrGXWmCVA:oKDgK","tlshash":"1a63a7487ef262b2577ba2ae2787b14075324003100aee517fec47246fc6e6d8576bde","first_seen":"2026-03-07T12:53:24.976048Z","last_seen":"2026-03-07T13:29:05.568217Z","times_seen":2,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/BetslipButton-CnDz10B1.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/BetslipButton-CnDz10B1.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1a2-ThbVBgb2N95WaTBZ0K4M0RPAN9U\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6unH6uOxlPn7PUqhIOsBxp8LQbCLpwfWg6xfqJOR6jaqFgHb5KnMjyUaRPaHL5WIEkD94oGTXnwyhnnxG2NwEJ79CW2uKfsGeInkvkSKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceca9509cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":418,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (417)","md5":"699ca84c626a612deac359f1dbbef5bd","sha1":"4e16d50606f637de56693059d0ae0cd113c037d5","sha256":"cc4f024678c7fd9a2f4407de4edece80cfb1a0eb6fddfec5047e1bc12405715e","sha512":"286a02f623b4ca7487a0f971470a448055e5b29d725865ebfb0009469625b7d37abc2611af95f456d3203b3d2c2200e95312cba3520716eb70bbf15d1d0eb5f1","ssdeep":"","tlshash":"a7e0f147894cc2fe0b461e9111068112353756bca300e691c0b93c527a7458ac45f97f","first_seen":"2026-03-07T12:53:24.965988Z","last_seen":"2026-03-08T10:47:57.825416Z","times_seen":3,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/LiveChatAdviser-BbniN4di.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/LiveChatAdviser-BbniN4di.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"35e-ZxDxg0KA11mkPGEiB6bVaYfcbS8\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJsISo32Pi%2BdqV%2FECh0eLhB6E3yfyqznYiiIaRvE3GXBOcs3aBgdHsNDkwCvillNRiwNectA6k%2BarT7HbqUfFUut2VgBRaZs3Zsk79BrUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced1a2e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (861)","md5":"55e0d52c0c568b8de3e7d0eb2f877ea7","sha1":"6710f1834280d759a43c612207a6d56987dc6d2f","sha256":"6e58a9614774f7c1353012a9b3e4645135728d3c968d8f349480ab69a1abb170","sha512":"44839e3af98f369c5bc07dca2dd4dc852cf86eb796116b20912694e3bcbc5eed03c1833c543edf79e415524b7acbd8054633c0bdbbae550e39a6add17f35a99c","ssdeep":"","tlshash":"5011ef96f0c6a3fd6a67284dd6aa2443600a4fa5c22d0db5807b15641a6ce49a24eed4","first_seen":"2026-03-07T12:53:24.902793Z","last_seen":"2026-03-08T10:47:57.856459Z","times_seen":3,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_1e0032d5ab6bc47ae0ff53da48c1e21a.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_1e0032d5ab6bc47ae0ff53da48c1e21a.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18886\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"49c6-rvCvGF6reV7R5mtv04a7K735mlE\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TV5xdnA12PivuDDNg860wAL3VlGp2UHChHumW4A6P9OQ3yHqVKIDbTmhtss0Usal1Uotv9bozoPGzKeXDRyRBHG%2FaRPkRP5DamSiIj1FwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcfb08c99cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":18886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa5bb675b18fb9ff6ebcefc6c52b2b80","sha1":"aef0af185eab795ed1e66b6fd386bb2bbdf99a51","sha256":"9e57aa30fe310aacb3a5660d08ad36e93609014c63ab91e2674217cc81ebc5b5","sha512":"bda4926c3f51a68f3466aad782bb0e212b59ebc698591699ce3927038ba8a8dfbd52ae66535da875700c6ef2cbbdabb67fdab3a92629c17cf2bdd2d909459623","ssdeep":"384:uTMJDMzfI4dhbysbrfdO/1rYKo5nvpEg8SA21BvLQzOSMGz:XJozfI4/ysbr1O/1AvlD1LQKMz","tlshash":"4082e1099a7934e9329308fe1b21614d31f03ab66c405758db7ccbe410c1d956b6faf5","first_seen":"2025-12-24T22:39:16.22703Z","last_seen":"2026-06-06T23:43:56.14056Z","times_seen":55,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/Mobile.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/Mobile.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"155-d/D86R6CN5t1NAvvi885UJ0cVes\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MqRqsHRHtRYerZpCO1nqhGlEWqhy8daabOAV5sOqtSDTXoD48E%2FWxyvhHygRWwWKmFOBSzWY1LQWeK%2FMAY3bgbG2aOIYP7MqHRsqGCaqqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec38499cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b140aef15c3a0e2328970dbf675bda24","sha1":"77f0fce91e82379b75340bef8bcf39509d1c55eb","sha256":"08c2a0b66d7c329ce1e9e957188e98e920311984544c6d824a29cb8c73d668c0","sha512":"06c19a313efcafa154900f41bd864dc6bc5764a82dfaee82c91ec6fb360d61e0da1a1bb8fa6c58dd8a14f6cde01b85fe25e0ab56a9ba3009f4be67f99eb1ddd5","ssdeep":"","tlshash":"dde078e5b250d40ab5557d53b3fcd5a35e69f0d1da940c39713e791e0fa3034128d14d","first_seen":"2025-10-24T05:32:28.297874Z","last_seen":"2026-07-06T22:32:46.839395Z","times_seen":57,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/flags.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/flags.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index.BC3qGf-p.css\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 94974\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"172fe-w5wJfXBMdUKU4/vtI7gOUCBUOW4\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdNEeDdyKXyJiJOuPoCE%2F4woQ4uwNXZWlnUhwg4IoVqMvPSXG%2Fp94dkv50YGWdHCVfJfymzuvgkdPQNv%2B%2F1f9Jcu2SDVkfB7p3vRT%2Bq0BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcec48819cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":94974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 17960, 8-bit colormap, non-interlaced","md5":"02c3b5af3d0ec1f21c51bf21a22241e9","sha1":"c39c097d704c754294e3fbed23b80e502054396e","sha256":"1c0578c469db9a3da5c0b6fa0258f99b2a2ac602d0027ab6fcb7b218c3acbb75","sha512":"bb097e3532e83aa4db8e8dd7cd16d95d83ae77f4cc19207f04f3b929ca695ebcd7f5730e9ea888763108c95028f40f81490a03093ef8d57665c6f4393091dc63","ssdeep":"1536:wxq8h3gUrI89XxfLcduXa08ucH+te2RIr8T8hKdPzgkjM+PDRzSKR2JLDpzm5NLX:Sq8h3e85FquXPAeExk8odPFg+tzSKe3M","tlshash":"509302ab06de36c6e10b2e9408902d3c720f65fdcba545ad497cc743d8e5a68d48feb4","first_seen":"2025-12-12T09:55:43.277784Z","last_seen":"2026-07-30T17:46:53.0994Z","times_seen":839,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Odometer.Dtmtuu8d.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/Odometer.Dtmtuu8d.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"ac6-Ca9TICZiffJinxqYoEnujFAZRjE\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1N9XulAWWvtzI%2B5CTRzlzWMZoz4HxP5m7b5Nnqic15aafAhNaHVRPblEpXYyo1Elg0tSx1Xozy8gqGFBw48by71gN6Jhx4VnSLBbNxrrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebdf59cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2757)","md5":"e60bd0b6b84d162ff84ef731b11ed036","sha1":"09af532026627df2629f1a98a049ee8c50194631","sha256":"8d2a9d2617a60055e91c6b16f4cabd14851836edec7bf90fc8760e1d31a39df3","sha512":"a85638b5f89d49c50da5f9dc0cfaceec033c45f524a51bbf266fe9cf67f9ce63ef157745964b9ab7c1811f8e2f2d2c5d6348efebe6818d6fa5beb8291e36c725","ssdeep":"","tlshash":"2451e1154f910364633a7906b5c81b51bfece5415223c58e7329a447cf83db9e398e1b","first_seen":"2025-05-18T15:21:59.195484Z","last_seen":"2026-08-09T00:47:56.442197Z","times_seen":309,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/DisabledMarketEvent.BUY5t_rR.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/DisabledMarketEvent.BUY5t_rR.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2c4-BlCcUkj/wUUFtw/bsj+lE5hutQw\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pH7CeaSjrfVnHwiIi9BM2Oj63qWDpSTSt%2FJC0YeMeP%2FZGYm5RrtVJTAmYfMva2NPf2vtXVWyrQ6swSNU3H5M8OPqvzV1D3QvV%2F00b%2F0fcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebdf99cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (707)","md5":"c0742f5af30b5e1ab1e9e3184a8d4adb","sha1":"06509c5248ffc14505b70fdbb23fa513986eb50c","sha256":"4b6712623061506cf21b8296602cd61def3d0a81b5cee16bd0d245e7275715df","sha512":"7050ab375c9e4b209bda0bd7ce449e76da69f00d56d7a9504a52eef1e36fabfb8b36f9f560d810edb4522247e15d17cf736e929f40503802df2035007d1494ab","ssdeep":"","tlshash":"4701d4c4f98a25344c3a9d0c9abc8fee560a93705ca15d33789a113a4bce08a4a20d26","first_seen":"2026-01-18T14:34:50.585531Z","last_seen":"2026-08-04T12:14:01.666594Z","times_seen":620,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89bcf1695d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435354,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"182d32ad2ab2ddbe4a2745b296eb32c7","sha1":"d177c6e8f410525fbaede2b02ed0e7cab13feb2d","sha256":"af211728d1f2f97e16a4c4f28c4e39d5c69218501e316603c9be9238bf7f89a4","sha512":"505b55798c38a24edad6472a3f281ab8d308b202c72cb18ffa52a92433e90f064fde2d4a58680b21462564f17c3ba1b443fc05a3c548f3d649db14236f11bc49","ssdeep":"3072:bnRupaIB5ZbVITZZYA5dVAdZ7GlAMIDl3g3Wcmvu7IHkGOQ7DFgke:LsrBPVILl3WHu7WOQbe","tlshash":"119444bb8f848f5b1b280bc9212d3d6c999e298bcbc55df6f1c0cf1844f4ab92315566","first_seen":"2026-03-05T09:30:28.580513Z","last_seen":"2026-03-09T09:48:30.615671Z","times_seen":13,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":275,"dns":242,"connect":1,"send":0,"wait":76,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/453.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/453.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/1309.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/1309.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nage: 0\r\nlast-modified: Sat, 07 Mar 2026 12:52:47 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ip%2BZhvvUcbD7pISsLr3QTQwqsugOnVTYTWYm1uzFlFBwABwK5yS73apx%2Bs6GDVLFzWx%2BDAR2%2BOnfhAuSudQyjqazlS2dsCOxEzH4VsY4bA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf738199cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f21621b7e59d89f9a0a7c77ae9bcfe6c","sha1":"7c8f45337a208dbd3a3f4fadaf69777ee8fe3406","sha256":"41db4f54e95dc4317eb9878d1609336b78f1bf20bd92130c9e82416fd0e69252","sha512":"9621cfed2320bf9559ca380b54c1bc417cce43a935082b4bf9640740ad24583e8764565991ae71b705fcc8b0c0e9e547f3806a4f65d5d38cc39b0fd7a0ace9aa","ssdeep":"","tlshash":"5021dafa50ed9c4bf90d036f1a0e4380f56ff53cd5e4c50c362676382210ac111882ed","first_seen":"2024-09-28T07:22:53.509719Z","last_seen":"2026-03-07T13:29:05.754615Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/partners/751/seo/page?platform=0\u0026country=NO","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/seo/page?platform=0\u0026country=NO HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2659\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=ZNtoPjjwmxgOnxkoJsHvAVkyxyl72XqKH1XcCC3dSpo-1772887956-1.0.1.1-MAG8IOMhZM_gQmDMdqi.VWe1FSlS3.WO.Yx74CT84UCpwDEiSDpeLuX4KuuxgMPqxS28aQ.OQQDpOErGta5X2do8YaEY6.ry5KJRq5XEqiQ; path=/; expires=Sat, 07-Mar-26 13:22:36 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w6nLy0ACFnxpqUpFSKc4htQaHmQwUREtuhgmMZJm%2FCFIfF8erbQo0%2B0APJTHnhCrBkG%2B0yZYWE%2FH8aIPuiF7P053rdV6m0IQMPu%2FEOz8Sg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcec589f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7671,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0c3cb355e0745f8d403e214af1595e2e","sha1":"ed786d0ae61ad6adce28150c04a932c4e9bcd6da","sha256":"2b7c48aafa192476fcb639519893f40c28c1de98bd5e66b84769edc55b047be2","sha512":"1c1840626aba24469d43e66cef0893e9627c25afee6ab6a955e6cebf21946e2cf3514c9587cae3c5815a3b7b5ceabdb18cde0fc4b6d5cc52e798e14c7c456b62","ssdeep":"96:E2K/6TXWpoS1kKXplSunUVtRQl8bqOHEyj7fuSE3Ytvkeu5Jbrt:E1yTXENDplfnUtQyDjJE3ovy7bJ","tlshash":"76f10f0e37962d9f038a5fca29564d3c4fd55386fe41a91c8d63ce1e2bcd278d22ae01","first_seen":"2025-12-24T22:39:16.082152Z","last_seen":"2026-07-16T16:07:12.954484Z","times_seen":76,"resource_available":false,"data":null}},"time_used":3493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/useOpenLiveChat-Cp-xaDm0.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/useOpenLiveChat-Cp-xaDm0.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"247-zfq29W2zwwyUfWRaYsxv70TeoOA\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXL3q3ZOCMRuarqix2rOpvlzS7Z2xYcJuRI8ZmjRPvh3hjq0PnPG1WMy8fP7BmeDy6BPBkGv%2B6k214eJg0Nrtek7xKKf0hfc33%2F%2BBv1g4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecf9f49cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":583,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"631e9fcd4e2dcdceb49ba823a1722129","sha1":"cdfab6f56db3c30c947d645a62cc6fef44dea0e0","sha256":"166b01b63ea032024f36cd7eee554695da5e7233c27cbe9d5086d74ea1a0de1d","sha512":"face4c44e39c2b7d54c8bb4278bb70c2b4dd772bd5ce7f11a4ca96afcc5e7133c69a60aabcb0a7c45d650b82302562e78dc152e79780db97acf4d82c2c1d878c","ssdeep":"","tlshash":"85f0e19f46944e7cc1c0cfc1516be5f85b3c2ab4310cd851e93b2c88682484457bede7","first_seen":"2026-03-07T12:53:24.980937Z","last_seen":"2026-03-08T10:47:57.742573Z","times_seen":3,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/fonts/default/RobotoBold.woff2?v=583","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=583 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index.BC3qGf-p.css\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"f250-sdZeMF6FDN01JzT3hCzd/TDwjQs\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24L8f2ZM2Vip6sAtDEI1HB6LpFUAQFB5pZdrXkWnNy9CIP2OS5bV7mPy7akYtxH47SsvakUPssvJCBy2OzRO%2Fz3F8BCSEPNFr2cJjw3ycQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bced7b009cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-08-04T13:12:00.070588Z","times_seen":2673,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css?family=Lato:400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Mar 2026 12:52:34 GMT\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ae317c913d9f17e384174fcac1e95f49","sha1":"97048ceeff296795e17fc282e38d26d44fce8bad","sha256":"0250efe84de4fea78b47bed1e3367687b72cbad25fa556879acfd9adf33f6b24","sha512":"3be7c2d8b49c8ecfd8fbe46e0e57aec92fe696894da6243f6b9f0052461f28eaff9b6974068276cde565287efe54a8a16379b21a522dfaaad925fa38215bfcc5","ssdeep":"","tlshash":"ee41ce92096fb908db830cc212c97d32ef0f625064499935afff14d8bca7d699362b0d","first_seen":"2025-09-17T17:57:20.126253Z","last_seen":"2026-08-11T00:27:12.444523Z","times_seen":7578,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":226,"dns":1,"connect":35,"send":0,"wait":48,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492468","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /wc/rewards-main.umd.cjs?v=492468 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 03 Mar 2026 07:38:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: iFHhUe2t7Yg0yICkMfWYHlL74nOVebRe\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lfeTQfLKGBvOoVX6rz23ISnoAvnjr%2Bsk29Wkceux%2Bwq%2Fw%2FHHbj4Tmh%2BUVD4ySG7dtB4u1WGpdOj1mr1M5q3RCSy9glSFAZsh%2FwkGkTCsy756taiDWZEEwAtbpfgfew%3D%3D\"}]}\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f5d6b2021b5a22554c0e7f5b20207324.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P1\r\nx-amz-cf-id: bU8WFD23HTjjkchG4r6xQkaGA0NKeS-f2sowCw4TjNeUNNDRt1LQCQ==\r\nage: 1585\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"adc25b636de35548e43571f5c42873b1\"\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf32eaf0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":954610,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35452)","md5":"adc25b636de35548e43571f5c42873b1","sha1":"4fab82c7a41b607fb8163ed7b3de9a67927c46a1","sha256":"3d0e0f0eb6ee5f9636d85cc6edc68deea6249dbdfadcef81de254787e814d8cb","sha512":"42ced52fe545e387f78f94d93ca607c243b720770c0ba0390b85eabae99ae66064f702265cb83c9450f2be12a98f536dafd61f50f535291b116b4a93175fc031","ssdeep":"24576:glTgpLuTlTq7qHRNwM7vKZUh3FqBL1wtHaPzr8lThBFbE+:glspLuTl27qxNwM7vKZs3FqBiHaPzr8D","tlshash":"4a158d9072567534c3b795b160be060cb23c5b02740ac698f2bc99ea1fd7896627bf7c","first_seen":"2026-03-04T19:25:33.689359Z","last_seen":"2026-03-08T10:47:58.010768Z","times_seen":4,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":36,"dns":0,"connect":11,"send":0,"wait":114,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-CMdBczWY.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-CMdBczWY.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"466b-gUrRjziI86gKd5Y1L65N/QNw3rQ\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iv6i%2BtBV2yfNxwdqpUwUG%2BeRKT4TzikBGhG%2B9bAehn9d4Kki8czRsmHR4G71ZNSMmd8fWMHL8NtoXUTtEXSdHTvMIaAmNtzbK9K2yoPE2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce558a79cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"2a1eb82b37c24ad125a732175b2b9b91","sha1":"814ad18f3888f3a80a7796352fae4dfd0370deb4","sha256":"4fe2eaa5b1e32d7f41dae25e31be6f1fade008f97509ee5765e06b536b9ce72b","sha512":"0925cd7c81d483ad8e16238edd68c752f4e107050a86a78ec5a8ad23dedbcf0f0c687132cb989882f4a4451429ef482dd25e32120c8b3f21ac11c5c8ebab1d8c","ssdeep":"384:0Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJH:0Mci408FFnJrIjE3D/OY2E0xqpc1NKki","tlshash":"6b8209d0e2b4f7a642e86add80392074f2258c28343dd0f1b6b6adda70664ca956dd37","first_seen":"2026-03-07T12:53:24.955699Z","last_seen":"2026-03-08T10:47:57.805428Z","times_seen":3,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZrAqMxXQawHhEtY46LAK2lKVKu5qasTi6A78OlY2ugD53SAngToexGkI8gC9zc2KNXhe18CG5o5pU8O1bqfnpg4Kge22zR2yKUjneSsJsOGyJrYl0c%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89bcec4ee8be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2821,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ed84599d293d187c97aa6f88754332ce","sha1":"f950f5294b5fa13bd1c3950e5cb28b1a2ee241fc","sha256":"599500c94c302ac02594dd87a6652eb51a9f45042f0fc5fc2bd2f3935f8fab81","sha512":"d94fbe4938b707b2595582d942cfd27ada4874b5be459851f77dc5371f705af81eada3ddc170697813c2657a8404f1303b8777279f716eef4ebe08fdce284cd7","ssdeep":"","tlshash":"71514f3646b21421436710683babf31ab23ad2433689e9447edd93005f85f68d9b3bde","first_seen":"2026-02-24T14:23:51.260409Z","last_seen":"2026-07-16T16:07:12.935859Z","times_seen":64,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":59,"dns":27,"connect":8,"send":0,"wait":64,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/SystemBetCalculatorContainer-BWQpeoKA.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-BWQpeoKA.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"378-4OS9eYFVpz61ntqlrHcMmBPfEI0\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BRpwI9r43IesqJ3xAcd7lFrybHPRGswSZaX88P9BkYvD08WqLjD3HzGWGQmOP12wp%2FIS1UoPTjcvF9XU8BfMKZPBUvSvHDJZfZOEyVJFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced0a209cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (544)","md5":"4c166042c2f141b16df97185fbedd549","sha1":"e0e4bd798155a73eb59edaa5ac770c9813df108d","sha256":"3bf698b29d114d002fc444a33e574df5faae6c1076054ebec079689870ebb58e","sha512":"1848f27dfea8259aa73698f5537dc9abc1f96883f535bc46081f3a3e7f4f79fd568d15569fc591ea15647c2763590850e44e5a461fb56dab6c773df5a09b99b3","ssdeep":"","tlshash":"f6118ca75369cf74c88e0fa20956646409b107186a18e678f6b64c3ce0145d683faffb","first_seen":"2026-03-07T12:53:24.908226Z","last_seen":"2026-03-08T10:47:57.745295Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Firebase-LOBUVNlV.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/Firebase-LOBUVNlV.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1487f-GyBlfwteYoshzfuvbpDPCJVK/KA\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DcDJZn%2BXTxqAYP1I3bsxMd5YBedxdBf0Rg7ninKWaehCySmljd23cJvNLlALI6V0psGrxI5V%2BoXQIMolyve9ewka8D9t4d3erQ815iVCTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced0a1f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"443e91c67ad735f928379cc08bda9578","sha1":"1b20657f0b5e628b21cdfbaf6e90cf08954afca0","sha256":"e82962a35705700ac304dcdbf2eb78f83a4fabe1accf8e9990fdb77353a8ad00","sha512":"f39483a7c5d70704e68bf7ade4dff52606d78b4ccdec7cb7986676ea61a4150eb44de8165575cb440488a4ba17c9ce9193f83b85da8f84cc2c3470351630e17d","ssdeep":"1536:N4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:Ns1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"8283957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-03-07T12:53:24.984119Z","last_seen":"2026-03-08T10:47:57.875839Z","times_seen":3,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Odometer-Do8Tj8YW.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/Odometer-Do8Tj8YW.