{"report_id":"bb03f300-679b-4815-bd6a-eb886da7a630","version":6,"status":"done","tags":[],"date":"2026-04-04T12:36:00Z","url":{"schema":"http","addr":"galabet-girisboss.vip/ui","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/login","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"title":"Login - VMware ESXi","dom":{"size":10399,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1213)","md5":"c73d1f04baab1e1b724a8c15254d92ba","sha1":"92c2ced21b0f0318cb2d4e5e06c594b6d9079dc3","sha256":"33347b9b7d1fde5fc8a59b3a967bbc62ad4532f106d0625df58d908aea7b1073","sha512":"f7dff90138fe7c9945b565a594d541dc95cef7225111afae6550be75bf8f4bbc90530c51e56521254d3f15b9641fec34b330a215cac8b9930745090d1276609b","ssdeep":"96:DQAlUrpd/HQHvVHaEgbTmNdxHnHVvTMHhMin8BpX7ygpZCzQh8XHeEXQw0sDFc4k:DhUrpdPSN6Z3mfiLupLy48X+EX5PZxEr","tlshash":"c922a31544e83437a143a0c961e8ff0abd95988be3905b66f5fc25e80fc7eda40d7a38","dom_hash":"domhash18fff9ab493ae04491a853e971db10fc","first_seen":"2026-03-20T07:22:58.967758Z","last_seen":"2026-06-04T23:15:29.135612Z","times_seen":10,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galabet-girisboss.vip/ui","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T12:36:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"galabet-girisboss.vip","ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":86,"request_count":43,"received_data":9869314,"sent_data":21352,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"NVD3","description":"NVD3 is a JavaScript visualisation library that is a free open-source tool.","website":"https://nvd3.org","common_platform_enumeration":"","icon":"NVD3.png","categories":["JavaScript graphics"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"D3","description":"D3.js is a JavaScript library for producing dynamic, interactive data visualisations in web browsers.","website":"https://d3js.org","common_platform_enumeration":"cpe:2.3:a:d3.js_project:d3.js:*:*:*:*:*:*:*:*","icon":"D3.png","categories":["JavaScript graphics"]},{"name":"AngularJS","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","website":"https://angularjs.org","common_platform_enumeration":"cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*","icon":"AngularJS.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"90608cb0fccba2202c05dff423980923","sha1":"0a53873934f77d37c9322c611e716b64c6439db9","sha256":"a432615f0fe9edb2332288c1deab787e4f9767d642a14944e54b1ba0a5989c70","sha512":"b10eb5d19432967a60c8f1eeb5918bfc909a2ce430ea9ad75ab7959429a7ae21a8f79c9e50972c4deb66096d9f5a04dfbe30ccdf0a903e187a4ed23ddf248719","ssdeep":"","tlshash":"6eb02b8934c9b018131611c0602f1c418cd93c70d0c8dc6ddcc4c4812872024413df4c","size":126,"data":"","first_seen":"2023-04-12T10:26:25Z","last_seen":"2026-08-17T20:08:15.323542Z","times_seen":16725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6332e4ffcc6b3a233c11052ce15c4a3e","sha1":"6a305eddd6f94a7b5471657057c1aeab397ebedb","sha256":"488258b0a5d87d46dae2085b4409027204f7612bd8e92e1c8718893710fdfe55","sha512":"583e6d5090622205882ce6176666e0b02a78d4e7aa522811d8de25cb41432106bcf09b2e99b2bb8691b4fe8757c328ede3fbd3f4826695184ce92fe308226f58","ssdeep":"","tlshash":"64d0a74cf0c064cd45271e5000161c06505ab329001619c0f94476253a3df30710fb1b","size":222,"data":"","first_seen":"2023-05-17T00:10:25Z","last_seen":"2026-08-17T20:04:43.2448Z","times_seen":480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"691f018146a46f868733b0d84b69aba9","sha1":"1785747838839f95a07882d0345492c84094e843","sha256":"62124