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3ccf-asK5qaLRwaYW5+EQaU1BxOitOSc\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CejjvKz9MDFoYUOXk6utQtzKBbsltjzLWL3%2FGHYxFNf6%2FIhoxkOsKV9mPb6k5Wnt%2B3mOj1sesNiv2EHr0tr191qY8J6GUzIx4yJPFe8MNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebe079cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15567,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15566)","md5":"cf2762e194a6b319e7396b3c666e20a9","sha1":"6ac2b9a9a2d1c1a616e7e110694d41c4e8ad3927","sha256":"19016b907c7c612259db60ee4bf63ce27ad79cafd04f2226aa4ffa9cf8e9a174","sha512":"c7a6c25ec14a3a579a309ff7c2f1962440d294b2919fc51b81a8686bf45e6cbdefb3e0621966316b46f18089f637b7e38d05190ccc11c2ca8f55baf0fd16bf71","ssdeep":"192:+Rd7KNJtQae0S09YJFF2UXxx3HjmHHUkauLPHMBNeSYpkYDBlC7TlzUgrPND:+2VQae099YJT3DmHH1PrFtDbGxrPx","tlshash":"b662098a7a6272344393b1a015bb0609773f9d6a3808405db27cadda7e32c09d12bff5","first_seen":"2026-03-07T12:53:24.8952Z","last_seen":"2026-03-07T13:29:05.577256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Tooltip-BLA_pMUT.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/Tooltip-BLA_pMUT.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"334-Ru0+Vy5dIcSR0hCyIzyTcMGOGeE\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rnboz08VuV00DzxHiJLJ5FnQLyOw6w85doBS1DkJB5KcSoWS0rC79kGliR91zZgzEDB0K2mZ2ANpS0ymJvv3huZsHDEzSGlRpqiYVA9PCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceece149cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":820,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (819)","md5":"6c7057db325e193ce09cf9260e7f4ee0","sha1":"46ed3e572e5d21c491d210b2233c9370c18e19e1","sha256":"b91d7f3ce8fbe513d7fdb401deb850771be30f75eb801ff191f53249bd624c67","sha512":"063c0532b8164e6173b6f62acf5d6e94266dbc03585f8e1266c50c9de2b6d387b83deaac8dd703dd3b73d02fff55e662c7704f6f8f07240c78217c18b94a0b9d","ssdeep":"","tlshash":"8601c256e032fbf4e57654da142d956d7253266c7e2f58f0a038058e0ae4984d317bca","first_seen":"2026-03-07T12:53:24.984904Z","last_seen":"2026-03-08T10:47:57.75838Z","times_seen":3,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/header.json?v=03/06/2026-20:19","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /header.json?v=03/06/2026-20:19 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"e1-o5bX8SfuIDtHHxp+UHGEMY50Fj0\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=shPYAu8n1mn57DojK7qPLIFxfsCIJ02EfKjgWnGwYKkE7gAaWqw9bZg4n6UvEnCeHCb1ayrDC4e%2Bq5XI9gfRSAwfJC9t4%2BK1wuy1xebSag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcebffa59cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fbc119c5c8514e3587fdfa01f205866","sha1":"a396d7f127ee203b471f1a7e507184318e74163d","sha256":"10279aa2fbd66a0c0140d4b4cf9a39b0c9bd14b18bb35f1bd6eb26eab355b9d9","sha512":"9eef97111b2474b705b496860ecd29c7c591ddcb79887d755e5ea7bcf2d578a68bbecdc54ce4f11954f679ff2b8b5cf060da8cd4287a78a1fc3a92fdfc6125b7","ssdeep":"","tlshash":"cdd0a73aec10da7073a0c413c18067801140e514d644485c9cddea5a93dd7891180b67","first_seen":"2025-12-24T22:39:16.192168Z","last_seen":"2026-07-16T16:07:12.950479Z","times_seen":80,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-media/storage/medias/galabet10/media_751_d95c491056861c55d9808002ec3083fb.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-media/storage/medias/galabet10/media_751_d95c491056861c55d9808002ec3083fb.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2125\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=604800\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 14 Dec 2023 08:21:59 GMT\r\netag: \"657abb27-84d\"\r\nexpires: Tue, 04 Mar 2036 12:52:33 GMT\r\ncf-cache-status: BYPASS\r\nage: 73991\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=a6WmTdZPEn_4AXJafiPbAlNijHct7MhT.tOLdiDVa8w-1772887953-1.0.1.1-DuTEKf655g9TMCCX38DGNZLI5P2pVNUtOoMQrEe3HvTDuY9K.w6KzSf_VJyJzaEefephSZKVhIBArAwnCGm1jap5SeLbeMIlHXgl7lSWoME; path=/; expires=Sat, 07-Mar-26 13:22:33 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBq%2BQ17mg3bejmoAJ0X7g9A88TCpZqGRBMx31LtocKq3G2YWm4lMFa7UV89OJR%2FQq4pG7DQ3XAja3ajePaHKYy93%2BJb3lHTsFAyjeP7uqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcee2c989cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d0a6f672bc6bd2e097de029109a7577c","sha1":"228e47b53bf80adec61493761d90165771a81012","sha256":"35dc3f8b307cacbf717f898b6a669c2eb188cc425a1f356b94132ebc7e8441c2","sha512":"7a700fc3f2a2cced35def804efb78f631ae965591bca74fe55eb23a593f5cd77cdb31f9f947e8614f0ed1d67cd29c3b25797fc46d9d22f6788bedf34d84bd8a2","ssdeep":"","tlshash":"7741eaf57111586cd591a232475cbdd2589db408d035d507fea3ba2c7c3f17814c32ae","first_seen":"2025-12-24T22:39:16.220215Z","last_seen":"2026-06-06T23:43:56.132258Z","times_seen":54,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/SmartMarketEvent-D3bjm-1x.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/SmartMarketEvent-D3bjm-1x.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FeaturedGames-nbD3TQZs.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"393-I5SWjeXQH8PVWqXv+ZdP9SrJTb4\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JyNGO6wZtfllozaDLqJ85BzxPqgQf8sN4NrBWUzqziGhkIKA0iODxtTO8tVP5w8whdF8Z%2F6Ko%2FAZZSFjNcRJB3SjP9kBhdmP25jFbMsTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf0aa0e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":915,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (914)","md5":"d37f428b0dc20b678a550613982a39af","sha1":"2394968de5d01fc3d55aa5eff9974ff52ac94dbe","sha256":"9283a44e360e474d43ea28833ce526d29a5d073945453d2de7a7bc5d018b1209","sha512":"e4a3c6ae224b2d694e18796f4eb3c61124a2618af0785b6ef80f5d4b2d28a456938bc569bb55faa545fd977eb5c45b93ffd83bb7680c34841d754888a7ad8b31","ssdeep":"","tlshash":"b911cca7d580723a0a32c8bdd1109b42426813d7cb600269e58b86f573ad0fea25de99","first_seen":"2026-03-07T12:53:24.940986Z","last_seen":"2026-03-08T10:47:57.858737Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/player-info.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/player-info.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"fc-G0vR4ZLxLOWYHn0gUGSiBruUg/o\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BhzLs%2FopZhDChiyIDmK%2F2Oze7MvpCyXENBWAM%2FJ0w9JNr4AYMhB9Qw1EgPrUejx7IzzDmcjQFuQcRJafOzdpvwhMqu0mrqKUFIh7%2B9mvzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf799189cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":252,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"00c69a837dbf2437f1615a82b60d316f","sha1":"1b4bd1e192f12ce5981e7d205064a206bb9483fa","sha256":"8e094d84efd592ef377cf45fffc17cf592725e3df6ed2063350c8cfb71815011","sha512":"a066e0d2c2d7be38f57fcdb8f0124105119891282197a1a28fa5f4fff1f9a75398096b323afd25502ca0e603132b3c38e21ff84b18871674f5d4a1dd1f80578f","ssdeep":"","tlshash":"0bd05e29a070382c1eae186c853885f2910509ba06b00b35f54dab8e8b4b2282154c5c","first_seen":"2025-12-04T10:26:29.969581Z","last_seen":"2026-08-10T09:12:16.526167Z","times_seen":267,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1404\r\ncf-ray: 9d89bcfada78783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfvWH7-l2WGZEJvxD_-cbyo5fufmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=722+3 c=0+3 v=2024.10.6 l=1404 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"434c7550a1a937d1e7e8bb8416691d9b","sha1":"d837654b42d1474560a5698cfac3514209cde2c2","sha256":"5f0f065528ec2543e34a03df1cd588b4c4ce7764d1ff62e67cec0677f638c549","sha512":"eefe6cf29ea82af55070456f2bf2cf1ab3c3328938ea092695f0a25370e6cef7ed1da43633a4548b22b46d7d7a87253ef01b2c01847ea84725cd4acc7be813fb","ssdeep":"","tlshash":"9f21e6a32c3914ddefa65f1485a00d8dff03c1a5983ee3d896e83548e5788da6ca00c2","first_seen":"2024-12-05T15:42:26.602777Z","last_seen":"2026-08-11T09:52:03.097473Z","times_seen":2939,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":732,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/WagmiConf-CYI_Wcna.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/WagmiConf-CYI_Wcna.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"18a72-D3mRdbwiC75d6JsgYjO901++mIc\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTckVJzHaAxlRzSqfPiGekmNqvcq4byRbatXAhHFjuQwAr3QKifv68JSTaPiYa%2BoPtGNhc%2BwPFT%2BsVv3G4pxagWy4qP70LWeNJtvc8C3gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce548859cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":100978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48214)","md5":"12e9f6c8eab5495f4fdef334ceb8ac76","sha1":"0f799175bc220bbe5de89b206233bdd35fbe9887","sha256":"4e87b09b3b041180aa53e26884c310f54b1931710c55ced3bb99539e7f136c8e","sha512":"8bb4a262572fdec8ba5cd8324c5e12bd9e30b57431664b11a18ed95c1e29b2359539e027f156ed0cd774433b5a6df1dcec8b0a0c395ae2d9306bbfdfcfbd82ce","ssdeep":"1536:Z/k2Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPy:Z/FCaSlx5xG7NU+WEy1bPWv1K/XGd","tlshash":"eca34ad07196b46103a74ae008bf440bf239ac34200e565cf269ecde79b96e99277f7d","first_seen":"2026-03-07T12:53:24.988423Z","last_seen":"2026-03-08T10:47:57.894083Z","times_seen":3,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/userJWE-D3iU3A6O.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/userJWE-D3iU3A6O.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"c1-mEjZiDZ0vjM8LUhtPWoxfTFwiLM\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tYjszd2NZdvfCz2VbhY5XmqPlVC8gloh3obV23OPLlcRqbKE4rlhHfreizTV%2F8G1kMkgtxWyF1KalqwvTWsb0vdCgdV9CWKwZamvkSIl1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecc98e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"21d8998ae0048a6a012a1efd49f5fd1f","sha1":"9848d9883674be333c2d486d3d6a317d317088b3","sha256":"07766c2396e7f89e5b95bb679f4819440f07243c4ae25d3e8df0c1f1e6c47d44","sha512":"fc91cec43e3fc7677bf58c2f24dba1305ebf5591e3ba9545289c0138471b31785e37c8dac7472ee23d8dbb3e8982ed59dddb4ac844c477e81617ef4302821ccc","ssdeep":"","tlshash":"6bc0c0eb0cd812f7c9583c401005ec2383303a1463e8d361db0893ea7a5104ff11caa0","first_seen":"2026-03-07T12:53:24.989165Z","last_seen":"2026-03-08T10:47:57.914951Z","times_seen":3,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/usePriceChange-Bj-TfIxD.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/usePriceChange-Bj-TfIxD.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1d6-ag3mCw2npbtmxdOFSEd/8Cjo+L8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rgdhCigt0DgRHo3L5xEuHeajba5hWhTFkhkLZXh0baI9q3hOZf78UAIdmF0PBmIaEt5%2FVlAgAl59mmXmJyf88Zd7QfEVj5dnQqheEvZhiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceede4a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (469)","md5":"99492642135904dfc29586f5a12db1ea","sha1":"6a0de60b0da7a5bb66c5d38548477ff028e8f8bf","sha256":"160d16d14d0796311862023967066bbd30ae1df60a89edd8439b29f3b4d37895","sha512":"472d2b18fd235e54a25b47fc1c306d76bdfcd074bed7a28ce4b3048edaf67adece9e581647edc289cdcfcde863900476e9fab87c28cd9e2c76c80350d5e9f922","ssdeep":"","tlshash":"0df05cbe14901c23985f0cc4c26485571fd126d56bbdc32eb230882d37589af06beea6","first_seen":"2026-03-07T12:53:24.910858Z","last_seen":"2026-03-08T10:47:57.769921Z","times_seen":3,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/userJWE-D3iU3A6O.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/userJWE-D3iU3A6O.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FastTrackTracking-CVjGJF7f.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"c1-mEjZiDZ0vjM8LUhtPWoxfTFwiLM\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0kGN13gmlaePYna0ut%2FVT6PZsMVZRnrEMlQb7Z8aPt0NCkhPHO6DJcjoYpfBnKuTNgG9XRE3OzhLMU8JuFN6mC7OFUO%2Fva9e2V7AP9H1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcee4cfb9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"21d8998ae0048a6a012a1efd49f5fd1f","sha1":"9848d9883674be333c2d486d3d6a317d317088b3","sha256":"07766c2396e7f89e5b95bb679f4819440f07243c4ae25d3e8df0c1f1e6c47d44","sha512":"fc91cec43e3fc7677bf58c2f24dba1305ebf5591e3ba9545289c0138471b31785e37c8dac7472ee23d8dbb3e8982ed59dddb4ac844c477e81617ef4302821ccc","ssdeep":"","tlshash":"6bc0c0eb0cd812f7c9583c401005ec2383303a1463e8d361db0893ea7a5104ff11caa0","first_seen":"2026-03-07T12:53:24.989165Z","last_seen":"2026-03-08T10:47:57.914951Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoJackpot-DPd3ISvk.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/CasinoJackpot-DPd3ISvk.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3803-u9cgJF1QhvWyD97BTddAmx/+TuM\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oOQSp8ONslEg%2BiTjKPXCkIl7Dynknwn1fzz6hFuVj535RYOP%2BUCksztpCLhew25fBIFXPW1%2FgdqJKs%2Bk92491pIoxF9PEQ655GlPVdpSqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebe0a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":14339,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14338)","md5":"4cbdb6735220d7dedb6dfafcbf36790b","sha1":"bbd720245d5086f5b20fdec14dd7409b1ffe4ee3","sha256":"d13ec45d48c55e720d945b72ea71d492173d45c2afe59178b7f60fb16c464049","sha512":"f4f5ce6be72d54d2387f3ad84b99544425472ffe68cdf7adfb361f6344504526ba18cb8e932d6343301365f9d292d05d32e3ecea609b28cdd232594af91b3de8","ssdeep":"384:7m6srKqqF3EjFOFEGOpOpeHMtGRxeG/Pcy7x299pP8FJgr:7mB7CEGOpyts/U3Qgr","tlshash":"b0524c05f016b7fdbca954f7887ee0297a5e1aa9c71808b8d1bd6c313c2c855760b7ac","first_seen":"2026-03-07T12:53:24.90355Z","last_seen":"2026-03-08T10:47:57.743669Z","times_seen":3,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoJackpotPools-BXs6MXi2.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/CasinoJackpotPools-BXs6MXi2.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"371-swHljf+en1CiTilRulG4PBmc1gg\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BU9mO9SqLrgJuPdia9t6SEEFbv8m71%2B1P1ojh3BfaGKwhxXOUIbMIgGaAg5VvqORrMFNc7qdemsja30E0pRJtsEIbIPbFsxyb30OXSVdzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceece179cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (880)","md5":"f12a0580971844daf2ac3fae8e443fef","sha1":"b301e58dff9e9f50a24e2951ba51b83c199cd608","sha256":"630ea3cc26b5ea4673de3e6a6d37a6878142d9df88841cd4b5ece25693033b28","sha512":"f14855efd2fe96fd76d583b40d7898ae1fd57933dd42e59ddef42813a60f773e248cbd435655e9853f2dff522342740645e2c749ac8de146d6a4497873d65677","ssdeep":"","tlshash":"e5110087b02af3f4d88c18e14075555b073e2f79f75181d098ac1628662584af5a97c2","first_seen":"2026-03-07T12:53:24.990061Z","last_seen":"2026-03-08T10:47:57.76487Z","times_seen":3,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FeaturedGames-nbD3TQZs.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FeaturedGames-nbD3TQZs.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1ede-Cw8Unb7RMftsJ0a/3yCLk4UjB/0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJfhxmHnshU5RLufO4Pg6tokAoVdGXNGOpxvoNqVBaeWvCTtmVTuev1A6tGUW%2Bo0k%2BnDcFdAtJGnYYGP2ilnDqkiKn0I7Cf8HSa85gDnLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceece1c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7901)","md5":"772b73cca2de055c52a2ca21018b5866","sha1":"0b0f149dbed131fb6c2746bfdf208b93852307fd","sha256":"e550f19f47bd53561d4066f947cc59c8bc95761d79a32663fbd0650c000d56ca","sha512":"d511bce50840ed7ff8276bc89d4ecd2cb2547c8275e5ac745008737672270d4f73c1925f19c43f0224c1eba7a4fd9b82986c7ac080e82c7199911dc487f62377","ssdeep":"192:3PtPtX3fNHnEUDuncyxvQoehC6axm7UwL4Bflg+GffGR:/7VHnWnRxvQHhamN+KG","tlshash":"bdf1fa0ae014babde57b45e7b53f6108f57a06d0e7280890d0be5e1919e5346733ef8b","first_seen":"2026-03-07T12:53:24.990937Z","last_seen":"2026-03-08T10:47:57.822146Z","times_seen":3,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/TvGames2.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/TvGames2.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"8dc-v7CMjc4m2Rsf2qAI/96ge8EA4Mc\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SiHPCiT4WA8BB%2BGVzpZNBTSI1LKI3%2F46uot%2Ff8kBZLMfkRsWj6qb0RxzsRnwxovc9VSQ7wW%2B%2BD7hmaM8ZhNQoAsRxEgL9tawsdzU5TKXLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec383c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"60d24e57914ca41e702277a9ce44e813","sha1":"bfb08c8dce26d91b1fdaa008ffdea07bc100e0c7","sha256":"144a8bd1616f38a95bc6e7f59283e462f358a2dcf79e10cd7bd256d49e6e4134","sha512":"43503c3df559cc8b5fab3dcd299f5dbfc8d5a6f9dbd458781c53a409d859ed730ffc24420d462b914b4ef96f1d63d9bb508ef733bad33edadc5a2d12b22e4eb5","ssdeep":"","tlshash":"7f4165f9efb091f46dd94fa9ef324cec750e68fd9f220a84812c861c66a3d94d644410","first_seen":"2025-10-09T13:22:28.980997Z","last_seen":"2026-07-19T15:19:37.834753Z","times_seen":79,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Firebase-LOBUVNlV.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/Firebase-LOBUVNlV.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1487f-GyBlfwteYoshzfuvbpDPCJVK/KA\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUq1b6SIjxb5yR2Mk3mmTORz4UAMT6W1GbbuD2jH%2FbcTqucYHp5B4gA3Wo83aAFefD%2Fm3b%2BhXM0NqJowUC2IDHZDZgrVaZEZk8eGkwkz4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec78f69cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":84095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"443e91c67ad735f928379cc08bda9578","sha1":"1b20657f0b5e628b21cdfbaf6e90cf08954afca0","sha256":"e82962a35705700ac304dcdbf2eb78f83a4fabe1accf8e9990fdb77353a8ad00","sha512":"f39483a7c5d70704e68bf7ade4dff52606d78b4ccdec7cb7986676ea61a4150eb44de8165575cb440488a4ba17c9ce9193f83b85da8f84cc2c3470351630e17d","ssdeep":"1536:N4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:Ns1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"8283957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-03-07T12:53:24.984119Z","last_seen":"2026-03-08T10:47:57.875839Z","times_seen":3,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_aff4011d6c5525eac140c93daa9b705e.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_aff4011d6c5525eac140c93daa9b705e.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19502\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"4c2e-7JMPOtVwsrgt50NfQDKUNzueCMg\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcjaH%2BapMEIXa4OUevYU%2BwgTxENISrvuuHzAHyAGCpS5vajM1mYwm5UTSyIdEtRQOVxgtY%2Fran%2FQl4%2BpVbDDZfUls7MybjJtbstEXKNFBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcfb08d19cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":19502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb8a2fce829b77a41898f77b8044a7d7","sha1":"ec930f3ad570b2b82de7435f403294373b9e08c8","sha256":"eff975d202b8198412f6fc60d2a9d0debe36d1ea2a413caba2b3ff0fa2146327","sha512":"b4021d2ee5657abe95d0115e5695c124cd500d20ab1d331c64ac4a416de874bf3cf83e9d79c50d133c843df31a1c2dd39a2188256f920ec027bde67a051a05ca","ssdeep":"384:jTMW+QrwvaBEDdPExxNOAZA2MSjnzJAkp+4avBq59InjItQua/ctq:sW+QrwvaBYPE3WNszJt8TBznfB0tq","tlshash":"d492d0f2949f7a4a5b93ef328c38c2011faf335d0b64448461c1f69544b495a4e6f9eb","first_seen":"2025-12-24T22:39:16.161133Z","last_seen":"2026-07-06T22:32:46.704914Z","times_seen":55,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/InternalDataspotTracking-BqaVTBCs.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-BqaVTBCs.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"fdd-F7X7D+UN/vCIFrq1rovV8zexzcY\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BCyDITpGuD6KJ2lQ%2BWkLxdYDciFZHDMTxDIBdWRSm43Ax7qtmuhn%2Bh8eHX86L8KxkARqEImlhDI%2FXDlKpfkqnvIg2jzWYBBDnRToLoFicQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced2a4d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"433e8baf8e198fc1e93914fd19811faa","sha1":"17b5fb0fe50dfef08816bab5ae8bd5f337b1cdc6","sha256":"748fdd262952c788c37e6e45617b15010b467f5f99dbb30db03357fade7190eb","sha512":"f4dd64de9ad1c1a474a85ebca40043a5e98b362141bfb6186f39985ba9ad9540043ce5b89edd66d064b54a8df53b9eea557244452c4dfda793a87e9a3983850a","ssdeep":"","tlshash":"2081841fd83c09b1706489ce5877a997c5a8388e51c0c8f0603a9aae561be04d7f6ed7","first_seen":"2026-03-07T12:53:24.940061Z","last_seen":"2026-03-08T10:47:57.866411Z","times_seen":3,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.btcoservice29.com/?type=json","fqdn":"geoapi.btcoservice29.com","domain":"btcoservice29.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:31.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice29.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:26:52 GMT","end":"Sun, 26 Apr 2026 10:26:50 GMT"},"fingerprint":{"sha1":"B6:84:B1:0F:9C:9C:B7:42:55:71:86:33:49:F3:3F:AD:99:9D:3B:53","sha256":"15:20:8D:77:5A:89:1C:BD:65:25:95:9F:29:0F:81:1D:73:00:9F:5D:AD:BB:AF:65:9D:18:2C:F1:87:54:2D:22"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.btcoservice29.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TtoYoOZj9vgPXu9sNZT5bNOxw%2FKzNDL7O5EuGAZ6b%2F0CJLPABcv1WtwGO%2FCk4YFskW0VU8xjL7U7vuAMsiQV1mm5INPjb5gdTD6TXe7yh%2FKo4OI%2F5kpicg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=je0sKI6XvKP6ObsoX1UauQD.vAA_nFOwLdiTwb8Advk-1772887951.6638575-1.0.1.1-p4JYdA0vpiZvLQeGx6CAWvy_CUs.fGxL3w9MGc_YYuyxaOUXBp2xCXlq1ZTQ49lTFFiIdzCKKxyzy0NiDLZYFwQA3eRqBMbEwM8HygLFaJ6z5OTyDhMtHKXC3VkpGzXp; HttpOnly; Secure; Path=/; Domain=btcoservice29.com; Expires=Sat, 07 Mar 2026 13:22:31 GMT\r\ncontent-encoding: br\r\ncf-ray: 9d89bce1e957a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/menus/app_menu_751_tur.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /menus/app_menu_751_tur.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\naccess-control-allow-origin: *\r\netag: W/\"1adb-YjWYVQBaNZGhb0TdCpAaYdAleUs\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQzB6sV2SiNzet8zKibRtCB1O%2FNP0iu3G3KxBOrnaQSoJAdkGOAwa0vkZhuLuM9UQVUWy%2FQH8pIcazRa3CzK3OKvTajrgRqRqE9qQK1y8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce77dcf9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6875,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"10f99f9f3ca21ff632f0a7e6c695f814","sha1":"62359855005a3591a16f44dd0a901a61d025794b","sha256":"05b71da83b4e86eeb074d6632e54d0c53ab4743388acb6a3b0f1af2108b4e9b0","sha512":"37828736594746232c42d7939d0c3def4c34dc3fd7c503ae3e7d96684fe93a9dac4b2243b8d5c2a739d52ddc10d567c7f1cdc7654802a84539fa57077670cee5","ssdeep":"192:SSkcUlkiU+kuSkAUdkuUQkZUckTk2UUkoekIU1kvkq/UKkJUdkpaUAkvSkGUlkM9:Svuxuvi7iwbCCMjHxvv8MvRqzaKTi","tlshash":"3fe10702f01d5976d30c3e00bcc76d5b888e50996c9d19419d4d8acecbd649fdacb6db","first_seen":"2025-12-24T22:39:16.190871Z","last_seen":"2026-03-08T10:47:57.851769Z","times_seen":9,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/GameSuggestedEventsWidget-BvWdgff4.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-BvWdgff4.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"e8e-hTIPCIMb7gtt/iuChKpzMuq0gbE\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0s86hLoNiBGrLdJpYtNDOw1nOg4pvEBxvMPMni%2FMlPv4whRD3qVtiefM92%2BMnpI8L7j6fJXjUz%2FWXkdy7UReDFqcI0cxFIjZJ%2BdOn6K%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecb9759cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3725)","md5":"0084ead83a990414b72053dcf3c8ea9e","sha1":"85320f08831bee0b6dfe2b8284aa7332eab481b1","sha256":"c5c5a68288b7f382488ed970cd10aed614901f9e02a09ade338c72d9ca640251","sha512":"fae7a371ccb0e6f0613fb5eb1c66f8ea054fd262f118a57a68c234354b236d08135f9355bd7adf9557fbd22e48e3f23250eef68ca427509f256d53a818e72396","ssdeep":"","tlshash":"4b71d74ae010aa39a17745d82bef3119143632b8b94353c1b73fca7123e51926b5bbdf","first_seen":"2026-03-07T12:53:24.99399Z","last_seen":"2026-03-08T10:47:57.924482Z","times_seen":3,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/check-auth","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet.winwingames.io/","date":"2026-03-07T12:52:33.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /check-auth HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet.winwingames.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbFuSAk8S%2BzA9PF%2ByBOrk4HZR5tzjOQH4H1Xz6k63Vm%2FushIR04nshqz32EPHCyjg%2BNeU4pxLUX8HzsU2YJwvA28IG4cBmrJLOWm5PRPCyk7DsM6l4s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89bcee5caf37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d0ef894fa1c5fc383cce96e2d857de6","sha1":"fe19a48e71f224e79f27804ed7d5632c065e5de3","sha256":"0b3443a9377c829f10dc4dbc281475c7bf89f141d56af637ad5c59b74d00b2ca","sha512":"988a2be034f9f80c25a7cdcbd2659e4310baea3e590b0f9fe75ac9d0d7b1d90a8e8b07f33fde07627f3f61eae405d36f9afd6cbd20061b3088ab844a0821abf7","ssdeep":"","tlshash":"4c70000202000222ea80000803002a3388008838832020200008a02000230880002802","first_seen":"2025-09-21T05:18:37.922942Z","last_seen":"2026-08-10T05:18:18.847948Z","times_seen":102,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/1/2994.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/1/2994.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:36.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 21 Jan 2026 08:14:20 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: J8ajF9t6IlT2U7tuuuuEWLpJqziHNggp\r\ncontent-encoding: br\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncache-control: public, max-age=120\r\netag: W/\"26d5c6e9eb5b8acc5d7f0a4acb0bb17d\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4e0a1f367f79652e0e7d03fa585de7b2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Yx6gO9D_97maaSLHRNlK7hgOtbXjtu5ztSFSqUBqgy4N5r_n717WMQ==\r\nage: 7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":108916,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-05-22T17:22:58.310306Z","times_seen":50,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":26,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/translations/tur.json?v=1772887800000","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:31.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /translations/tur.json?v=1772887800000 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"30ccf-wCIQxzDE86LBifnacauc7SOabu0\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BYdq6Wx%2B%2B5d7kv6tX50acLntLQXitzmtwJotgU6HPiQnJRoYmYyJvvOMGJGnWsITcdoJLNG29WAROBWyj1plyeDtMrs7X5X0gMV3Vctrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce1a8be9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199887,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (63253), with no line terminators","md5":"98bed3156bb673e90482cdbac8fd0205","sha1":"1e03ac12cda0b6c4bd3512cc8af9d466a3b6b71c","sha256":"541e6f86040b54fc3a20c0323b90f95c07e72cafd50ce7c68eca8ff0477b92de","sha512":"0eab76d721f54ab7fff47c9cf9b9edaca10437b72bc6a5678446cf83a257a7c75f2dbaeef603cffbe14a9a751faae292d842828b2ff4a0ebd3d4c349096ced13","ssdeep":"6144:vu+a3k6PQoW83TX+oTo2MD4wOcOwqHECKqdpVyKjscdp:G+Ak6I0DM4wObw4ECvdppp","tlshash":"96144c05586e3cfd97a207ce74de9e66b0fa0283d150e416ed9dd63a138c767d22b90c","first_seen":"2026-03-07T12:53:24.996963Z","last_seen":"2026-03-08T10:47:57.978619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-BN9WG7Oh.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-BN9WG7Oh.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/WagmiConf-CYI_Wcna.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"35fd8-K83n9KRCNdCntym06iAberKCsJA\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sH%2B3RkRAaS%2FYUmVKOCDmJHvIEk0c2pIcH9PUEVFJJrAwGYsEcPH%2FCWi%2B3ZoS2Q1PQtatYsboZS%2FeGAwD%2FwcgaqVqqf%2BDKks0paMiBYxdAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce6dc6a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"79d6c752f856dfb9a97fa7be95d12541","sha1":"2bcde7f4a44235d0a7b729b4ea201b7ab282b090","sha256":"5087a6551a97584bc523a4155721927042fcb4891268263dd48ec8f5cda1c155","sha512":"af3d09f43981490562c9eabead1bdddfb9924ea872f5fafd1b7105b47c18c9d9efdf85d8403d3e43670b873d6b10c032854f7949712a5600e6422c7569607559","ssdeep":"6144:QfeL9y0h4R78o8e4YCIALoh6wj9Sd51jjVvFajIRcDGRD6On:QmJy0h4R78o8e4Yb/j9e5xajIFROQ","tlshash":"6b240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-03-07T12:53:24.896966Z","last_seen":"2026-03-08T10:47:57.801092Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoPromotedGamesWidget.C4EXhwOE.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/CasinoPromotedGamesWidget.C4EXhwOE.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"afd-CkeK2gVfA+RXSJTY/WuG7TDVMk0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BfggzB9xxVwjh7z4qJGuYcn64oSBZwjH%2BdkVvhU774TVkJmmyjjxoGaKk59Xx5WF4%2BAEx64RQoKw6gqiTewHK%2F53JFjkYasbEUjKtBy1iA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebdff9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2812)","md5":"09fc6c8eb905c21c7a4d044090184cd9","sha1":"0a478ada055f03e4574894d8fd6b86ed30d5324d","sha256":"d1f596a53ce4b0c43d20611ff931c0858b5d6c4c987b2b546269e639543dc878","sha512":"6811084eefb8629224c5ae7d6806c7f2b220d131a02f0c1a0c44067d684da4c1676d4aaccf513bcca338af6608ba085696056a3b70ebd6274ca6992035c3772d","ssdeep":"","tlshash":"6451250f445b273af1134e60a2bd5ed66acb491bca3b4b7cacd86157c3096c2607397a","first_seen":"2025-12-25T01:12:57.08487Z","last_seen":"2026-05-26T00:51:05.438146Z","times_seen":291,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/partners/751/notifications/whats_new?platform=0\u0026country=NO","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/notifications/whats_new?platform=0\u0026country=NO HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 982\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=3WtdY2PxuzawqT_iiXCQ6zRySAwUpk.G7wo8CWYOKRg-1772887954-1.0.1.1-z4kbtZ.xAI9tJA5WH0L8Kdtv0hB_biqYkOQ3N_cn7PtOISA9J1l7bnQLxFom138id_V5T1fG0_z2PuiNlMqoSi5LEs0M9uDaGNVXinwIqJo; path=/; expires=Sat, 07-Mar-26 13:22:34 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUx%2BCZ22F9cSsKJcc63rB5wimqva2uZH79oJp%2FvIVm%2BuzvUWIYywSGDeIy5AsoprwPlu%2FbxfQCgkZka10yEkcMeKP00cgS6wMiDhpujMPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf51b1d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d3c54fbb58bdbc049cdb0511ebe72bfe","sha1":"952c530fa5e60d5e6f4092dca93e957ff475f0e4","sha256":"e937a0e69c3616d29c6b6d653f7b58c1dedced93f6c31b8c4c7edc0aa70af0e9","sha512":"dc0267bfc82cc2bb6c9c397203c45bf5c4515432a8fcd8f0c50bedaf985707d1c2ad0fa8bfc057e3e25bd40b82e41fc3d6b57ffa4ebfa26699345edfcb66571d","ssdeep":"","tlshash":"b8315335657d4f4c8f81178a9487f12ea40f035aec54fa34d658cb6690686b8d5331e9","first_seen":"2025-12-24T22:39:16.028828Z","last_seen":"2026-05-04T14:33:03.573483Z","times_seen":59,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24730\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"609a-cW0BRKn+tacB1etIEz8VXJekeUY\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhT57zB0KmS7ikpAzj%2BaG48Tl8hDip1mGiQ9sY%2FDBcg7F56%2BEVURlBdxTHltOyLUxJ4gKHuYnfA4yYopRG7w4yVhqQ%2BBQFwYYSfa00WgRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf5ed0c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":24730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a684d3e1bc93c1bd3a25d9983b83c43","sha1":"716d0144a9feb5a701d5eb48133f155c97a47946","sha256":"8b8e3b62b691c235c3aa5aa0ca6bd0eaea4a188271006aa9b8fdff49c9a06f94","sha512":"b66cfd7a78af400a5375c747bd08f6d230798eca3fb7fb7e623a10694901475ffacc21eb5c6edadbecb1234bb751d2c62f06eadc0192731abcb5422d13d18980","ssdeep":"384:pFhktnLa9HrvO+y3t9oDMTjRsENmQFyUzDm8kNRfxv/xvr5c8JPH+UlX:etLaZ/sPj3NmQ7ToRfx3lr5c8JPH+WX","tlshash":"f1b2f1045efc293755f843d01dfcee680e5441af12980c20814e77f9faa9a3ba81ea5a","first_seen":"2025-12-24T22:39:16.21561Z","last_seen":"2026-07-06T22:32:47.05915Z","times_seen":64,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index.es-f3BQBIkH.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index.es-f3BQBIkH.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/WagmiConf-CYI_Wcna.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"48144-5YOC7TEElLV4/ZbjvR4nQnVZtSk\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9FU%2BBjFTI%2Fj2fVEGkS1rMeCLBy%2FSBEg7dZq%2Fx9oHiWFFJwylgCdQJ0YO3zwG2TqVAITPBIYX54NawJZKuIwqlo80WAbX3cmjSDMPX4yIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce77db79cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"a8dc85f55dc861c8145b714da7598e8d","sha1":"e58382ed310494b578fd96e3bd1e27427559b529","sha256":"f3f731ad270ea1821548e2d83e42281ed87f1a86bf4601f950b91f8213da3ebc","sha512":"92fd95a77ac7cce56a1b16838e4bc720f567fd0aad85289b9d6a35400c188724072de75bb7bf7be0b8cc5d660ad9017fbb5c774c1f85acea1479156fd58fdc54","ssdeep":"3072:pSzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6UVh:Qz77jdU/7sJJMcvYisoljSFN1Nd6UVh","tlshash":"d154fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-03-07T12:53:25.000647Z","last_seen":"2026-03-08T10:47:57.818486Z","times_seen":3,"resource_available":true,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/Promotions3.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/Promotions3.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"710-Za9xbEjiHtfIN+d8S3w+LzMgXdM\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FRkCSO3H%2BAerMYRLdKfkKYriLfHOKqFTpFfowVJUIj2UEFhXdwAaQ0%2FmIwXaNTTYI8b7vlsGzoDRIZfKoHQYh86IgNlXb9mRaodxkbWww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec28289cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"60e5a10a5bbcc415db7edd6ea60aec4f","sha1":"65af716c48e21ed7c837e77c4b7c3e2f33205dd3","sha256":"a8c1d1768e9efff44b10ffebd02cb4959af6be79610cdc02e44e840f0ec39a28","sha512":"418d3b818cc59a64f5261e2cc27fa2234ef1bf94a886866217d032d211c2ee47b758410154acbb7721314b855778c3e6bbd73fd57fdb092c5703c9270796ed22","ssdeep":"","tlshash":"ee312cd8ee305570eec443ffab118988795614bb69328edcf22c83886b8390800288d9","first_seen":"2025-07-08T10:50:27.664088Z","last_seen":"2026-08-10T15:32:58.707717Z","times_seen":686,"resource_available":false,"data":null}},"time_used":2005,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2005,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/JackpotPoolsWidgetContainer-DdYWMwEX.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-DdYWMwEX.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"fd9-lUtPNZvYcmOVexHmQ4Qzy2LFsjU\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQxA7LTwyiQkN1Oo7XvySmvopDoqSz2hnbA4DYxEQ5t8f3AhVI45FKzl4EQhShnFGT89oaePFK6XL0cUGXlM0IB8j7cfVhd4HHQHxcRhjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf018cb9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4057,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4056)","md5":"a0868e370e1a6b6e7b70910645251898","sha1":"954b4f359bd87263957b11e6438433cb62c5b235","sha256":"dc5f61250433a3a495fb32a49bb4ec04208f2dcae87728dc7441b4decb5c0f5b","sha512":"821a5719136cd8f6802647124c328e0b629a807a59f3a4b7553390aee3a76cc83568ddc3c74e90673215617cb96b2b9858d1e13f227800c8c6af8f6884176f0e","ssdeep":"","tlshash":"45818617e01ab3fcec9c14a2503f910e377e0bbdd75605e8d0ad05240abc84af259bda","first_seen":"2026-03-07T12:53:25.002194Z","last_seen":"2026-03-08T10:47:57.80378Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/jackpot-jNbP6Duk.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/jackpot-jNbP6Duk.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/JackpotPoolsWidgetContainer-DdYWMwEX.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"178-HTAHDn0O0IONuuIsgcQUMPs9DUU\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UFNpAMoV8ay3xGCNHUGHZdjZMNsuua6YbcXhPgN9wXxH51HVTj6%2FDsT8AQU6cDL1BS%2Fv2t7UYvsJOOBbtJVpPmp%2FptkkVopQW0Mx2IS2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf099de9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (375)","md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-08-02T18:55:38.523246Z","times_seen":146,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25320\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"62e8-lqZcPFxk5US+CnX0LnV4FHgR22k\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9iEh5yywS85LVlSu%2BDOQOAqc4YB3b9NHSZMzelR2xKXmXVGrcraZqkjC6L8tss9%2Bxxi6N%2BRWD7f2Oko526NEquNYebhF2OKwxRt61EiYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf5ed199cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":25320,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"acc869e91de526af3cc37efa5e7cd714","sha1":"96a65c3c5c64e544be0a75f42e7578147811db69","sha256":"57b2bd8ba04c5fc5617770502b74fbcbe449dbb22377f04e8042147dcc5da51b","sha512":"d35b2e9c750078007a66162e0b7956edb0b85f33f4e5fdaa25c83b7a4bbbb8e7540ff6eaa60d012ba904f0254bf0d35ac531b422eaa44763a785f64f01442722","ssdeep":"384:2AJyeaoQmlt01QNg7DPEqZK5Ud6nw4Gw+Ma8iASXoK41z+I/gYbz0n89B/EV:ZyeaoQmlS1BL6uwLHSYK41+Hc0nce","tlshash":"82b2f1b0154ab6d3708548666c0d3e9017ce8f5034ae0bf4789020229765f5fe4cfb9a","first_seen":"2025-12-24T22:39:16.063814Z","last_seen":"2026-07-06T22:32:46.641113Z","times_seen":64,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/live.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/live.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"223-cmq2Au98gsnbJRrCqNvdFCoozt0\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2Fau2mY12PhE82jFCfsstwZ0wFuk%2FW7xCb6YrajdwjgIF0ZEq5cIJ8wscpw1SxTbB6S0hI9TfPjMssb9BhoSLszpL632tQ4Xj0kSzaU96w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec0fb59cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":547,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"177a1ecefa857471d64fb388cf5125d1","sha1":"726ab602ef7c82c9db251ac2a8dbdd142a28cedd","sha256":"e9bbd35f8b3d2bd962d3811c39e4cf82d2448f40576bf0e2fc495f5231b2cd1b","sha512":"b17c2fbeb47ae4e82b2e4b65e0874d54bfe07636406d4d56c25df1af1ee331f298538b63766cb21fa96cad217f86c61c2a1a3baee117ceb992c194d80ee87513","ssdeep":"","tlshash":"10f0e9e8e0b48a583948712c1b1c28952e3b32330dd18a39306be32e1f1254673cb659","first_seen":"2025-07-08T10:50:27.692829Z","last_seen":"2026-08-10T09:12:16.498886Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoJackpot.C7UxSYfT.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/CasinoJackpot.C7UxSYfT.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"350b-fWOoevV6SBeQLf9wKMXrZ6fLOrU\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yuWsIn%2FQ%2BevVPcsIMUmuXuPf%2FCDx49RK4GqRJ1ATRE3Np0mWl0wD8FJz6ycaPbJV9eUFFWCC7XautM53gZ7am%2FYlghDXP2M3Bb7gH6bZrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebdf69cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13579,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13578)","md5":"f4b765a9546788982525c8a3553e89a0","sha1":"7d63a87af57a4817902dff7028c5eb67a7cb3ab5","sha256":"40d650a4d6aec8a7b5d75907a552768f2df82848d3309a378029fc86accd4517","sha512":"7774259bc01f672c99b7ed40a3ae4f3f8ee403355d9f71b955cac3c215c23235852eb216fafd128b92396d4e3d27b41ad34f15a30c21e238112d176f3150e7a5","ssdeep":"192:5aKQrrxX/YyrspdNl3qLq/1R9z7g6mbftDxzNfDFDfhf3fOfNf5flt/1ttTptVFg:9UVwVELPh+EDaLDRdng","tlshash":"3752ee07656f33b829ef653726f0f7cc9a3c4879c7126564a8d2a2194b8f9b006717ec","first_seen":"2026-03-02T15:10:58.211677Z","last_seen":"2026-05-17T19:17:53.627904Z","times_seen":47,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/DisabledMarketEvent-ll7hHjmc.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/DisabledMarketEvent-ll7hHjmc.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FeaturedGames-nbD3TQZs.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"a9d-EblDdjhAZ/YSZTmshnyrWj87Go8\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9Ge6uxJzGWhSgdTkgJKthbfBaoMXGf1eb4ZPxSg29bj3gGHoN3k1ks8HvXMpXspSJZMQkWg0VNnbf4%2FDTOE5%2BADK9Kx%2B9c%2FH1ltKPZHuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf0aa0b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2717,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2716)","md5":"7f4336781f33fb8717916fe5f5b36a2d","sha1":"11b94376384067f6126539ac867cab5a3f3b1a8f","sha256":"a5a74f232e9f39fd8bc47cec59844d3b6bf0b5476b8ab55746229697935e5f1a","sha512":"ef888e73747a57e46c1a6ec0a73db51e541ca5ade191fe99259f63cabd0c3ea59d1508e67e1fa474ac171a5e262269cbd8f8f7604bbb7090b2fda2e828a38528","ssdeep":"","tlshash":"a951736db290fa7d593500ccc23b1f1f641913e2c6590992d0be8c29151c0dd32aefd9","first_seen":"2026-03-07T12:53:24.880739Z","last_seen":"2026-03-08T10:47:57.92538Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.betcoapps.com/storage/medias/galabet10/media_751_002731c13987f9a2d15f869641d4cd72.png","fqdn":"cms.betcoapps.com","domain":"betcoapps.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betcoapps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 13:01:19 GMT","end":"Mon, 01 Jun 2026 14:01:15 GMT"},"fingerprint":{"sha1":"53:26:43:EA:3D:50:31:57:52:F6:7E:22:59:18:08:87:69:31:A8:D0","sha256":"4E:D7:0E:6F:60:E9:1C:24:42:F4:85:8D:0B:CB:54:29:13:A9:F4:54:1B:73:31:11:07:E3:BA:F5:EE:DC:3C:60"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_002731c13987f9a2d15f869641d4cd72.png HTTP/1.1\r\nHost: cms.betcoapps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 131188\r\ncf-ray: 9d89bcf35e3a1525-OSL\r\nlast-modified: Sat, 07 Mar 2026 11:51:05 GMT\r\netag: \"69ac1129-20074\"\r\nexpires: Tue, 04 Mar 2036 12:52:34 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=mAEfL4NnazgvyMsD3yfCdfXfiaTeZ.fLpeTg0naikF8-1772887954-1.0.1.1-.Qfda2fxjZXw5LmGIP_Q18FwgTj_XriCWOhWDyppIANR84EDsHzPWrrvoAE31byElbj4Xt984KLqLCF4.WqBF.LL_9RBMSz56rRRa5ZcNOg; path=/; expires=Sat, 07-Mar-26 13:22:34 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":131188,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x738, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d6dbcf82a97b043e9603c197ddecc1d","sha1":"7d51eeb0f49e9ec9c946a79b7679aba1887d05e8","sha256":"448cb9d7642e9d0321e04ee7e5fa3057ca469146b1ad2c2ccea52e0e346bf3ec","sha512":"7f81ef3be55a071775bff84b61ab8eb35952088ff7deb4591407ca2ca9d3ee053066fd166df4df91137b6801175b43c0b24f181a91178b07b400be2ee7aa232b","ssdeep":"3072:fQUzUCeUiaJNL5y9PkFAOWCidD9CN69plj3tC:YA6ULktkFAOKdD9F9JC","tlshash":"b9d312ffab095c2105088781eaaf0f2ed061ed9f9d35ee5d8da42945072d62a8dcb170","first_seen":"2026-03-07T12:53:25.005154Z","last_seen":"2026-03-07T13:29:05.753809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":54,"dns":36,"connect":1,"send":0,"wait":129,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato|Lilita+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css?family=Lato|Lilita+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Mar 2026 12:52:34 GMT\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2f31f582a62929942285136edb852eb4","sha1":"ade05009e3f52242452d23f325d0d60eb2f4945d","sha256":"86d1d33f6f9e190954cb9cf8f930c7ce03e60bb102b64f2ce0baab352285acab","sha512":"2e4b5ff5cb64ede4c3e63e2477f156c55597e1c3ddd83d888fd96c66bf7cc6716dcf522fad19cdde2a4a564f530022feaff488500797d01f3673e52e295ddabd","ssdeep":"","tlshash":"6e31bf92097ba80497930dc212ce7d32ef1e62406845a825afff18dcfc67c699362b0d","first_seen":"2025-09-20T10:36:49.753015Z","last_seen":"2026-08-06T15:21:02.771789Z","times_seen":174,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":226,"dns":4,"connect":15,"send":0,"wait":34,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2F1063galabet.com%2Ftr%2F","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:37.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2F1063galabet.com%2Ftr%2F HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:37 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncf-ray: 9d89bd068cc02efa-OSL\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0882f27885c5484cfe05f97d54cd1713; expires=Sun, 07 Mar 2027 12:52:37 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-08-11T11:37:32.636351Z","times_seen":103343,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/WagmiConf-CYI_Wcna.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/WagmiConf-CYI_Wcna.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"18a72-D3mRdbwiC75d6JsgYjO901++mIc\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FzPZKYMEzqhUCNQB6BRGDHB08egbY8YP2zmAWY3Eiw6yiLefwrhyQg1znbmIj0SKfbtH3%2BoBNvKl3InqCqtB00fxkGjcnMJpqFY9UklzYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce568b99cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48214)","md5":"12e9f6c8eab5495f4fdef334ceb8ac76","sha1":"0f799175bc220bbe5de89b206233bdd35fbe9887","sha256":"4e87b09b3b041180aa53e26884c310f54b1931710c55ced3bb99539e7f136c8e","sha512":"8bb4a262572fdec8ba5cd8324c5e12bd9e30b57431664b11a18ed95c1e29b2359539e027f156ed0cd774433b5a6df1dcec8b0a0c395ae2d9306bbfdfcfbd82ce","ssdeep":"1536:Z/k2Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPy:Z/FCaSlx5xG7NU+WEy1bPWv1K/XGd","tlshash":"eca34ad07196b46103a74ae008bf440bf239ac34200e565cf269ecde79b96e99277f7d","first_seen":"2026-03-07T12:53:24.988423Z","last_seen":"2026-03-08T10:47:57.894083Z","times_seen":3,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-f8Qpuhu4.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-f8Qpuhu4.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1135c9-+62LZ/6I7Ej4uRoRGavzfrz0/KU\"\r\nage: 2\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhbgKHtXIgmhFiIdU5mdC2LB1VTitCPMfgKyVcvmzJntRtLwfePuxkp4lqyB8NfY2o63%2BQvAgis7gpslxQgPsa1InmzcD8LNnKOsSu%2BmUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce76da49cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127881,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25281)","md5":"02de8f1d58024dc65c39ae707b591c49","sha1":"fe83a6ecd6419e03403469c493121b89d91354ee","sha256":"73d4faf0ada115c233dc3cb3fd9c1b3b179497cd8fe818a0a78cff51b76db819","sha512":"893e7ef697d6141b8bd43c13f2e91f227ce68f21ef94bb7632ee58534207e2c11863a5931a774b5ef3f39ac0b87d05ec65a72d3eea5c332ba81c15bce2f5cca5","ssdeep":"24576:SNvQ/muVGZ8px8knDkLmdPpyP2e1fPOrj3Z/sb/Sot:qvQ/muVGZ878knDkLmdPpyP2e1fPAj3E","tlshash":"b7256c85b055b97997b709e560af1102b1391e00f44cc8a0f57cedad29bd848a2b7ffe","first_seen":"2026-03-07T12:53:24.883979Z","last_seen":"2026-03-08T10:47:57.739122Z","times_seen":3,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/InformativeWidget-Ctxpm4s4.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/InformativeWidget-Ctxpm4s4.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"43f-70rFTpiUdSt1chmQS/O0agYthVk\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFYF8woiLlTIF3%2B7d9T6dvxTFDW68vmGaAsaQo%2BqUSB%2FEzZSKbzhdFBQCRrYWOFtKZQuCL5kVpfl%2FxvyjilMTHrZNgkGkeaEaZ07%2FbU2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcee7d3b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1087,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1086)","md5":"033f843d28de8a688876f3e7945d641a","sha1":"ef4ac54e9894752b757219904bf3b46a062d8559","sha256":"c007b003b4b436920144c22722062ed0a93a232305787426f0e65a321c969fe5","sha512":"67712c0634e53e98d227cef81445a8a21f311e176bd987b4ead69bddf927c3311049e8a93aee793afeb2777a2669c07993e8155c6d7978e412cac6587eaf3896","ssdeep":"","tlshash":"8f114646f594e67db0354dc4425790a169312ee4df39d4edd8b13408a43010b76ebbec","first_seen":"2026-03-07T12:53:24.879361Z","last_seen":"2026-03-08T10:47:57.808Z","times_seen":3,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/PromotedProductsWidget-CFAHI4XD.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-CFAHI4XD.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7a0-/CW1Z5yFdqxVcMsx22e8hfKfvio\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXnDsRQdOb0saYgf3sVTXf6lsCL%2B79PiNM0Dy1iMKuI%2BchZv0diIn25cX3L6lPOZpQ1uy44er2eFiRAHeQuOWwMCAVQK2AfUyttFMGvCWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceece1a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1951)","md5":"03a15519643f45d52bb9962d9881cdc9","sha1":"fc25b5679c8576ac5570cb31db67bc85f29fbe2a","sha256":"93d134bc62d160cbbc1d9a0dd2f55883bfb9abc2d5d62b28eab8c2393df32bab","sha512":"26db438f8ebc4bf38b9897e7bd6be2efbeb93f1475ba91c5a92c960cf9dff1a60bc913243127016a2f3888bf5e2fb7a38515fb22e2a3bce973c86d7387f1b653","ssdeep":"","tlshash":"e6415443d034a279f53a6dec214100c53c163d28d6a14965e0a6bd0ad038826bb62efc","first_seen":"2026-03-07T12:53:24.914577Z","last_seen":"2026-03-08T10:47:57.762287Z","times_seen":3,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/casino/partners/751/platforms/0/games?category=28\u0026limit=12","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/casino/partners/751/platforms/0/games?category=28\u0026limit=12 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1368\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=_ZV65HZkVxHQ2dwk_ZYsTK6r.aSjQVNliCNVAkwg0i0-1772887956-1.0.1.1-jzLqP6LL.7BHzkC0yQqpliOHhXJWINEEPPlfomdShG_aVqN48JoNEP3PfCpBURM2XHq7M4_PmidoVzjazbXbBImvwBumH6d6.BqXIhpThtk; path=/; expires=Sat, 07-Mar-26 13:22:36 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EObWuHn7zEutlmZqF1sl18gtD7G3%2FtBpbcTE32Gfd3azI2FppTaRAl0rM7Z4CW%2FB6HH6SLVzALc4n56LCeRiqvRE6%2B01XlTCkjkBzVsqnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcef4f6a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6322,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"556fb6eabe113ff83f5bc110db02aa01","sha1":"4de39527979cc6ce33124cc74b4081ffbb836c36","sha256":"503b9df7212fb6b76deca69348cff8af5cbb0009471d958e45ce33eab5d5e886","sha512":"0ce41931dadb9a6d4872ca1a78b7b038efd8145047a8ceefe01f74f30086a26d6a928a2cde506d61e63f3febfeeb36dd10bb432092525eab8e06d11dc66828d3","ssdeep":"192:EpS4FvcY4FCOFFCp2X4FCMmMhORYFCyXX44FHFnbn+g1YOYTLFCsf4FCfl41X:U1ovloT76C5qogq","tlshash":"bdd1bf5a0924faebbf490d40b4463c4dd9be13c2778c7d50cd96995e60d90e523326ef","first_seen":"2026-03-04T19:25:33.729576Z","last_seen":"2026-03-08T10:47:57.823103Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=1063galabet.com\u0026t=1772887953875","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-03-07T12:52:33.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=1063galabet.com\u0026t=1772887953875 HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsO3a%2BwBhcR9u8aeknx203DwIhLGtI6TB%2B5baLrP5Kxek9%2FtNec58xpqHjn6%2By1SrE0mpa9HJoaCKZm%2BbS6uApjacaMlvntEvOUMRGdW9zXYqWod44o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89bcf01f7937c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2999,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2999), with no line terminators","md5":"2eb3dbcb20204fc695d9f72ddfd39cf6","sha1":"3012a2ac5489d478f815f6bf3f5112a004327ee0","sha256":"2bbe3734fdf2413436718cb26d98f239e8d81aa4a794164df2b28558ca7e8af9","sha512":"bcce9a1f83b5f06a45416014d117dcd004c154be0453fcc46b278cda6519a7500e520a0e944d8d80b80f42d0a3700157edab3e0df0709642ec7f4b404238ff44","ssdeep":"","tlshash":"d35195c93ed0849d272b4ae33f3b7549e27798cf6b80c40b682c68b96524924ef09635","first_seen":"2026-03-07T12:53:25.009855Z","last_seen":"2026-03-07T12:53:25.009855Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/___vite-browser-external_commonjs-proxy-Bzld9tdJ.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-Bzld9tdJ.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/WagmiConf-CYI_Wcna.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b2-YRNFpB/iQGg2uMDj2AnJQgly/3Q\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvhnH2nqrrf0df%2Bz7JW%2Ba8xwDVVk5ohi7pSIcVJywOlSbat4b8yUL9WtbMM4mCmXyZlNsbAhpSi4s7kUMzukNYvMWhnurd5VelvoUv4ZlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce6dc6f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":178,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"95cfe4b83d6eb8f7ef53813947f39143","sha1":"611345a41fe2406836b8c0e3d809c9420972ff74","sha256":"2e245cd777470e30217185b8d092706437c2f8872303738cea579333bf277265","sha512":"127a0350bb7be8b1ed6228a0d7b999a92ccd4fdd4ca834ef7789c8794d11c2a44790002b4aa6683049dd4fc2b5156a89f6cb7d1139cd48f63116ab52de7c4ee2","ssdeep":"","tlshash":"8cc080451654ecb452471d8286159401d55c4e6eb3f4f5d0fb188d5512015cf62b8f57","first_seen":"2026-03-07T12:53:24.886791Z","last_seen":"2026-03-08T10:47:57.921047Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/logo.png?v=1767600520","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /logo.png?v=1767600520 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/partners/751/popups?type=per_page\u0026platform=0\u0026country=NO","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/popups?type=per_page\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 447\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=6q2lUkDZaxbLj5WHRasfFHAdbHJy6j8EpEPoE97eeII-1772887953-1.0.1.1-wlXa.pEyueWD6U.awGiNXFNA9U7znQek6IxQZdQra9bzQpKrN5fozN3NWj6WzgFRIW8O.wj1HO9TeF4LMV6iwAc26h9_Lbk3RZHfIX1HMnE; path=/; expires=Sat, 07-Mar-26 13:22:33 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXXbGjLbmXd0RyHArNzX1U1kY%2BWNsFnqAWuPrx5cq4dU1Hbl3YVg0fDESLACUbGYfwLqLd35yhLBipLsGFjmHxVfCMel8rgqGJK4YUTKTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcec58a19cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":564,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0329ff648280a543e05c04b9b267963e","sha1":"802cd3208021d0274d4beefd88d5506b3c735650","sha256":"66d9de0d1a43cfed4adb5f8567c6f571c430494f681e82671216f85a715d9b02","sha512":"91c830891d1c52f83771d6bcea0922d91bdaf8c6a0c0d0a5d95051bb28baf16a8cc609442d3826ebf2ff7e4fdaf5c59a19455ca83e3186a8516b1ab3ecc37063","ssdeep":"","tlshash":"fef02037b51cc831eb0529a0a0c67d8f58be3d2a6d0caa009e1fcb8cc270225e9d351b","first_seen":"2026-03-07T12:53:25.010809Z","last_seen":"2026-03-07T13:29:05.752907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/HorizontalNavigationListItem-BVePVD40.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/HorizontalNavigationListItem-BVePVD40.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2d8-sTs7KN0LmIBlC0SOt+joSrru4pg\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHjET4XRHi8r8ULykiOrqSFCeQpy%2FIlwAZXaIeMbDx2z6Xrk%2F3QrPpRb1%2B9gj3ozaXr8YXrOLio%2F8YbEy384TycztiZXBCtfmt4e1EOxeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceece379cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (727)","md5":"a7be236c08f8b027c5de7a2d754e0fea","sha1":"b13b3b28dd0b9880650b448eb7e8e84abaeee298","sha256":"902423fd0ee6bef69ea2bda1e4f85c5c59dad8812721a29f90b85412457a9045","sha512":"9186e95eca9d6659b26f479188605d9ad9baab2c8894256ad41df33ed257584996c9794ea075a2dbbf8d2ab8d43362563127dba63496648b454c134b5ea8010d","ssdeep":"","tlshash":"1801c002e014db7c9a2b55c86b9d1089b1479afedf382cf1a0f4b11209344593646ece","first_seen":"2026-03-07T12:53:24.931276Z","last_seen":"2026-03-08T10:47:57.766427Z","times_seen":3,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-Cdis3cgd.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-Cdis3cgd.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b6b-iyg/BWWaNZ+0nUhgFwr2MOxN9T8\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raYLILJCsGz%2B6PB3B%2FVKiEDHKYU1Ob%2F7rKAPEw%2FUd7os9zc1uTv%2BymiFH1%2FQOuuDgtjs3XQZE0dBHOWHyvqRXEC2qoGcmohtb1k0bY3nCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf32ef39cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2922)","md5":"9238e84abc7795316ab493ed40aa930d","sha1":"8b283f05659a359fb49d4860170af630ec4df53f","sha256":"2bb262b81d1fd10d87dfd66c45896a9c629da9772f3c2ebfad5ab36be4801bbb","sha512":"692ca58b06ff7bc23f73388c631b16e099958f9738ad4730faf74d3db6a74b75f4bf10dc3d8d9fdf04853d025365b0f84a81117cd2dfe9e8ed7d990a788401ba","ssdeep":"","tlshash":"4f5130c76042e7f4afe748e6429e10b064374e5cfe1f44a082be58864998792e35bf8d","first_seen":"2026-03-07T12:53:24.926335Z","last_seen":"2026-03-08T10:47:57.855849Z","times_seen":3,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/452.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/452.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index.BC3qGf-p.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:29.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index.BC3qGf-p.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"7f9fe-uHxRIdCzqErtZ6KUyoYhHU7i7l4\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1c%2FdxbHBPJiZ5dEImt81AqK3iiInhe5g2qJ%2BYFQbsCiOAzp2Hrs1KFA6pnyWQ0VQ9168vbUrRi%2Bip12jUpbVr%2FoWD0vIJrcO1b09jn0Zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcd40a5b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":522750,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62128), with no line terminators","md5":"e07cbac7512b7e691a0ef98ab57e34c3","sha1":"118b2764c68be28e31dee37d1027bc8b844e302b","sha256":"971143084d2b4f4fcaefb5abcc844d2f6a671b0be642ae73a41f097268139500","sha512":"6664a5fdda2f5661ad176335831689567cb5b13740684c7f73604bb2780506ffc9abd1b3cfba4d780552421f35043f1101d091d5190fc233b85ed9114b09fded","ssdeep":"3072:HT4qmID/L6Zt4llM9b63AIZpbBjPkUVIseBr/SaQFr:HUqmID/L6Zt4llM9boAykcMRs","tlshash":"cdb4d9a2968822f87b33d61f93c5b38cb014f061d9621e6ff59a612dc6d67900263f7d","first_seen":"2026-03-07T12:53:25.01161Z","last_seen":"2026-03-08T10:47:57.804514Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1153,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/fonts/default/Roboto.woff2?v=583","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:30.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=583 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index.BC3qGf-p.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"faf8-1a8G5XndX0APgDtOJLwQIHQLC4o\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnQter%2Bensa0RZkC%2FqOOHPlHVbyTt%2FhhfxCdlbtB6sIbxSq6JOapxqUmS69D%2Fs3CIxYnuQBbR8dmKIfCcNfItgNxX5eneXbIvAxNmWqPjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcdd7eb69cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-08-04T13:12:00.038078Z","times_seen":2800,"resource_available":false,"data":null}},"time_used":1451,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1420,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/VideoBingo.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/VideoBingo.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"7c7-DRQPwAswP9IyUCGOA8KMz5hqOcc\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOovp1OUoSNGBBWJFzfRRXq6UgsYy8phtjdW1XN3J95wUVa4olpjsDfUMhymcmBhNkUPQn4rXQv%2B5jY3fR3SexpXTgf%2BwD97v8kzWCLEbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec282c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cbae8aa582bac1aa011b5159e475a38f","sha1":"0d140fc00b303fd23250218e03c28ccf986a39c7","sha256":"dcd44096973914fc9f8fdeb79a3dc5379403c3d1411854e634ab7fe444578271","sha512":"05e2c75c337a1fad9f895fa0b1635725d1681e774084ed34084444508df8dc8501c01644b19ab4f9a948c1e5b6621fd67df4fec41eaaeaf187d1a9e90c58244b","ssdeep":"","tlshash":"e24133d5e7b0a6ac2ccca59d6f2148d7350ae0bf6db36a5ce22edc580b53e1c0611c99","first_seen":"2025-09-19T18:19:26.310809Z","last_seen":"2026-08-02T18:55:38.496245Z","times_seen":85,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FavoriteGamesButton-CS4ivfe7.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-CS4ivfe7.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1ab-PCxqFmtPRreuZ6UKtXkQoRv22/A\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6TzJ7X10YFLagKfsEaehQa0AL4FIW9lulpLaHvbA%2F9902QiMZ%2BTqQI%2BYoaP0mqj8OtbNJKBXAhc17n9Je9QdWHUO1DgfGxGVrFCPeF9HeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec992e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":427,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"b18de2a8012450899ea82415a9c98312","sha1":"3c2c6a166b4f46b7ae67a50ab57910a11bf6dbf0","sha256":"8b7fda528bb825243799804bbc8af252a165433bba921b794fbddc88ceafbc71","sha512":"35d9d81e4e8f0f68205fa4f98395776275f2008a81f8eccf8fa6bb5435d98087e7ec421b7d0b708ac4fb68b102e8b6f7f0c8191806bb6bbc14c2493ff35e9d45","ssdeep":"","tlshash":"fce0ab0bd099e2fa2f422ba01517c438253aa5bce75ce590809a1454397049bc55e9af","first_seen":"2026-03-07T12:53:24.912858Z","last_seen":"2026-03-08T10:47:57.960491Z","times_seen":3,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/ButtonWithAction-OOcwu9ST.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/ButtonWithAction-OOcwu9ST.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"10b-GQAds9n+2ZXXiYTf+nROqaD6ULo\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYruesygqTgVzGv83N7WXNypCgW7nAQMHvLJcXREcxR5EzAg4Fea5EdiGt3%2BPjODn5%2FZzcyhXIbO5%2FqI3bJogLvnUmNRYX80VY2Ekyswuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceca9449cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"378d5d4560363423adecce451e2607da","sha1":"19001db3d9fed995d78984dffa744ea9a0fa50ba","sha256":"fde1696cfa636a21428c7a2203b44a3bc38b37afe2cb7ad99b2759bde8c5a6ba","sha512":"a449cb56c2cf76af15975e6a0581463d2950f3b63c1f5910a99cc7554e9fa9d749dc9b346dcb7b478aff91beb71c1cef46311d8ce53aee58158d2a36cff944c2","ssdeep":"","tlshash":"bed0950f5455d2f907c57aa0513b812126256e74f794c551c058244036315dec16ea3f","first_seen":"2026-03-07T12:53:24.942388Z","last_seen":"2026-03-08T10:47:57.864505Z","times_seen":3,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/useOpenLiveChat-Cp-xaDm0.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/useOpenLiveChat-Cp-xaDm0.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/LiveChatInc-z0VjU2-r.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"247-zfq29W2zwwyUfWRaYsxv70TeoOA\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23I077tqvwtZjHQlbojEm0AIUmyz%2Bimb5o1sD8mt2T1lMECH2pngCDepn4VdnDqPRdLQRgHvMf67j%2BHwkbu3jpKmH4JjS0jlWGoEK5Xbnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcee7d449cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":583,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"631e9fcd4e2dcdceb49ba823a1722129","sha1":"cdfab6f56db3c30c947d645a62cc6fef44dea0e0","sha256":"166b01b63ea032024f36cd7eee554695da5e7233c27cbe9d5086d74ea1a0de1d","sha512":"face4c44e39c2b7d54c8bb4278bb70c2b4dd772bd5ce7f11a4ca96afcc5e7133c69a60aabcb0a7c45d650b82302562e78dc152e79780db97acf4d82c2c1d878c","ssdeep":"","tlshash":"85f0e19f46944e7cc1c0cfc1516be5f85b3c2ab4310cd851e93b2c88682484457bede7","first_seen":"2026-03-07T12:53:24.980937Z","last_seen":"2026-03-08T10:47:57.742573Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/CasinoJackpotPools-BXs6MXi2.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/CasinoJackpotPools-BXs6MXi2.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/JackpotPoolsWidgetContainer-DdYWMwEX.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"371-swHljf+en1CiTilRulG4PBmc1gg\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awlLGoz3NQ9bEbjPfyaYz%2Bh%2BR1eBgX8uApZgw2aJFl1AOSvxvjpU29G%2BzvK3Mcxf43WKwn7axP5g7PgWCBY6WPyZkJGcdxg1RTaEBNHxDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf099e79cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (880)","md5":"f12a0580971844daf2ac3fae8e443fef","sha1":"b301e58dff9e9f50a24e2951ba51b83c199cd608","sha256":"630ea3cc26b5ea4673de3e6a6d37a6878142d9df88841cd4b5ece25693033b28","sha512":"f14855efd2fe96fd76d583b40d7898ae1fd57933dd42e59ddef42813a60f773e248cbd435655e9853f2dff522342740645e2c749ac8de146d6a4497873d65677","ssdeep":"","tlshash":"e5110087b02af3f4d88c18e14075555b073e2f79f75181d098ac1628662584af5a97c2","first_seen":"2026-03-07T12:53:24.990061Z","last_seen":"2026-03-08T10:47:57.76487Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/464.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/464.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FacebookTracking-CYRgXF9D.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FacebookTracking-CYRgXF9D.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2a8-w2zTyPGAwGjvxi7qDhv5Wx+dc8w\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsLPDBQ6TUVhx%2B5JMpQageJkY2H8zMiRW7kXZtyazm5IpAqN%2FmDpK5JGp3J1YtbrEPhc1eZWzZEQjvXKYdGBz%2B6v7JUWEjHyUXm5P02aPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecc9949cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (679)","md5":"f3fb8e493edffad88f01df2d9e20cbd5","sha1":"c36cd3c8f180c068efc62eea0e1bf95b1f9d73cc","sha256":"37605bf81860243707f0318e1c3590747374e124b2e85863b3287e97f669779d","sha512":"141ff14e6149e2b34568571daeabf7fcdd24bb10f61dfa7d9eafc7f10aaac7b78c3fde1f68312eea695ca39ea33a940dc5bd1d671ebb7b0faecc94d3800daf2a","ssdeep":"","tlshash":"7001230f2c45b47d1a7c18f8d3bfd81426ba590e268f45a5c6d3cdb9366458a40cdbcd","first_seen":"2026-03-07T12:53:25.012466Z","last_seen":"2026-03-08T10:47:57.852829Z","times_seen":3,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/LiveChatInc-z0VjU2-r.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/LiveChatInc-z0VjU2-r.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b68-5Mrz6RJWkD6gPHt7Ot+6ugFmsNg\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFLWE%2FeLNT7ymImte6hU0NhOfjxLUal6TRyXc1CwKlpV274K0l%2F%2BdlH8MV%2FQO6QvX9V4o6OK28CCqWh%2FdNBj97cysnXa4Uf0IiY0X%2FnDng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced2a529cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"33b2b43c95add547547c7f95d8eba8db","sha1":"e4caf3e91256903ea03c7b7b3adfbaba0166b0d8","sha256":"604ab6b4a4b89ce90f5322988a108d8c6320aad934c22fcf2ddcd1062a44502d","sha512":"782aa71523502543ef24c75a225c8f8258f1b925c6a42e82e2fd714594aa75ed300132decbeac9e4b657821c62f81e1e21b9d05678cd3c3d730b4fe369765a02","ssdeep":"","tlshash":"3d5124dec43cb4b1929e67d1323f7b5f7116571a94048d31656c4b0af62e0cbc467aca","first_seen":"2026-03-07T12:53:25.013263Z","last_seen":"2026-03-08T10:47:57.811174Z","times_seen":3,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/GamesOfTheWeek.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/GamesOfTheWeek.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"be0-s54NzoLuwWZRVmkT59ihribuJdg\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgTNsp1Rth18SEgtjh6%2BiBj0eIdrIMNPPTimx61A0N92PCbhRS8t9SV1W9o98ydsIVv7BQQ4M1xo26HpW05tsl5E8wIejOR7kpFwkyDQ%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2ce4d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bd48bcac13b7af9a43338fa39450069c","sha1":"b39e0dce82eec16651566913e7d8a1ae26ee25d8","sha256":"e67476d135f1d3e566d62c017b8a4afa7b3013dc29540a85de3c9f071a11812a","sha512":"39c26cb74b8bea9fd071edc07b5fe1ef144747ebd23593b409aeb8f0e6894daf00a946805f222e2dca66dae48baa4adab0196a4ef71720fd109aeba8f11e1026","ssdeep":"","tlshash":"6951b0d8c5254afa1bcc335e6322542b0cc92fd6f7a35cd8b27c85985b13d062a7e883","first_seen":"2026-02-24T14:23:51.265611Z","last_seen":"2026-07-13T02:25:32.274163Z","times_seen":54,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/948.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/948.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:42 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nage: 0\r\nlast-modified: Sat, 07 Mar 2026 12:52:42 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evAJRAHXR%2Ff4aMb9n%2BaI0Kj2%2FlOsAorpPfY7Z8jpABAhMOJ3%2Ba1i5U3ROJUwYFrALj%2BVbDqQqfDjVMtHJuefr82OwLIO4lzJ5tSB5PL9jA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf7483c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"cdd117e74ce4e2128924bb21d38e0e37","sha1":"5c2a6a9c9b3fd6db83ad6377ff8f945154b3bc6f","sha256":"7571ef92df8e2643cab42acadf174497d4d651e348f61617dbe7afa39095b5aa","sha512":"c4587c9ca9649b5b7626a78695dcb32dc0ab65266dd6e0b6c353a607f76f5301a95a6c78e3b25dd6f76e5822d6680bb20a4f26daf19f55a1bce6ae82d5b1c40d","ssdeep":"","tlshash":"7231277328d3784e73837a3f024a018af07a039670028ace1274e12d4ea1cb5585d853","first_seen":"2023-10-14T20:01:15Z","last_seen":"2026-07-22T10:48:38.47386Z","times_seen":212,"resource_available":false,"data":null}},"time_used":7149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2472\r\ncf-ray: 9d89bcfada52783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfSFghIByqO-qpSeiAGASfCVErfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=17+5 c=0+4 v=2025.5.1 l=2472 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9bbc32ce28fd80253987f2e1f0be287","sha1":"ac50a6c9aaaa9a3fd32f610e9858fecee25be6dc","sha256":"9b9632ed8ef4f6d25483053b956d22184ee488efd3f8c22e0ef2626b974475cd","sha512":"5863d7231d17d3edf58896ef5332bb631d9a5c27d06fb934be7653a6847b8918e92ccb66090e97c8b96f5bd51b3c9ae112d2c4eb9407cfe8f617da98ea3d3dd0","ssdeep":"","tlshash":"f8513b2e28bac5e8bedcb4ce2f90883a3283b7511ad4c45552d80854e35fb41a1db0d8","first_seen":"2025-03-01T08:57:15.902828Z","last_seen":"2026-08-11T09:52:03.050899Z","times_seen":2830,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/firebase-messaging-sw.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:29.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /firebase-messaging-sw.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"465-gZ9gYVYk8CXRJW78QI2OV2qQnHs\"\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c9eIYtt%2BfVY4swfiQro49PWDDaYCl8EcfkkUymOKPfxfhbS5KAmOLITe16tcLIPncAwzxeFO%2FDj2V%2Bmx3Gz9R0PErusHuzJPkWCL5R0NGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcd40a5f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"44b92a7d10cb0970ced5798c2eb1b8ac","sha1":"819f60615624f025d1256efc408d8e576a909c7b","sha256":"a87215bfd90d96fb55335ce2b2411f38074588149c9e896505cb10b250e17e1e","sha512":"75c55da9e8afbd96b6219292c91fb88e01c15d20bafc974028763227220aa042f4b761895d44b0394baae53c225e9b0c109d2eca333aad6b382951a60448e8fe","ssdeep":"","tlshash":"5121cb124be2f8231e4104c7679f32186e290d2507b0f1de61bf56b86b0a57b206bbc5","first_seen":"2025-12-24T22:39:16.149326Z","last_seen":"2026-06-17T13:25:54.195615Z","times_seen":78,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index.es-f3BQBIkH.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index.es-f3BQBIkH.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"48144-5YOC7TEElLV4/ZbjvR4nQnVZtSk\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyDNrJLHkyOH87Dr2FDDGTreDMmu23IGIkWKQAmFdN2eQ3R2he4N4hQeNyKaFl1KuhG%2FMG12ZznSgiJUSqmd6fYYivlh0AUiQkoQM%2F4imA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce76d9f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"a8dc85f55dc861c8145b714da7598e8d","sha1":"e58382ed310494b578fd96e3bd1e27427559b529","sha256":"f3f731ad270ea1821548e2d83e42281ed87f1a86bf4601f950b91f8213da3ebc","sha512":"92fd95a77ac7cce56a1b16838e4bc720f567fd0aad85289b9d6a35400c188724072de75bb7bf7be0b8cc5d660ad9017fbb5c774c1f85acea1479156fd58fdc54","ssdeep":"3072:pSzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6UVh:Qz77jdU/7sJJMcvYisoljSFN1Nd6UVh","tlshash":"d154fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-03-07T12:53:25.000647Z","last_seen":"2026-03-08T10:47:57.818486Z","times_seen":3,"resource_available":true,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/501.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/501.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 07 Mar 2026 12:52:36 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrPjieYRBXCwxeFvNC%2BSyvfLIpEVw5p28TluhKWyjsK6wWnh8Ygp6rmkJqVCBzK2taKGuLhcA3Jq5lZfJsbPcQz7ul%2F7H4oxZ6Z1tsyDCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf758759cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"195e42a3ed0da86c469a643f5503d275","sha1":"f397e9c29e76d27a11122ac60780a47366ab8be2","sha256":"38b46854aacc74662d396179b8a5c314b60d439d5371a20225e6cc92b585b89e","sha512":"86ebcbb424eea7834f9691738cd97864463df6f784940b52d5b5048a6c75e1b74c73d93a69c19f4be6435268c71f4302343f97c1a543483ebab98d6bfc69c599","ssdeep":"","tlshash":"d031e8bdb34d5a7dd069239c3724e915ee26327f81110ee2321ca3604338ec94ba9eb1","first_seen":"2024-02-23T14:13:45Z","last_seen":"2026-07-24T06:00:38.109569Z","times_seen":215,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":956,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_e2992c962b629258e32496488e343bb8.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_e2992c962b629258e32496488e343bb8.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18922\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"49ea-a07Flw15puaMNFLtYhY5AGCDiiU\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsMT2z4ycr5WuSO%2FeVP%2BG2zWFRtt0lYs4tCTYcNotC71Wai5i3BtnBO%2FQk3blB1k1B06vzJAzbkrPbz%2BVazw7pSQbemO9T%2FOXNROcY6UQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcfb08d79cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":18922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"903c69c562a0cbbf1c19ffb312754ab9","sha1":"6b4ec5970d79a6e68c3452ed6216390060838a25","sha256":"0e4d56e0eeeba1be555347bc03ed2125cb792ae75f2ce14668b360230c341f18","sha512":"5b6ebcac994b2e1c2544a910a711bfc046d701704b371d62732b1754bafa403e5486b91eaafdae875d752b7e3122fc33e7f22a463e581b4090d2779f80ce34b8","ssdeep":"384:8Iy4zvEFK9vUhGAB466Z1W042wifdTAyYQiai1i23xB:fzvEw98Q44R1WmwifdETQiXDBB","tlshash":"2782d0a6787d1671ef46e14583b883de87210a0d9b91878d1f18a420dd3d72ecab51be","first_seen":"2025-12-24T22:39:16.347068Z","last_seen":"2026-07-06T22:32:46.901152Z","times_seen":55,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"events.eu1.segmentapis.com/v1/p","fqdn":"events.eu1.segmentapis.com","domain":"segmentapis.com","tld":"com"},"ip":{"addr":"52.49.34.99","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:37.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"events.eu1.segmentapis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sun, 07 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6E:BE:8C:EC:AA:F0:8A:50:90:0A:E6:C9:91:BD:26:DE:D2:1F:39:C7","sha256":"F9:2D:36:7B:E1:0F:B9:06:71:4E:07:2E:BF:99:BD:75:4E:49:9F:E6:06:C2:E7:98:EB:1F:A5:83:10:CB:27:41"}}},"request":{"raw":"POST /v1/p HTTP/1.1\r\nHost: events.eu1.segmentapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nContent-Type: text/plain\r\nContent-Length: 790\r\nOrigin: https://1063galabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\naccess-control-allow-origin: https://1063galabet.com\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"90749a50019a27e1f32cebdbaa7a1bc1","sha1":"8329e3339f928f8591024bb0f938dab99c0ad4b8","sha256":"12f71cb993958eefc4bdb41d7dbbda490779a9c7aba448f7be52bb63912e0254","sha512":"b3959e671f729eda8aba59886df18c60ed5a768a3357dc09b29069b0da9c9fad7073d0072dc47f3ecfdc945351fe82ad3b653dd5d79d01096e5ae8bb42af2bcc","ssdeep":"","tlshash":"b8700022000000b200a0b0020028a802a8a08c0880820028c00a000a8a022802082008","first_seen":"2023-04-06T01:58:03Z","last_seen":"2026-08-11T11:29:13.237598Z","times_seen":7422,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":106,"dns":9,"connect":36,"send":0,"wait":37,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T12:52:29.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nx-cache: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Od5%2BmLhftoyZBKF95DIlbSVioNU5JSXTxcwv%2BO7YybSPFQ0XDyCvusaqfmJk61akTh0KI4Vcgzrd6Iw4h%2FXKAgxqCCKi1EJhA1Xt2ZTYnQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d89bcd25f8b1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12539,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (336)","md5":"485bcf352a78e4915a958be265508cfa","sha1":"239c98a982914bd525fb04ee69eea37dcb2b48ac","sha256":"c2c2f665670a534da8c654c6368aae0353d1103d44912a5608f5095d013e6279","sha512":"6373e369dc8c9fdfef4dd65ed503cabacdc387fac775a5927349cf5a243afecb35e298e1964f9a5186e3970ad7db1159e2be192fc9c3a751f178b5a28c9ac288","ssdeep":"192:OAggNETFJ46K0rV0QmXzgCjzQqLQn6eczBIRws5JLFSVZOrJ5pO2Awqmx0OhSEAm:O+6TFJ470KhZo6tIRx5Xr3An/h1Q7T","tlshash":"4a42864ba5a2a4251313607a6bdbf0087a22a017d804fc947c9e47d81fc539d96b7efb","first_seen":"2026-03-07T12:53:25.018525Z","last_seen":"2026-03-07T12:53:25.018525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":46,"dns":14,"connect":8,"send":0,"wait":121,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/Predictor.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/Predictor.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"2ce1-PvhabPhGtOPARTZSzRkqkttIFlw\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7QnhPIBhoqYRX4udW84X%2Bfx%2BA%2Fq%2F%2B81wB9bomRmL6bYXU0Bx%2F9%2BuIiTn5ER%2FX4D5t4RK87o1Nf5Y3BIGtT76EMhBjm1VYyEZXv9cVSFiXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec281a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11489,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9b3949596034c0e170589b0d298d8d80","sha1":"3ef85a6cf846b4e3c0453652cd192a92db48165c","sha256":"14ae74f8558911ae15ae063621fa5b3f92699ca40af8034feaf7da18e1c5b5f8","sha512":"cadc1b604d9bbb9116a00b9cae1c19156c46103627ff76f5040c8f249ed6f0215f662f45a25d9fa1654671e8c6cfa4b258cc01d7f165f4a6d1c443671b91f68b","ssdeep":"192:IDzUUkrlb5YU/aMstNifMcLwW/ykO8piJesLUoyua7aASt5KsM50FgJGPbdGl+Jv:Ehk5b5LCNi1LJ6gsM5KgEPJGl0v","tlshash":"d2322fe7cb30c0e038de25bede2a5ed93a1ab4bd5ab1d044536dbc09d6c3dcad628540","first_seen":"2025-08-06T06:15:59.472831Z","last_seen":"2026-07-25T08:10:51.70733Z","times_seen":114,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/GameSuggestedEventsWidget-BvWdgff4.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-BvWdgff4.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/DataspotTracking-B6EJqyf8.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"e8e-hTIPCIMb7gtt/iuChKpzMuq0gbE\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zV%2FjUSmNJNxQjcOL78R3II4YSWFswb28uJmf0yh7NhfpVwJybSCMNTnFztKejCW%2BH9iGSWM8h0r6xp7ohBNBpGGzk%2BL2SO9kIadeVnBtJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcee8d6e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3725)","md5":"0084ead83a990414b72053dcf3c8ea9e","sha1":"85320f08831bee0b6dfe2b8284aa7332eab481b1","sha256":"c5c5a68288b7f382488ed970cd10aed614901f9e02a09ade338c72d9ca640251","sha512":"fae7a371ccb0e6f0613fb5eb1c66f8ea054fd262f118a57a68c234354b236d08135f9355bd7adf9557fbd22e48e3f23250eef68ca427509f256d53a818e72396","ssdeep":"","tlshash":"4b71d74ae010aa39a17745d82bef3119143632b8b94353c1b73fca7123e51926b5bbdf","first_seen":"2026-03-07T12:53:24.99399Z","last_seen":"2026-03-08T10:47:57.924482Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"dataspot-internal-wss.1063galabet.com/socket.io/?EIO=4\u0026transport=websocket","fqdn":"dataspot-internal-wss.1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"104.21.14.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dataspot-internal-wss.1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://1063galabet.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 8rlpSqDGPDE2XSs3YkTK9g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 07 Mar 2026 12:52:35 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 1oXmTjdYbEd1RXoIxn9iJYT8NEQ=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=haLYKFW%2Baa96U0enbUJ8cyY16Gr%2Fn%2FUPaOBvfRSEa%2F2XBgd2EcmFc7WlyjU0ooOjagB%2FQVAPKeaD60FcIJSVXYNs7xEiUTK8enk82QThPz3Hph9DsMd3RLzfimrSOx8PY5s0U%2FdjVPF%2Bd0g0qPZrQtfT4rq0VsSu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d89bcf708492382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7605\u0026min_rtt=7573\u0026rtt_var=2188\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2354\u0026recv_bytes=1214\u0026delivery_rate=374111\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=98f4ad7947a179cc\u0026ts=959\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":1069,"timings":{"blocked":-1,"dns":43,"connect":51,"send":0,"wait":944,"receive":6,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"dataspot-internal-wss.1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/1314.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/1314.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nage: 0\r\nlast-modified: Sat, 07 Mar 2026 12:52:47 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1B9ShQtWWx72t5mZXI9tyXTlKQfiV2RShEWT7%2F3RWHY%2Bu2YZdr%2BY%2Fy1rw9DV7a6p7WVIdbhn%2ByiVwccqIHZ83Z60LVCa8RtplZEu4M%2BCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf748599cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f0404c793c9ada95ffb90f05d5e7b883","sha1":"1b891077269cfb7a42c64cf3b1402bddd5c16834","sha256":"65d51b0f53363d6b31f2cff6fd298ee9bee6d7dcc0b316ae5c268b832472d280","sha512":"e96678a62ab515def944eaf6963409b868f8f7f74063a27569fb59221183ff6aed406911b7113d2d9a2098245da66b95db0cf3cc05181051016a03c1576d0cf1","ssdeep":"","tlshash":"e5311ac279e3ab949d2c711380797018ba3ea05f88934d8cc3e0dc0a121fbb0258c7f9","first_seen":"2024-09-28T07:22:53.513925Z","last_seen":"2026-04-06T00:39:37.881945Z","times_seen":62,"resource_available":false,"data":null}},"time_used":12466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/466.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/466.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 07 Mar 2026 12:52:35 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWLXYWABChYim14Pnbtd4nSIa7rLaLV7OE2jkOWCNKMhZpZsKYoWpfnZm%2FdBSMqvyNQdcFXt4TPAoL82aoClMWJOZXbt6fu53U8SYWBiDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf7587a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"4c4c28d3f9e75ef444ae17cb2c1bf006","sha1":"7e13c88e0e2edd791fb4b29a0143ef50780b14bf","sha256":"baa07a18353d0ca2c4678611b30bba33757d8dad7467ac13dca933d02b43297f","sha512":"a2bf0f4fb8fcedd00ccab5436560a0696a23d632080acff482d64fd6b06b01f25e32f8dd86e0b24ab9d8f26ec68ab47ae6faf58c41086db8aa50ea0eb9f66bfc","ssdeep":"","tlshash":"5611c499e32c703cd7aa961a220e5263527fd4ffd528000c2abbca210727e5c372bd30","first_seen":"2023-09-23T15:54:58Z","last_seen":"2026-05-16T13:14:11.771567Z","times_seen":264,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/69a57608065c5f1c350d5dba/1jin5a54n","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:30.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /69a57608065c5f1c350d5dba/1jin5a54n HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d89bcdcdae82678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"301043838fb248dcaa19a9d4b52081f9","sha1":"69c243ff968e15ac81108b302c260fc1cda5e0bd","sha256":"62aafa7a133c320d51a2fe8886b9f85beece7a6d50f4d3fac8b0fba09a18d1f9","sha512":"4d7715e3538a8b541700fa1686baf572a5f9e45c08c4d2e00db5616d2f4c58f6609f7f085714334f16b98724cc0924d5e6e4dfc4b83e5f10bcd15d18608491cf","ssdeep":"","tlshash":"c941dbea6b4f1c56b22410d90dbef90ef47720f749da5892870c085276657ad2f8de38","first_seen":"2026-03-03T12:28:33.689726Z","last_seen":"2026-03-08T10:47:57.787423Z","times_seen":8,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":41,"dns":20,"connect":1,"send":0,"wait":168,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/X50Wheel.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/X50Wheel.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"65a-n0QhqO5tvZSxXGIJiigI56nfRDo\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2B0KsacJmvm6mdSUWO4VmL%2F3IAdC8W4slw9H%2B8juBJhgtbj8oZbdRFng6v4CMdwP06Oids1JUMHIWEoY8KtqKkW8If%2F69SwsRO3OG96WdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec0fd59cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6a4e68d64ae400253c8553f277334db0","sha1":"9f4421a8ee6dbd94b15c62098a2808e7a9df443a","sha256":"c7d0844a8e2c9ee547a4b9c4927823c95fca71407aab9cfa85bc1175c01fc1e8","sha512":"3472f7072defa5f4f70e595969443c4310d2f86be210449dbebb88defac139a9bd68503f7cefce592b93b10f0910846e815b72ea960c2809326f390e1c0566cc","ssdeep":"","tlshash":"ba3122f5fff1ceb64c9413bf3a148ea82595c02d8e618b58c83a4d98215383c9f502aa","first_seen":"2025-07-09T12:38:57.780257Z","last_seen":"2026-08-04T12:14:01.596998Z","times_seen":193,"resource_available":false,"data":null}},"time_used":748,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":748,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/withPanelButton-Dfy2A7It.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/withPanelButton-Dfy2A7It.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/NotificationsButton-BSOVhjLm.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"441-uM7kZW2RhvGQyZWdpmtW+PNnDMY\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaQs9sB3tc6CbBCvLiMBBtwgDcdqPGQQmrPM7CU3H%2FfByqO%2Bc4402SKFemSfncEvxKn0MLaFa3lQm4dILc874WzhmyT85iEQJxHNJq%2BH%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcee5cfe9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"b68cdaa28be25ab33a4f3b67e98c4440","sha1":"b8cee4656d9186f190c9959da66b56f8f3670cc6","sha256":"a1ac916cdedd060dd8eac93c8849ee59f2cb4392960ba6fd8cab5078e3149b8e","sha512":"b31fcea2f039d8f10acef2b3be54ec649ba589f41f5c648df6c08a3e7d37c7749dd79616f620e8b3b6d788e69af9b301c8c9d281bc2d9df41d3f398fa4244570","ssdeep":"","tlshash":"2011f0e5f5c4a9b1e4c41188577b2cb2719b32d9dce114d031b2c8da5fa8048995e9ae","first_seen":"2026-03-07T12:53:24.950902Z","last_seen":"2026-03-08T10:47:57.839029Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_9ebd89d4b7e272eb1d283c8014d5776d.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_9ebd89d4b7e272eb1d283c8014d5776d.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37486\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"926e-tUxyCqm2LpHB4A23roHRDrnJJ+Q\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbNbDSrsQHe7x4%2B%2BIiv3yVLPRiJ5OCocBXToax7%2FudLofoHTOpe49YuM25%2BZqjxMHZ4ciWixNdbzvMya4oMMaOF%2FrgzWWhn3C%2FAakq1rCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf32f059cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":37486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9ac9c7309c1e3ad08e40dd34bc454d67","sha1":"b54c720aa9b62e91c1e00db7ae81d10eb9c927e4","sha256":"640800f3344f29c8b95ceb80f1f18aac2f2ffe62262bb82011568b4bc67d64b2","sha512":"d1a2159808eff2f6b9fd0072bdeceb566cd349518779f82a9166afb4a5c879c2fc51c523794341a33e9e5d784bb0a5a9ea0294e9e07c5d575819ef951b69aaf8","ssdeep":"768:IcaczNfC9tDfLhOgCk2HVAtL8VWbxJbOL6Cew4fxNpT8hxuK:Icac58zLcLkuGbqWCe75jwPuK","tlshash":"16f2e14fb3792174723d7d8b686cacbf6a473215b6bc1c4e44b37121a697f3819268c2","first_seen":"2025-12-24T22:39:16.389829Z","last_seen":"2026-06-06T23:43:56.102638Z","times_seen":13,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":755,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/465.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/465.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:41 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nage: 0\r\nlast-modified: Sat, 07 Mar 2026 12:52:41 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQKnFDuOIzpLunURHLtAy3poOwqKCPKDOvKEAU%2FpoMZAFlj9aKfjPq2BLYL6oEvC8cnHJt3j7oiz2a2%2BmoaxbwmkXOXQyK56aNWvd5aorg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf738279cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"e4ba71cfcc698f952e0049950cffb2c3","sha1":"a0094cab0e24919b17e8aa1ac4a78a6352d9a65e","sha256":"d6bf84ab4758ecdd2edb998561c398fe8b8a7187bc28578fc74a57cd7dde6dd4","sha512":"05823803e75116215e57d3bf0c15a3f7c302fc053056c5edff48bdfbeac4439129ebe27044a5f0fdf73cd16ac7a78c5952300c39a9c1895ddb72a0a76f3d1b1c","ssdeep":"","tlshash":"9c110cd23c885e7cd9bff22a1019c11183395c3b25cdc439ad24c25936aefc251ce105","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-07-24T06:00:38.866084Z","times_seen":207,"resource_available":false,"data":null}},"time_used":6465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/459.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/459.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nage: 0\r\nlast-modified: Sat, 07 Mar 2026 12:52:47 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e636vvJx0hLf4OvDZToKaHDYaNpNjmqCL6%2Bsifr4Y0ZohI6wyk5DRJwv4bHly8mQ%2FGiRYXh34JoyNq8M0%2Fljjfm9ttx0FHlj6%2FjCRV460g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf738329cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c170eee63d41ac7ab51493f7390ca364","sha1":"8fa7adeb23d679469788e787637d020190ca4e57","sha256":"f541b4b97b1604da29a2632ddbd3a3008b0794397bb0937f94078414d04965a7","sha512":"498854019e89b4120a56cadb29b9a77f138286bf18c3869db0c0fcd0afea62949a6334bd0cbc939f7fbe4878147b49e400b8e591307762e58435eedd80971ebf","ssdeep":"","tlshash":"5a31da157e6e387cd21a41b2183254875819c37b07e9159de715cf2ed9428ac40f8bd3","first_seen":"2023-10-14T20:01:15Z","last_seen":"2026-08-08T13:53:53.934182Z","times_seen":246,"resource_available":false,"data":null}},"time_used":12663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/946.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/946.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:42 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 07 Mar 2026 12:52:42 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9l%2FzVxJ4dP%2BcA%2F91ENf%2FJH5ccSuKAIWqk7La%2FeQ1uvB1e1EoRwtLHmC5ZgIb2%2FxICQklTkV0SaY%2BnDQvzBNQzXfKpDXfT9ocpcFnGxgHWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf758859cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"66a4a01575e7808c773bec77b270cade","sha1":"9a8392cc52bab97db72d6b85e5d9b86c616d9ca8","sha256":"fa3cd2c065b2549a867cec918fa183914daaa3acad7cd4f5226e78f2c908e003","sha512":"06a00dfc7ef59fa66cd52dbcfd4c0ac2f623eeb353dd6dffd094ab99365b44cdc0621f18bef56e1c3830aa897a3fc614ef774a3497a8687ca8bd0a28c4bf1497","ssdeep":"","tlshash":"212119d8de5800719f236c1701ae15333c26da7a9203aa65712fe2446408aac128a3ee","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-05-22T06:52:52.032818Z","times_seen":203,"resource_available":false,"data":null}},"time_used":7116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/JackpotMania.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/JackpotMania.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"1796-y0x+53laIe3b423jb/bC4W5fh8w\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzjDdE82JBwBo8bvmOc44RKhwg0b%2F1C1MN6SDKP87RROn3gMMY%2FaZbKMq0HQ6Na5a%2F1KoQ5L1qXmpAoAWte%2B8C1soWtw%2BF47K3%2F03XceoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec0fd29cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6038,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"829680ca0f2f9d1f5faae192e8e40d75","sha1":"cb4c7ee7795a21eddbe36de36ff6c2e16e5f87cc","sha256":"05bca82b332ce5b8d3ab2c1e26331babd5f33d3ba924bf3e2b63b7fe44f8ed79","sha512":"173fad7120aeaf6cb2f7fb730a95b9af4587cb8804d09fd8a506e5eda8eeaa02d828a05e4c4e34bcc56f542e68abe6443792c891cfc8f2eebea59e21388b7a90","ssdeep":"96:NqjNrGLUu6fBaLQk9p0ZG7mi47U8/UA+5pRxq8uK/DUUt2TEojLdK7HiBe4I4erG:YprGYdqQkQE7mAQUv5p3q+DUU0Xqio3a","tlshash":"aec145fafb75a0f96ec753cadf223e3d79495d3d9e618794512e9a8907439c803018d0","first_seen":"2025-10-24T05:32:28.41634Z","last_seen":"2026-08-03T05:58:17.611717Z","times_seen":67,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":854,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-media/storage/medias/galabet10/media_751_609aa2021173dbc7867be74ac403fadb.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-media/storage/medias/galabet10/media_751_609aa2021173dbc7867be74ac403fadb.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2609\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=604800\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 23 Aug 2023 05:40:21 GMT\r\netag: \"64e59bc5-a31\"\r\nexpires: Tue, 04 Mar 2036 12:52:33 GMT\r\naccept-ranges: bytes\r\nage: 73991\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=8EgQS95GjV_lVyUGViIEuYYiTVxSIstufJs_cX427WA-1772887953-1.0.1.1-0YVmHDBeY.pRS6BNjvC9oo7XGK4sVD1Fj_BGe6kEouf0R6xb6AYIEuiFOWk7X4jrlH7Pk.i0Sz3wX19E1YZ8ioPlQ86PJmzzLV45j8sVEVE; path=/; expires=Sat, 07-Mar-26 13:22:33 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0uJhyJOKfT%2BJu%2BVBw0FpNuPqCosRswa7gGhVJKj3eoLYJXZc4aPoBsSZq2PZgyD3ZaNAo8JVaiUznD6ItqSR79Bb2Wl1gO1X6WM9uWUcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcee2c9c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7081c9d3ea2a6fa19a82d1f725a61d11","sha1":"3c161f97bafb034eb192b0ef890a5f2e4b3d39cb","sha256":"61390467d0ee7bf0ac7253d9128af3b18943ddc4effe0ef415b1d0ab9e4da2d1","sha512":"0c2e13235adef124de8c8fef5009e25cd362690a5865db9e3ac68b80d9bc4f6e30f13880416a42206ea81cd932ca17912a2bfeee7ade6f647b0c00f46b376a39","ssdeep":"","tlshash":"ab511cf531120e38d6a470339d16dec67804b445c4afc416f992eb2d3da61a478cbdb9","first_seen":"2025-12-24T22:39:15.996531Z","last_seen":"2026-06-06T23:43:56.124757Z","times_seen":54,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"1063galabet.com/__swarm/eu-swarm-newm","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:31.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__swarm/eu-swarm-newm HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://1063galabet.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Fsvzib6yy0que2/KhX8P5w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 07 Mar 2026 12:52:32 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: HNybifFCd3NRsVQqGO3PLhWUbsE=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xHzDbQUxU40CrAvxQcki6h8LzzQUIKh2Gyf9Wr0xL8MUGqWGHK0uxYgf7LI10x07HirhY1eAdF8MaiDnTBAeDC8LK%2FVmRYdkvKeRugCo7PMiWNMUEmjRSxgxRk5rKYd8ZVc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d89bce22c9e9ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7498\u0026min_rtt=7445\u0026rtt_var=2186\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2355\u0026recv_bytes=1245\u0026delivery_rate=377378\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=ff9e2bb7f4fc6385\u0026ts=655\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":747,"timings":{"blocked":0,"dns":38,"connect":44,"send":0,"wait":645,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FacebookTracking-CYRgXF9D.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FacebookTracking-CYRgXF9D.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2a8-w2zTyPGAwGjvxi7qDhv5Wx+dc8w\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BdfayPpnXvbQwUOJ0st2ONN307o3c83zfVng%2BkShIW4djQIlW%2BiJUcvu%2BYkXAuFNO%2BXTXE5N7wXAsrV2jRrGdRMfwn4UNQj%2FnFK1GK9qA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced1a3d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (679)","md5":"f3fb8e493edffad88f01df2d9e20cbd5","sha1":"c36cd3c8f180c068efc62eea0e1bf95b1f9d73cc","sha256":"37605bf81860243707f0318e1c3590747374e124b2e85863b3287e97f669779d","sha512":"141ff14e6149e2b34568571daeabf7fcdd24bb10f61dfa7d9eafc7f10aaac7b78c3fde1f68312eea695ca39ea33a940dc5bd1d671ebb7b0faecc94d3800daf2a","ssdeep":"","tlshash":"7001230f2c45b47d1a7c18f8d3bfd81426ba590e268f45a5c6d3cdb9366458a40cdbcd","first_seen":"2026-03-07T12:53:25.012466Z","last_seen":"2026-03-08T10:47:57.852829Z","times_seen":3,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/TvGames2.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/TvGames2.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"8dc-v7CMjc4m2Rsf2qAI/96ge8EA4Mc\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oram%2Bn%2FLmZM56UW1pJq1bNJ86Ht%2FL3d8evQRUwPbBYKRRaIRhqJCu%2BncDl7tGJr1Pd2vPDKJj%2F%2Fjo9%2BjcJox7Zej%2BT07ZYnHQBa6JiZ1Tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2be379cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"60d24e57914ca41e702277a9ce44e813","sha1":"bfb08c8dce26d91b1fdaa008ffdea07bc100e0c7","sha256":"144a8bd1616f38a95bc6e7f59283e462f358a2dcf79e10cd7bd256d49e6e4134","sha512":"43503c3df559cc8b5fab3dcd299f5dbfc8d5a6f9dbd458781c53a409d859ed730ffc24420d462b914b4ef96f1d63d9bb508ef733bad33edadc5a2d12b22e4eb5","ssdeep":"","tlshash":"7f4165f9efb091f46dd94fa9ef324cec750e68fd9f220a84812c861c66a3d94d644410","first_seen":"2025-10-09T13:22:28.980997Z","last_seen":"2026-07-19T15:19:37.834753Z","times_seen":79,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/LiveChatInc-z0VjU2-r.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/LiveChatInc-z0VjU2-r.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b68-5Mrz6RJWkD6gPHt7Ot+6ugFmsNg\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymI9M9dpLZXCcp%2Fi%2Frc9lprq6%2BiSfVD84BhE9WWGXRCLCFpxrEfxO1wN3myoSjJFk18HHYNJ5WvOMGM6VbR0ojopf3LTaf%2BJD4CT1b64HA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecd9a89cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"33b2b43c95add547547c7f95d8eba8db","sha1":"e4caf3e91256903ea03c7b7b3adfbaba0166b0d8","sha256":"604ab6b4a4b89ce90f5322988a108d8c6320aad934c22fcf2ddcd1062a44502d","sha512":"782aa71523502543ef24c75a225c8f8258f1b925c6a42e82e2fd714594aa75ed300132decbeac9e4b657821c62f81e1e21b9d05678cd3c3d730b4fe369765a02","ssdeep":"","tlshash":"3d5124dec43cb4b1929e67d1323f7b5f7116571a94048d31656c4b0af62e0cbc467aca","first_seen":"2026-03-07T12:53:25.013263Z","last_seen":"2026-03-08T10:47:57.811174Z","times_seen":3,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 582\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=S4dDq7dOaN1DwEHq.PJRAJy1JGiZwxsyvesX9wkgETM-1772887954-1.0.1.1-dCJl.l9Tj3ZjIEynLGbwr4.6YK2IhytmzLlyDoRxXySo5FMEXZoxU2TDrQHFbWpaQZxs1EdjOHA6Une2OFE4DpwLB3xPjNF6zEBsRzVegOU; path=/; expires=Sat, 07-Mar-26 13:22:34 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sqfUtAabyjt64qnUSpTkBUOlqynkomoOBTawolhmZurJlHmV%2FqIaPMoUUIntKuIdu3eP12aZLM8nwI21WWlixM8KOin920eUGF7uMRso%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf018dc9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2222,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ce3902f4bd7f8f07ef19311509e56859","sha1":"4f8dac69410d4feb2f28963976a11de31833bd47","sha256":"e95f8590f1b24eb82a9bcd46e69bae80f375da5a9d273d5111fb19ec40fce0ff","sha512":"ec76ed398930c6fdeee5bf27adfa17c668ef4d344e8ceb01367f6f2251bc83502c04f7cc4d2cac53b3ffe176e1c0b850a266fc233aff454e7c5ec42b1480d1a7","ssdeep":"","tlshash":"c7415933b02c98a65b443b40b4c7394a94dd54c7dc0b8570dc899f8d86eb6298ad32d7","first_seen":"2026-02-24T14:23:51.361484Z","last_seen":"2026-05-14T23:49:57.392496Z","times_seen":49,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/NotificationsButton-BSOVhjLm.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/NotificationsButton-BSOVhjLm.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"22e-OLsv9b506NDRSuvSmTYJ/OM8F8c\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TNfe9%2Fw5G%2BoerYn9RFxiUlpWNFkMioFGh2IuiXo5jwaFxqwsdk%2Fv924JwctUQL7iYdpOyfz4VOk889zVHoH7YwlsUky3A%2BewJaSwVOBE9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec89089cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":558,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"10f2299bb01af4a4e5dce9e406cc155d","sha1":"38bb2ff5be74e8d0d14aebd2993609fce33c17c7","sha256":"c51bf3d094154526a746ccec10401bd4b5575d34837f84752a352d281eb63113","sha512":"32f2fa4d7316ff169cf6bfb4ee542744a0c337ddb74f20875e87abf145a94031f7c9aa40822884941312e9326033dfcbb3ad9f054a8702b408f4b76dbff752b7","ssdeep":"","tlshash":"f5f0264ba668d4b41f834a30623b9026253b693cde0a944040e62c55177005ac55f99f","first_seen":"2026-03-07T12:53:24.957388Z","last_seen":"2026-03-08T10:47:57.815189Z","times_seen":3,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-cms-api/api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 648\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=1HhSQm6mVbT9Uuj8Ls_29aRm8yFDvFInZGn8WXMFGm0-1772887953-1.0.1.1-2xNWn7BbLHz6nvqM5V39Tg2P3F_8obRRpy3Zwu5jw3yYtdeAOl0rRYKpPYqMHVH4Y3o4FiCQB2i_9aY74Lg9NGtW.U6Sfx8Sc1K5icOm8fI; path=/; expires=Sat, 07-Mar-26 13:22:33 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncontent-encoding: br\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1CMTmZj1K%2B%2BCc0cSIEo93Y3ZxoULtJl8G9qinZCjGhjwa12e%2BO5phgiU7okJVVNVk%2BE%2FmYVr8VNgSyaL2GEWK5zOSj6WOlpLiazowvEGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcef4f679cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2111,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f7a608f283a1106ffe745205e2ed678","sha1":"7bf32f0e89ff82c58c032875d9358e962d82cb8e","sha256":"62927c95e939307e9068656b6a5bb434f91336b299b7740cd79d09bb55d3f553","sha512":"8f25a6a68eaa041a4ed0c49dc94822229673543674eb5be81be68b6b292b4862a3ec9923f283e01212e3779e2967725794dfc6261fd4c7b1aac20b53d3c4a281","ssdeep":"","tlshash":"eb419a13742d887a5b507b40b4d7394a88ad1847ac0e8a74dc498f8d92ea63ec6e32d7","first_seen":"2026-03-07T12:53:25.028713Z","last_seen":"2026-03-11T15:08:03.05264Z","times_seen":4,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_cb5d66058378ab15462ecf9841d150d8.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_cb5d66058378ab15462ecf9841d150d8.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 154448\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"25b50-vKI8GrHExjwLw4lNNmsbWxGEt2A\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BqXFAuoy14u2d6kskhpPStZ%2BEf1ePu8qOrTNX9Pj%2BvtktxV2yvi6TEv10dbe05nPqE1K%2FeGYlQ7ujqZCDUx29xPHb3qmxunE%2F%2FEMHDolkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf5dce59cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":154448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"504e373f07cc978b23b164e0385e5d00","sha1":"bca23c1ab1c4c63c0bc3894d366b1b5b1184b760","sha256":"7332b76cab7ded876cbbcdc53c5ee74c9d6adf89683ccf1a37d1633dace8526d","sha512":"21198974414e17b9a4ae7110b628ba9208f43c602036a9937314432549bc8e23a57ee4d1351480008309a30d0cbb2d553b62d47834c1c60e95da94d0fb90f9e7","ssdeep":"3072:1mDm9WxpOPEVLzkS+BvHLjrXjA8Lgyns4X3vDUgqBY2oUU:4DmMLOPEVLzkS+BTv88/s4vAgL2or","tlshash":"a2e3126f6701062ddc8fec2e2d05b68d29fbaf4286bc7712f0155ae54e06d5e8b8d813","first_seen":"2026-03-07T12:53:25.029544Z","last_seen":"2026-03-07T13:29:05.572481Z","times_seen":2,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19330347\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2F1063galabet.com%2Ftr%2F\u0026group_id=0\u0026channel_type=code\u0026jsonp=__wiqwjhl0g5g","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19330347\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2F1063galabet.com%2Ftr%2F\u0026group_id=0\u0026channel_type=code\u0026jsonp=__wiqwjhl0g5g HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://1063galabet.com/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://1063galabet.com/\r\ncontent-length: 391\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":391,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (391), with no line terminators","md5":"9e1e0fd5fed5373bfd0320eaaf7072a2","sha1":"1a8d457d53ba747b4db7ec988a68d4e8b3b0500a","sha256":"b8ad5aafe246b8ac07bacb6dbb438b76dc6177b47ee057c7886610b066e240cb","sha512":"4fdacbce0d3a0a31863013b45bf1f16a81da41aaa3054471fd6b35f4f6c471fa22da9c9b47c1f03fb6bb968068f2c5b6b2f4d1e1c93e940c0606eb181789df4f","ssdeep":"","tlshash":"5ce0f1a3615021709bc4e3be940057023c300a97410495bd74aa1350031b7deb22450b","first_seen":"2026-03-07T12:53:25.030337Z","last_seen":"2026-03-07T12:53:25.030337Z","times_seen":1,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/JackpotPoolsWidgetContainer-DdYWMwEX.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-DdYWMwEX.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"fd9-lUtPNZvYcmOVexHmQ4Qzy2LFsjU\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LxQU%2FbEExrwQLTm%2FjTFg4nI7%2BsxMlxg5P9ADLcg2PNjWhNxIcQe2eLZVl8qIsBP7TDx5W02ovPE2gyqDe%2BNWmKjULW%2BVDV%2F2XSJkv8bXmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebe029cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4057,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4056)","md5":"a0868e370e1a6b6e7b70910645251898","sha1":"954b4f359bd87263957b11e6438433cb62c5b235","sha256":"dc5f61250433a3a495fb32a49bb4ec04208f2dcae87728dc7441b4decb5c0f5b","sha512":"821a5719136cd8f6802647124c328e0b629a807a59f3a4b7553390aee3a76cc83568ddc3c74e90673215617cb96b2b9858d1e13f227800c8c6af8f6884176f0e","ssdeep":"","tlshash":"45818617e01ab3fcec9c14a2503f910e377e0bbdd75605e8d0ad05240abc84af259bda","first_seen":"2026-03-07T12:53:25.002194Z","last_seen":"2026-03-08T10:47:57.80378Z","times_seen":3,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/Promotions3.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/Promotions3.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"710-Za9xbEjiHtfIN+d8S3w+LzMgXdM\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qVIZEkajJ7EBujGI5C%2FbYHS2EKANPSsWH57iKdFJntrBOAipDCzPGPT2qUfqPGZGWLMqrBkPKShDylJaZrpRfZqJtBsw5TVVMa%2FFhBqOpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf2be319cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"60e5a10a5bbcc415db7edd6ea60aec4f","sha1":"65af716c48e21ed7c837e77c4b7c3e2f33205dd3","sha256":"a8c1d1768e9efff44b10ffebd02cb4959af6be79610cdc02e44e840f0ec39a28","sha512":"418d3b818cc59a64f5261e2cc27fa2234ef1bf94a886866217d032d211c2ee47b758410154acbb7721314b855778c3e6bbd73fd57fdb092c5703c9270796ed22","ssdeep":"","tlshash":"ee312cd8ee305570eec443ffab118988795614bb69328edcf22c83886b8390800288d9","first_seen":"2025-07-08T10:50:27.664088Z","last_seen":"2026-08-10T15:32:58.707717Z","times_seen":686,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30858\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"788a-OuEMok4e1P1/Pul6BAKfhO2ynGA\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPVO58oX8zwquYlF91fyJR62ye4HhBMKdZP%2BEMoYb6drNalsyVY7KomkuwQxbqlWdUrEsqD6ERved55Bj7GDS3fx24uNwVgOO56pw3GwGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf5ed079cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3a657bf250f0501b6684593c6d3449f","sha1":"3ae10ca24e1ed4fd7f3ee97a04029f84edb29c60","sha256":"4df91740f4d1d34398bcde4b0e71127587fe51241c3283f3e7a3bcffefdfc21e","sha512":"c70376beec80f90f2b6f42daa10038112bca9eb928f50f6dfbbb4b8e9054ecfde0afd7aba72fa826bd64ab0615dae03db9d608d7f63e06af394bcd5b669a2ec5","ssdeep":"768:X2NTeq/6/zzgNTdJxlOo7U+QcbTMcipzeGy3sB1I0:4Kq/6/0O0UOOzeKBS0","tlshash":"22d2e1a0782165c72e6e25483195487b904f5bec73687de5b9ac03b3ed0e2f24f69339","first_seen":"2025-12-24T22:39:16.142316Z","last_seen":"2026-07-06T22:32:46.686102Z","times_seen":63,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/391.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/391.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/882.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/882.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:43 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 07 Mar 2026 12:52:43 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tX8zjRcjnBVt9jYL12q61m3yZnkEeLhKLHNEZG4VV%2FBhYzxpGOAx6gmeXuZpAOKdt7pRqC7bAAxMlOlOqg6k5VTs0O6Kp8MN1oRk9jByTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf758899cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8b5f6433dea7312827d44a3ee44d3f13","sha1":"c1332107cdb0a3cf3ee63937f8cfdb06d67b57d9","sha256":"ec4aa3b2a968531cd3902f37aeff8ff229be8d5e064ba4d22383575f4ab2b387","sha512":"de62dddfc9e31da1d704eb6a31ecbfdbf2a186efb6552255b65ac6835ba6f4f00438391264264166de022c8f03a93c2341df0e5656d80a5212b07223e86df7bf","ssdeep":"","tlshash":"d3312b11a2ac457d9c8c0130b0fe7c07a40e85b37d3ad51caa3ec2a2cbb885ac5c1f46","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-08-08T13:53:53.866117Z","times_seen":233,"resource_available":false,"data":null}},"time_used":8420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_255218c8ce749fe8c9dfbc0b8e8ed1ce.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_255218c8ce749fe8c9dfbc0b8e8ed1ce.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG; _ga_MCEY36CK22=GS2.1.s1772887955$o1$g0$t1772887955$j60$l0$h0; _ga=GA1.1.1535696236.1772887955\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18246\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"4746-ggrK7XwYUDBmNWfv2bmw2CDBCy4\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2B5C6z%2BqAhss0MvoV9kZdXQZLhUJAjbMBfLDhTvy14JgpEQDVYDa7%2BtOFszNITLv5N0W4rMQ3nKoJQhJv8fH2UzZrWxb%2F00Cyj0slb7vjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcfb08d69cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64a87f03ae635843aa9ddf8b795ef059","sha1":"820acaed7c185030663567efd9b9b0d820c10b2e","sha256":"eb987fab4dbb8a68ec1dac3374ab8d34c1d24e192526bfa17f415a67957094e3","sha512":"881a3d458f5189ed68310367aa0b7c4e4e51df4bb58d942b9f7c3e06a66010f735b9b0161f80028adb1c92cfc2e3df3b4760e69b0df6d84850877c60c7307373","ssdeep":"384:MTMTJfN/dyUK351WMwsPAv4eN/lz2T6zfdhXeVZA4BWDYWTsVfAEsTTQ:9Tj/NTFAeN/RG6zlIVZAkWDYWwVzgU","tlshash":"c682d037039a424351b7142fccaa7d52a4d0097b8a2be67a0d5903a54a3f7398bdf67c","first_seen":"2025-12-24T22:39:16.361229Z","last_seen":"2026-07-06T22:32:46.875398Z","times_seen":56,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets.json?v=1772887800000","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:30.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets.json?v=1772887800000 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"6c-/Qm+p2fEH07OzI/hfElHCuJaqCo\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DUJCKopAvljw6b2nZkkjHGj2kthlyNvd7eI83k6zwpI25wLkidt%2F7AnH%2BiDPuXdT3H7nI8PR%2FysXTwcfMnIfbJ76YdqdOE%2F1cTNgl%2FMfFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcdd9ef99cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4ab76b84119b58e0274ebb7773c304e9","sha1":"fd09bea767c41f4ececc8fe17c49470ae25aa82a","sha256":"ed3f85642bcbcd5f01e24e07081e8c0cb4a2afb0e45475bfef46d8b5a1fedc83","sha512":"a19491809a33023feb5f4c6789e18bde6011500fb40806e367822393b3bae10fba4d339abefabd268b6297c5af3560f255448f36063aa4784f6631644d68b163","ssdeep":"","tlshash":"a3b002995a3985159746e888474d2906d000d1a3cbae1b5a50570568c3e07b6c694909","first_seen":"2026-02-24T14:23:51.200303Z","last_seen":"2026-03-23T14:49:47.185058Z","times_seen":17,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/dynamicallyStructuredPages.json?v=1772887800000","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:30.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /dynamicallyStructuredPages.json?v=1772887800000 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:31 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"2fc-kUiJY6kVdVRjg3WtqCHEu0SxLdI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7TnHuO2Y3e9tNSi1sSNEZ3lzM9Qv6M0fF7GprmdDvRMTaEvGTSxqtWx4oy8VdG8IJ%2FaSyti%2FtKf08wC%2Fu%2Fe47fzq2UrobkgX8kj%2Br5fLpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcddbf1b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":764,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"61ff5ed77b867ea7b436a21eb8e5ab4e","sha1":"91488963a9157554638375ada821c4bb44b12dd2","sha256":"8329002355bc98821e6757dc86bd87104c3f79ab3fa48db2435c5d3baf0ec870","sha512":"e93a660a89166b2b4f17735c7ed67f95b3b333006596634a735da5159f605181c8a74bffe6924a82feef888aea5bab127c2aaf77685cd27efbd0d71b9d888456","ssdeep":"","tlshash":"2001493d3c10ceb4f7a08862d58167809992e576c7880c5c2cdeeb19c3ad24e1441b7b","first_seen":"2025-05-24T17:16:20.011585Z","last_seen":"2026-08-10T15:32:58.57787Z","times_seen":3028,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/AiPromotedGamesWidget-BHt7VhYz.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-BHt7VhYz.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"784-PuM4GnXPOBEq092aBDdlOBQR+iw\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUCwPUIvGrWaSG23g4DZ9YBI3W8XdewM8B1wl0VcIz7sJRaC9Y%2BKBNrIkZIoYfn5V%2FmUoBQcK0tSyhHICYvg3iwPEC0WQ6BrmJAlhfdapA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceede539cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1924,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1923)","md5":"e4afa8e8ef9f22447abd8fffa444696f","sha1":"3ee3381a75cf38112ad3dd9a043765381411fa2c","sha256":"82cc48fd74ae0d2403911294c4200c25a17e71d7436b5c4293d5cd1618994072","sha512":"062e518457b30fbf71bd64638acd7263fe0b819bde9ad745a70151a6e26dc373787b3f8a115d41a2140dcba514b01f5ef2f47d823b90d215ef93d3082f163726","ssdeep":"","tlshash":"0341642bb019ca7cf21c06a05294f745a42177bcd719a0ecbaef1900771409d337db81","first_seen":"2026-03-07T12:53:25.034327Z","last_seen":"2026-03-08T10:47:57.915901Z","times_seen":3,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/gameDataProcessing-3jH1lfSP.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/gameDataProcessing-3jH1lfSP.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FeaturedGames-nbD3TQZs.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"436a-FHk95s9Y0NeM4Heygu1GhUYcTTg\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QaCh4zE6qjZmCNpuoaqHwbSmUXz98r0ZdJE7FI2We08J%2FV4Sw0pBNRBT%2B0sR68KyKGJkoLwdweHDIfabhX4Ct4wE9TLasg8nBw3a7B6Uag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf099f09cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":17258,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (17257)","md5":"751f98aee2638fe523ea9bf82d79314d","sha1":"14793de6cf58d0d78ce077b282ed4685461c4d38","sha256":"36f80d4e25ce155867b8cbb20a64ce16da812804f45f38300f832ec1059baea8","sha512":"83fcc3795f5f05e4a276a5a48c94801890e4d991294eb2733501f20e186066d65ed78f5c155b2d48e550983f16c88bde9cc50ccceb77017287802eb2819dcc6a","ssdeep":"384:twphrrZxhxlVz12awqhvTXDsB4Pzenac0aw5K4A1nV:tCptXDe8QiAX1nV","tlshash":"ae72750b8a024c12c97e4639c0aa15f1b9781b32e8b8cdd51a655c7afb5fa5b31f173c","first_seen":"2026-03-07T12:53:25.035006Z","last_seen":"2026-03-08T10:47:57.918788Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/Sports.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/Sports.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"82e-2DVUTYlaSBfCEOV1pqmeCMHi8JU\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkGKGX49G8m5gqIT%2BB0saxoGsKGmmD5nleKz6FIOr9lngVguDuGBhFxqKPdw%2Fer8WYkTJk2bh9cyeuLiwF7ASmraRkz91%2BGwvYWCsADJQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec0fbf9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2094,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e98bc5be7f5882a72abf78d11dda926a","sha1":"d835544d895a4817c210e575a6a99e08c1e2f095","sha256":"bc7880489b92bad21b9475577a93515e928dbc3fe62bf09e014e973e124ed223","sha512":"966b29438ae513d771a33e04b1f0566a70d205ee6698d6b2c7f1b00c7e263311652d392fc3f4251256866bbc2b0abf0dfa35698aaef8bc160847938a33a8a184","ssdeep":"","tlshash":"3d410018c3b983facc45823c5035a5b83a4e10ffa8a0f3b4996e95a47a420dc95cd6ed","first_seen":"2025-10-24T05:32:28.392126Z","last_seen":"2026-08-10T15:32:58.589166Z","times_seen":66,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/LiveCasino1.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/LiveCasino1.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"5d7-njo3IRQGhfiwlWlM9mkOuurGMng\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqJRk37sOe5RGEtM%2BiRjrPpjeIOQDDmoTTGtwVVcvpBAhEDUd5GniUBus46mm81wOjLsZZ0vwMgfJJg9IZLa1VRGplBKVZKoSCL8CHGeJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec0fce9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ab76ddacc7177297110531bdc4b7b09c","sha1":"9e3a3721140685f8b095694cf6690ebaeac63278","sha256":"67de7a9984a8f57a460e025368985daf653eab425caaa5482cc1f3af17c43104","sha512":"16ce040d64e0b45e159c5a0bc2ee0ddbcffdf3405d0ae5dd70b5d1297f657f9067b8cb03a1e30811720c804e7997d3c57815e9b3db2ace852941fb2a7900ea13","ssdeep":"","tlshash":"ce316de876b0ed7c5c9d3a9ea7195d542c9ede6921007ba5db0c8c90c3cb4089759c8b","first_seen":"2025-08-01T03:40:47.847838Z","last_seen":"2026-08-09T00:47:56.546511Z","times_seen":1069,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FastTrackTracking-CVjGJF7f.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FastTrackTracking-CVjGJF7f.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"52a-BIh5cpKbGai0QcLVsik7YPIrEYE\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qD1NvvusNC66h%2FItjIjiAtbEEBvQ%2FxZlTB2BtmRHdGPIWY0%2BWdIxHuNkEDZCKGgaMKh%2B1WMEtPnFyIwwJzG1Y0OH1csIBDwTRHBLWlJi%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecc98b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1321)","md5":"25be6c85570e77d961873fd301a9f6cb","sha1":"04887972929b19a8b441c2d5b2293b60f22b1181","sha256":"850f9f24d5a5ed407ad4ee4bf1739abef9bc67c393068a8bf9f182da3a6cd726","sha512":"82c6dc95fd087fb7621ddd394ea087cdf3ed11810f0636200dbb0e07bd9336ffa057ba27352a24cbf9ee1928ff87fbfff67f5abfa76586d7372ead2c043aa349","ssdeep":"","tlshash":"cc21234f40d593b47c804e8da3e7a261953e6975711ec4e1f0760bae3a0caa983dac97","first_seen":"2026-03-07T12:53:24.887807Z","last_seen":"2026-03-08T10:47:57.857036Z","times_seen":3,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/StatisticsOnHoverContainer-cEN1eZpZ.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/StatisticsOnHoverContainer-cEN1eZpZ.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2634-MxHw+iJeM+mYMUlNJxYq4OaEmvQ\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ln1e6jcXREyyKMvXUekAUdlb9aX3qZWx9cbFfNqv1QlpuUiPr1uCPhF72KTOxXYU1h7WnVbuLL9N4yqgLe%2FcfhM7hS%2FxLVTanpLrO6BQNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced0a169cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9780,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (9539)","md5":"35d961cf867871258aea8b4678d61d7f","sha1":"3311f0fa225e33e99831494d27162ae0e6849af4","sha256":"7fbd4461b0b664d2845450f127da26a3f6db0da30fcca0c9d5721e1c339d6e8f","sha512":"3027a00161b14ab95729b82224112eb344c5d532ac63060c074853d7bbca5ec279bd3af0da01c81ba07f7c647d4c5b5759fbad502a7397cb94c9afa4122af92e","ssdeep":"192:/Rn2zkXAsarXDxLwxGEE0D9AOgzmahj/e0R:ZBParTxLwxGEphAdzmij2q","tlshash":"ae12636c118e5f69f41a8240b4202e35bb3a3977958d66f9bebc450fd3ce444bb9cb18","first_seen":"2026-03-07T12:53:25.041453Z","last_seen":"2026-03-08T10:47:57.963721Z","times_seen":3,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/AiPromotedGamesWidget-BHt7VhYz.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-BHt7VhYz.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"784-PuM4GnXPOBEq092aBDdlOBQR+iw\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAuIjexjd8TbYX6bnnIBWWlxR3WIYbFWBEOgF5GDJhKdX2%2FtQUzBSzqvBBY97klapPJf0x22vwELIrt9mtfnmRd2c6r0TlfahoiKttwNwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf018e19cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1924,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1923)","md5":"e4afa8e8ef9f22447abd8fffa444696f","sha1":"3ee3381a75cf38112ad3dd9a043765381411fa2c","sha256":"82cc48fd74ae0d2403911294c4200c25a17e71d7436b5c4293d5cd1618994072","sha512":"062e518457b30fbf71bd64638acd7263fe0b819bde9ad745a70151a6e26dc373787b3f8a115d41a2140dcba514b01f5ef2f47d823b90d215ef93d3082f163726","ssdeep":"","tlshash":"0341642bb019ca7cf21c06a05294f745a42177bcd719a0ecbaef1900771409d337db81","first_seen":"2026-03-07T12:53:25.034327Z","last_seen":"2026-03-08T10:47:57.915901Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/1309.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/1309.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/936.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/936.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:41 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 07 Mar 2026 12:52:41 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JjgVW2kBNVKddkCXYiCuYhbiZ0XE4wGYsrwpRKfEMdQxwppoVGbSfbXn1PO2OcaTD9BHOUaSwN1eiun2IuYZM%2BcTw6w1339cO%2F%2FNTRmXZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf7587e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"25794bfd577bb25b9e2ac630193a72b9","sha1":"01c929b4e5bbec3e8d6b91477429fb061154e54f","sha256":"30c11a2571db28011aeb0baf2af3e4136937906fc083ca4a6e35351de7bf3582","sha512":"6ae396f181e145e9af049c0c2189027f0577da3258afc3ea7a253bc4712f130bf9c5cbc882af3af969c781aa6f4a492478f55ed73082cd99e47af8948042208d","ssdeep":"","tlshash":"86310aa3102e502e3c57522611e684965e503afe14b1b8447a694098b783edfc2a0ddf","first_seen":"2024-01-24T01:47:45Z","last_seen":"2026-07-31T00:38:12.751888Z","times_seen":219,"resource_available":false,"data":null}},"time_used":6628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/GoogleTagManagerTracking-CqQ_KaHL.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-CqQ_KaHL.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"49e6-DEFCycwOUc3wE6dROO55mhKu3Z8\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q87EfBWZ3uEjH%2BTgKfaQk%2FsvSdUeG9TG0YgHJzgnE%2FKvn4qwNKIs4EU0aUzw%2BAn%2FJtJ1CisQJPvXHU0jaw9GFM%2FNoXTpZ6saZ7l3I142nQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced1a459cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":18918,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17622)","md5":"431bb1bca8cbefa36776b520ee0f0f05","sha1":"0c4142c9cc0e51cdf013a75138ee799a12aedd9f","sha256":"cf4bbf25628f7aa8f002c5547c9bf48628c435f63843d4d4a6f3b856d815cf73","sha512":"81f73b56769b82397f8e387106e0a70d4cfd158721aa906fb0e114590797595191311b6ad315d2325e17d2b6485375346bd767e7a3bfdb4e15e07bcd6cc9740d","ssdeep":"384:Cb3bEI5wT9aZdtdoNc5GRU52iWD+FOTVKWZxxqyuQPfg1F0TQOmJNw9vU6:G3bEeScDdoNcwiAiWqFOTVJZnqyuQPwU","tlshash":"1c82b9d7f96548e0a5bc1fe81f92428b35b1b669f49140747c9e7c0c233cc4ef2a5a99","first_seen":"2026-03-07T12:53:24.899363Z","last_seen":"2026-03-08T10:47:57.842532Z","times_seen":3,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Casino.BjyJcCbk.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/Casino.BjyJcCbk.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"8bc1-J3GVrgfl5ea7tLZzLDoE1BrwTrM\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XymhHjCGjBEEGI1Y8cr7alCAeNVsT8iu8UWDhnULBFHAh0XSALDgfPovxmiPWT2J3aSuuIharTBc5HNZ19Hd78x8fZfyWexjJEYwA4ABxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebdfe9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35777,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (35770)","md5":"f113b1c9638ce76e385e727e0ea46694","sha1":"277195ae07e5e5e6bbb4b6732c3a04d41af04eb3","sha256":"5365ca88751244c00948d0275a580d625398578985219c10ab31efd9f8289c35","sha512":"768492a4bdec3871cd5e1eba328330f381846d86c3d9a9f85adf02e49f6d53042c1846be971b332a5f73702b2351f4a048a799744993e32b65ee9e4321439c15","ssdeep":"384:Rpo8j6E4sa1Hk9eeGKtNyGG6PwPJwWzY8IwgrOl009Hkz7qQXFDpNDF6:RZj6E7Ie3uIIEz1XN96","tlshash":"6cf28673961923bd75b796523ac0de9ce81c48b9da232641ec967237c3c79992c307ec","first_seen":"2026-03-01T06:34:53.940522Z","last_seen":"2026-06-09T00:47:26.228896Z","times_seen":90,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/gameDataProcessing-3jH1lfSP.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/gameDataProcessing-3jH1lfSP.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"436a-FHk95s9Y0NeM4Heygu1GhUYcTTg\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5cdZkZZRO96hvyExBNCwUMp3cAQsYmYouuqOEGjZOEhlw%2FZOzGF72WGFxmZSECANvTSFbualIJuwZuZhWiqFH%2BLhYBOGhZF%2FGICwbLkm3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceece209cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":17258,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (17257)","md5":"751f98aee2638fe523ea9bf82d79314d","sha1":"14793de6cf58d0d78ce077b282ed4685461c4d38","sha256":"36f80d4e25ce155867b8cbb20a64ce16da812804f45f38300f832ec1059baea8","sha512":"83fcc3795f5f05e4a276a5a48c94801890e4d991294eb2733501f20e186066d65ed78f5c155b2d48e550983f16c88bde9cc50ccceb77017287802eb2819dcc6a","ssdeep":"384:twphrrZxhxlVz12awqhvTXDsB4Pzenac0aw5K4A1nV:tCptXDe8QiAX1nV","tlshash":"ae72750b8a024c12c97e4639c0aa15f1b9781b32e8b8cdd51a655c7afb5fa5b31f173c","first_seen":"2026-03-07T12:53:25.035006Z","last_seen":"2026-03-08T10:47:57.918788Z","times_seen":3,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FeaturedGames-nbD3TQZs.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FeaturedGames-nbD3TQZs.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1ede-Cw8Unb7RMftsJ0a/3yCLk4UjB/0\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IptohQNPBDVsF8dfqJ%2FyILunkePZ%2F7MPngcBdbkPiNBfq1mCfiQv8daTmCmMlbdHU1sKje6D5UcmpuvZ%2FCc29XV%2Bah%2B%2FvLvB3SYj8K1bFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf008b29cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7901)","md5":"772b73cca2de055c52a2ca21018b5866","sha1":"0b0f149dbed131fb6c2746bfdf208b93852307fd","sha256":"e550f19f47bd53561d4066f947cc59c8bc95761d79a32663fbd0650c000d56ca","sha512":"d511bce50840ed7ff8276bc89d4ecd2cb2547c8275e5ac745008737672270d4f73c1925f19c43f0224c1eba7a4fd9b82986c7ac080e82c7199911dc487f62377","ssdeep":"192:3PtPtX3fNHnEUDuncyxvQoehC6axm7UwL4Bflg+GffGR:/7VHnWnRxvQHhamN+KG","tlshash":"bdf1fa0ae014babde57b45e7b53f6108f57a06d0e7280890d0be5e1919e5346733ef8b","first_seen":"2026-03-07T12:53:24.990937Z","last_seen":"2026-03-08T10:47:57.822146Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__statistics-proxy/images/e/s/0/395.png","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:35.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__statistics-proxy/images/e/s/0/395.png HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 07 Mar 2026 12:52:47 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWW1ktic115VY%2BxoC0X0fNu6L%2B%2BsosnL8pW2aGbEB1XnGkzcY%2BwxoBzJEp8Ck8hfHHmCWA%2F8ydeB2R%2Be31tmzqRwxfz92vDOPnkH8tuM6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf758679cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f4a3b310319ed2ae5f85de6f9259caed","sha1":"f0401b7ba86e03deee5260b17fadc26036e4fb6b","sha256":"42ab1bfd61a2009272bbad6a2f59f7c17f5043e4345eb73ac93fede514f06aba","sha512":"a507f234ed64a600dabcb1f9d1db6e6d7e956150db2e850bffc3569d23ea31dd7beffc293aefafffa8081660f0828c7466a0d809066cd1b5db548b3360801cb6","ssdeep":"","tlshash":"1831f8e57c64d1fffe0e39a3a81c43c6d3735b9a99a28b569e70c8f5506d4885312431","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-08-01T05:50:49.006512Z","times_seen":545,"resource_available":false,"data":null}},"time_used":12671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:36.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:44 GMT","end":"Mon, 27 Apr 2026 08:36:43 GMT"},"fingerprint":{"sha1":"60:4D:15:F0:37:85:71:03:3A:5F:40:31:C7:D1:01:D3:83:25:3A:02","sha256":"67:C0:9E:02:17:D8:19:0D:DC:84:B7:81:9F:AA:72:31:D5:26:0D:A6:E0:AB:41:AD:C9:26:05:57:7C:19:35:3A"}}},"request":{"raw":"GET /gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\nexpires: Sat, 07 Mar 2026 12:52:36 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 07 Mar 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 125849\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":386786,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27835)","md5":"f50af85caaa6f108e1f53109cd45eefa","sha1":"5dfc78a9770beebce5a84d3e8961d152da409c2c","sha256":"ebe99ca87a9de8d39f31fae869473504de9f2ae531a30c28b89ad1bfacca0792","sha512":"c2b955bf69b16aa44fed56eb72c130b9e6b654b42f233a2718c498eb0d3b8c19e3f7b7de6ae275b1b562860bf474ebcebf3e64be9914a4a6543c2f02b7e7f0fb","ssdeep":"6144:MH5JkKfRl52vN5BaKI0D8RGI/V0sApXxMJZ/G:MHr/JP2vMU89O","tlshash":"f3842acdb7d6b46243a3a474403f014fb27a28a2b84cd894f186dcd42e746aa5177f7e","first_seen":"2026-03-07T12:53:25.043875Z","last_seen":"2026-03-07T13:29:05.705766Z","times_seen":2,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/storage/medias/galabet10/content_751_81b1eadf642cb245370304df298c810f.webp","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/storage/medias/galabet10/content_751_81b1eadf642cb245370304df298c810f.webp HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36272\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"8db0-Uuu+AUzWsSnw6RQkuhVGk7PPlls\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXehcS8v3WUZdAoDHUP8%2F1KjgoUm5hbUXyIYlpGqSejVlTqch0rD8XAfZRjivDNGvFGPIcx%2F%2FCtUMsc1cLtn22hx9KhFRARtAxVWNitb3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89bcf30ec69cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":36272,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b7eb9ba1e941db853cad3347e3cf654","sha1":"52ebbe014cd6b129f0e91424ba154693b3cf965b","sha256":"3edd317844bfda1d9eaf2406651d780d65cf1495f8c77d9ce89124c40d468633","sha512":"b2f24b5758674e0ce77ce1607f952af8fc1079eb47f99e3b3e6a0fb6ab60ee872a009798f4ff0c0be7e3e7edfb135fd2a6d3f9f4a9a0ceb97514f1de69ce26e6","ssdeep":"768:MAyA1CuoZi2Mg81PUKmuOlWBKmYDuF1xpZsTACuUqrI/rF:uA1MZXOUKmplWdYyjxwACuUTzF","tlshash":"98f2f1e77a2a3f39bcb80cadc52e860a8904b5ba6b5b07104dd246d38e1da53650b774","first_seen":"2026-03-04T19:25:33.628591Z","last_seen":"2026-03-11T15:08:03.033884Z","times_seen":5,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/index-B9hXZUKv.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:32.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/index-B9hXZUKv.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: MISS\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\netag: W/\"26774-b/tKB7oWU7URMAW0yl+EqUUtn/8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9fo2rgefMd0JSDjOd0Zidove58%2BuLvngtjwBA7aTlMvTKpE8u32RUWT0cSul6o2dL2ZARWWo%2BBev3eUvIOCMkW33WdCM%2BCc5M8B0vf1r%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bce78def9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bdab058fe5f0a31fb6755a8c7629ec6d","sha1":"6ffb4a07ba1653b5113005b4ca5f84a9452d9fff","sha256":"38b63b3ff50d95c1444608ea6befed32efbf459474f7161839ae46aacd4e8a14","sha512":"3104334f35801f4146d5b0edb6a3ea4fd4db11a3abe68dc08acfb44736a60088d13662ffa9acd1cfbf67238cc07812906521ced2373b4974acf8dba0f134253a","ssdeep":"3072:mkwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:VwhFHU4HNwFH7MoOWexZFHV","tlshash":"33f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-03-07T12:53:24.953131Z","last_seen":"2026-03-08T10:47:57.936367Z","times_seen":3,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/__proxy-icons/svg/eSportsLogoSportbook.json","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /__proxy-icons/svg/eSportsLogoSportbook.json HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncache-control: public, max-age=604800\r\netag: W/\"43a-yzDLWg9VCDUiZm7DQkeA3fJHsmQ\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIqANtbXpKj82UtLa0mSiR3Psm3TvAU5rNrgvknl4JGg7DlZS2XAKCVnuiEhnGxMglLk6TemJZmJ1E6LaCcx1mOSRO%2BFuz6plzXWWeMinA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcec180d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7947853d1ed29dd8dcd4f9f507e49866","sha1":"cb30cb5a0f55083522666ec3424780ddf247b264","sha256":"676e17bd005b7d157e248a40b8b8d0e1009615e5b426510dd0f5d8a158fedf9b","sha512":"0c46971a79be56e827f5df0f1f3bfa7583bf8a9b273075894c07378b3dd0ecf6800426cc7a9d5833626655d9f0958aa57eaf50ec7bcdd726fd78f3176efd9290","ssdeep":"","tlshash":"7c11d82cd3d8847cec39e3bc51356ca4704a48daedf6d275e25b89b05713758065cde1","first_seen":"2025-07-08T19:55:59.718474Z","last_seen":"2026-08-10T15:32:58.616768Z","times_seen":381,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":675,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/DepositCountTracking-BpZZdIph.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/DepositCountTracking-BpZZdIph.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1063galabet.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"285-W91rw/uaXfmKhcGpjpkM7dCTWXA\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uj%2BT9SxPSr3rJiK%2Fu06oGEfyu8OXVabOJGeY7F16nonCSOUiFPtka%2FT19Yd8BmfeRq3wvS4OxGOMVME6plWrvli33eoRu7ggLkok9Z0aUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcecc9a29cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (644)","md5":"6967666ed02768afe5d53d1670eb3686","sha1":"5bdd6bc3fb9a5df98a85c1a98e990cedd0935970","sha256":"3f9e551e1eecdd4faa1c9c86aa96528b8307c501f922ef1f045ac2cc0113e80f","sha512":"0a3a32b172dc75a9e174f873551e248cbb6fa72e8edfd77830cec91e8ba14e59920a4984ea2cae05b7fe43fbf63ef45b6f6f837f2ce3a6452c4e53b1f0472555","ssdeep":"","tlshash":"4df0dd5768b8e6f989493a8072c7a8b363f1755cb91788c385b94d460248046e4d892b","first_seen":"2026-03-07T12:53:24.888574Z","last_seen":"2026-03-08T10:47:57.831478Z","times_seen":3,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/GoogleAnalyticsTracking-Qt671pNl.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-Qt671pNl.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/index-f8Qpuhu4.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3588-tY0wBxoZ8tQi5jpUinyeFv4lVFI\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ez0pFc6cLhZHbui4ziD7Y1PE%2ByG4NSBBX%2BzpQ1Kuuqf%2FSR%2F1Dog5xfiaJflyqCsnblv%2BMhF8eXmq3aig4SD1kTU1onvuu6hVjiwPKisSCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bced1a3e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13704,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10208)","md5":"3f8c73430db55a5e8144127b652ad193","sha1":"b58d30071a19f2d422e63a548a7c9e16fe255452","sha256":"1fec33f26a30af7c6d5eae1edb93397be02b5cde9da713dfbcff820bb2f04e24","sha512":"a5fd195f31427cd76464e866ec439cd3fb790b4cbde21d0caef4ff5c2b2d4a07c45e2e9e1e61de84d20481138c3ad4480307871acc4c19a8d265ba11f9c1d0b7","ssdeep":"192:BWYceR0SE+m/CTb3bHXCT76hoxGE0VK7D6L7kBNrnPWh52Lz2PmFmBE:0YcoE/CzCIEP3Byy2PtBE","tlshash":"cc52b55c32adb0b682df6054487f720bf1755910a458f480a265edf46ef8caf02abf36","first_seen":"2026-03-07T12:53:24.898503Z","last_seen":"2026-03-08T10:47:57.812046Z","times_seen":3,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/FeaturedGames.BqGfbibX.css","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/FeaturedGames.BqGfbibX.css HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1baa-UnbJe3DzrIMb4Ue9nTGE64Uyotw\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUOSwNUfwi%2BsXVzdHUVaTGJP3jN9cGM9upQQROBIoVxQtgPZAU9%2Bkte%2BRadnX3Dor%2F0sV71iz6A7Vrjo%2BIFn8mAIf2g269a7hGayKrUZvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bceebdfc9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7082,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7081)","md5":"b9d344659eda7f84d59b2ca785922590","sha1":"5276c97b70f3ac831be147bd9d3184eb8532a2dc","sha256":"e89b502316316e94643e2b764cf5688400f9359a0dce35ddb32f4d1b6025e20c","sha512":"56e9d6058b85b8fd878993b2ee6e6ed7f5acfe624e013631471f889e36f34543c3ec77987f452bd46ec2e5c5d93266f4e01a5f80662867760c46463fe4c7235d","ssdeep":"192:TYFnOFceEDvCElpcFpgZFcV3r90CCkPaifKLwp2xA:sFnOFceGrcFp+FcVRWg","tlshash":"cee13115710e3a387a23a1ff26905b8ef4dac0f1de2a2d3ea490272bcad63560535d58","first_seen":"2026-01-23T19:25:36.430155Z","last_seen":"2026-08-04T05:55:31.956692Z","times_seen":710,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/useJackpot-C--XCS77.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/useJackpot-C--XCS77.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/JackpotPoolsWidgetContainer-DdYWMwEX.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"585-RJrrVjs7ZXrJsTHv466jTJRSrs4\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nCK5zMNAJBE697isx12%2Bl3KrKnhNTBVb2W%2B%2FjPnLvbEpGWx%2BOnAKyS84Q3RhqgagBGUI5wZd0XwFj%2BZx3AtkkucnfukOKbU38QFQ%2B8WAew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf099e09cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1413,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1412)","md5":"7e34169a343002f524fef5ba037f6174","sha1":"449aeb563b3b657ac9b131efe3aea34c9452aece","sha256":"5ee01792423ee717bc22134ebe64399dd78c66226722b76e89b2eb47b34945b3","sha512":"63d603a080b6b3825264b3fe027ca060690cdd0d9e3a5bcc4c1517a22c61f7f7571cfb811efa6ab3cc02b9888fdd4fed43403dba78d5370a63e284c6a1aa78fa","ssdeep":"","tlshash":"76211045c059e5f8f88d8cb10077973a273c3f3a7440a0a0a0fa5ebd57a8d45b6a0f92","first_seen":"2026-03-07T12:53:24.889351Z","last_seen":"2026-03-08T10:47:57.872629Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/Tooltip-BLA_pMUT.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/Tooltip-BLA_pMUT.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/JackpotPoolsWidgetContainer-DdYWMwEX.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"334-Ru0+Vy5dIcSR0hCyIzyTcMGOGeE\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VlOlO3Q%2F5w3OqhZF4RpWSqrhmKA2nqwp3ZGr6SUkUXYzto7j5Wh8ZksL341Ojjo0fpeF4PG0uMVOEukFFzHYGxxoepM1s1QNtLfLkIR9%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf099eb9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":820,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (819)","md5":"6c7057db325e193ce09cf9260e7f4ee0","sha1":"46ed3e572e5d21c491d210b2233c9370c18e19e1","sha256":"b91d7f3ce8fbe513d7fdb401deb850771be30f75eb801ff191f53249bd624c67","sha512":"063c0532b8164e6173b6f62acf5d6e94266dbc03585f8e1266c50c9de2b6d387b83deaac8dd703dd3b73d02fff55e662c7704f6f8f07240c78217c18b94a0b9d","ssdeep":"","tlshash":"8601c256e032fbf4e57654da142d956d7253266c7e2f58f0a038058e0ae4984d317bca","first_seen":"2026-03-07T12:53:24.984904Z","last_seen":"2026-03-08T10:47:57.75838Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.1063galabet.com/core.js","fqdn":"dataspot-int-bucket.1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /core.js HTTP/1.1\r\nHost: dataspot-int-bucket.1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3c48d-hLr/NXpgzpbEG4Fd1VCxl6UIKWw\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FuAq3OyOC465Oesq3s7IFNACS4rRdgj5hE2oLU3P87u3YgxbR0lZjmnO3OLM3PbWKCaRgXdeIretaBjDEXicAF%2Bd2u8NbPHTbFkgT6pIN1LzkQ0Baps%2Fq%2BRlCvSh1qpEcGwA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf0da779cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246925,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8b36da2d6bff26a62203a66db889d73d","sha1":"84baff357a60ce96c41b815dd550b197a508296c","sha256":"db87f1739c5c833a19c626c621010a55d16578565659dc1497c448b6c2cbe209","sha512":"cf624d227604656b49fd62c0453ee3f7ca241e94e1f069f28e6d4a6210df52c7d857380e5a6b581cb833ec5d56b0c22910bcd06cbc647534c25795089abdfaec","ssdeep":"6144:D1OsuTz6j/kbklCp/rKbb09tg8KSFO6xw:1kbklCpDKbbCtg8KSF+","tlshash":"7f34a44567f11c2752f6b0b94b0bc1d2722ac003251dac8878ad73b85fcea7896f5bb4","first_seen":"2025-12-23T04:41:05.152876Z","last_seen":"2026-03-08T10:47:58.003121Z","times_seen":169,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"dataspot-int-bucket.1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/pageBuilder/pageBuilderHeaderInfo.json?v=03/06/2026-20:19","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:33.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /pageBuilder/pageBuilderHeaderInfo.json?v=03/06/2026-20:19 HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/tr/\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:33 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"11b-hSFLhM7PHcrTZvhH8p8Hnkf6T2s\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWHTxdSP4RPXqoecCCa5LR5yBVMGQLmOsWcH99DM%2BiHIauYPbnTPjFBfs%2FAYw%2BkBMuDABZ9Etkyur3MNwH6qv7vMdrOoQPacwWQDxmiqaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcebffa99cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":283,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a073ab68d03cc285a2ea057683b697bd","sha1":"85214b84cecf1dcad366f847f29f079e47fa4f6b","sha256":"22f8711fa180f3491a16949412c0f771411db6102c183564c592ae3bcc59dac9","sha512":"526285a76199b4a6719d986101a3ebc29b0ba3457af765836b38ce24ec8170528f62c647e3b7acc85f323b23634f3ee1dd05032de06798ec969cd0c7c4dbcc1b","ssdeep":"","tlshash":"26d02b3aac00ed7473d4d413d29067802040a409d744485c9cdd9f6fd3ed3851091b57","first_seen":"2026-03-07T12:53:25.048544Z","last_seen":"2026-07-16T16:07:13.001981Z","times_seen":61,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1063galabet.com/assets/getLiveGameAdditionalInfo-DO084QGJ.js","fqdn":"1063galabet.com","domain":"1063galabet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:34.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1063galabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 22:08:33 GMT","end":"Tue, 02 Jun 2026 22:08:32 GMT"},"fingerprint":{"sha1":"FC:46:85:B5:B3:80:A5:F0:52:01:04:06:12:D5:19:05:91:87:7C:74","sha256":"E1:93:1E:9E:F5:EE:C4:9A:0F:8D:C9:42:D5:00:1B:AC:27:87:6C:9E:83:24:FC:BB:A8:9D:B4:3C:22:40:F0:73"}}},"request":{"raw":"GET /assets/getLiveGameAdditionalInfo-DO084QGJ.js HTTP/1.1\r\nHost: 1063galabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/assets/FeaturedGames-nbD3TQZs.js\r\nCookie: _immortal|user-hash=osYvNyvawAX64AlB1PZZa518_nnNsbAbnzGG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:52:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"47e-vTqVjnCjiYjehdmIlYyvq2S/ov8\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehuMPt4bGaXk758%2F1zA6e81WL4I3Gb7vNBKleukQ9rpDpRtz63NOL%2FbGeEsmb7wrLRHJ5qtZ0oB4JyZEvRSS8yStt1apR4VLNxnNGJxp%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d89bcf09a019cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1148)","md5":"b97ef20125e23659fd2a41b98b103422","sha1":"bd3a958e70a38988de85d988958cafab64bfa2ff","sha256":"28d415da832f44721f25a4f072f1019e29eac55f146aae6e01204489cce5411e","sha512":"f620902465e72e27bccf7e40caf74a890265429a3bbfc872472fa13b3c14c05b2c356310ab550760641135c51c8aba4d015ef412cdc62171542c4c1b43352c5b","ssdeep":"","tlshash":"6e2114b3606e93bfe9c94d9456b01b31a2b5ba09390445ccbb3cc91928774c4a7e2039","first_seen":"2026-03-07T12:53:24.918735Z","last_seen":"2026-03-08T10:47:57.809207Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"1063galabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6341","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1063galabet.com/","date":"2026-03-07T12:52:36.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:44 GMT","end":"Mon, 27 Apr 2026 08:36:43 GMT"},"fingerprint":{"sha1":"60:4D:15:F0:37:85:71:03:3A:5F:40:31:C7:D1:01:D3:83:25:3A:02","sha256":"67:C0:9E:02:17:D8:19:0D:DC:84:B7:81:9F:AA:72:31:D5:26:0D:A6:E0:AB:41:AD:C9:26:05:57:7C:19:35:3A"}}},"request":{"raw":"GET /gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6341 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1063galabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 07 Mar 2026 12:52:36 GMT\r\nexpires: Sat, 07 Mar 2026 12:52:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 151318\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":457150,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"d7e9032f296b2488bb4706ae2d9e39c9","sha1":"61a72f604aff6de74ac1d13750505c3b0f28a347","sha256":"dd4cac815a65e1f4ff1abc9b1e7484e30dcdb0b294fcbe4594c4257f0f674a58","sha512":"b286bed5ac5e4000ac640959f728a6baaa9dff63768eb481f25c3b058760e88ddbea46143039ca507196fe9fc409812ccba5e073cba0c9268d51adda2ff92787","ssdeep":"6144:d1kKfNl3H2vNQBaKI0SfZ8RGw/V0sApXx2ZAJJx:T/FxH2vnDfZ8t6","tlshash":"f4a41ace73d674225396f478503f018ba57b28a2b48cc89af189cce46e7469a4137f7d","first_seen":"2026-03-07T12:53:25.049388Z","last_seen":"2026-03-07T13:29:05.567683Z","times_seen":2,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}