a3dec134e8806fd36d80873d53a8ec2896a63a1969f43e67129911cf8b9","sha512":"d8760498ee1bca6adeb23b40af58166cad54b62b9618d79b2117751ffa613d807d570f854f7d72d9842e649e440a5314138c5709c68ecf2045652f4e190fd862","ssdeep":"","tlshash":"61f046612a2dd1713fbd60842acfa492678cd9a2b349c230ca59dc3d10f210980f6b1d","size":536,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.515165Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b764b1f0171e2051a9d86001d5b0f10a","sha1":"fba27ca18c58310a21928990570ebb9ac82d3e00","sha256":"d8dd7767bce7e265f3c54e45fd217c8c3cb62d9a343672c4c4807a60979a7d84","sha512":"bc76cd0432e6486383d8c6966754a9eceda47db8f266b43e423dc876ec5a8f959bb3764610dee1506e824415c7c6167b5662e0b43eae57e1c091362bf56757ae","ssdeep":"","tlshash":"5bd0228a30cd682ca31251c4b8af0841a8dea830c0cccc29edd9c1a11ab2028a52ef0e","size":197,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.529314Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8a7a38680728e787620836a54af7fa10","sha1":"4ca0c4dc8fbd1690366d7cfcec1cbad51ece82d4","sha256":"0f230d4a92f2d9bb2349503047a464ccbd4f244afb54ec3d5f7e6cd3582992be","sha512":"3db513c176ca0ff22199c9c2cf94a227e493ccbee57a0ce9de3b6205713c67cf0862f98ee1be43c0287a27ecacb37ed0e412f36488449aa4f8226419c8b329fd","ssdeep":"","tlshash":"67d0e74435fd901913d710c070cfd8c5545cdb31974c9994ded4c16d1033210803f70e","size":279,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.185365Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"39219d81aacb97e46ab03c9489980c36","sha1":"f1d279268a3ed372555b4ee487bcb234ee8bce66","sha256":"fd64eea9991a9c70979a9b0678839a62ed0fe489805bf9139ddcdd43338fa16c","sha512":"2e948b67222e85db953fa4b05041e47fff7a159fee674549e682dd2a8e02aeb4d8e9b604418b35e605f0df4e50e9988a66fc727ead3c18c6d4400e274f9fe47c","ssdeep":"","tlshash":"ebe02b822ed9a00b1a5b30e4e0dbc6416468e9359788d4ad9685976e0672015d43b35d","size":382,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-06-04T23:15:29.175694Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e62af456bc510d979a69c43cf754ae42","sha1":"042bcb8c705d3ebf3645442b4a6754019786ecbe","sha256":"f2cb28b91bc276010ad6028776f13778d636fc4e6b7039912ad7c827d48bc133","sha512":"870a38743e07e1a03782f14e21379bb4a02d1f0551e9a0cefb9cc6ea8198cd4288ffbe9d61e9962df78b1427e3e6f23f8c53ce5b9a94c9b090ebef1056d0a981","ssdeep":"","tlshash":"e5e06181375794e32fb140d154cfe64398a7e624d0e84509c981c11528f13049037a0f","size":370,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-07-06T18:31:15.498352Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba626c318b7feeaa95594844186500f9","sha1":"d284b37e32a4f1cdadd38593b290dc8adce0f7db","sha256":"b1c60333d1a31550ff5bccb7791cb43dd5f8a01de08ee2608e2e02b0308b0ef2","sha512":"f92db6715185986740b8a35f670075c30cae0d522b2853e834d4dd92b65982fb6ac27dc689a38d720262b9190c8847a3f7bcdc3b05fc658ed16b721e759efb72","ssdeep":"","tlshash":"9e11eb855f2992016bb6a0925cdfa8d75cacfe365b0891f586c1d6082c62108f63b70e","size":1003,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.1891Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0d0aa5e6f5acce4730e3eacf1a662db2","sha1":"231a2b4dd4f1a0cd47fcaf7f680cef086d3227f0","sha256":"f755be5a9ca3eb40cd3cb4a6c092b922348e77361a2d628ca611874b5562abd9","sha512":"a8efaaf478d1267c68e55e8618099812acbc990edcedcdf9a343057d1ed700f3067d548f8d964eb8e79cad672dbe902ea05995198eb2afcb26c9f8134e0a5bf4","ssdeep":"","tlshash":"7ed097fb32e160246b03c2b030034888b898e8ecf004c800a5a0c01c66eab306092b5e","size":244,"data":"","first_seen":"2023-04-20T05:52:30Z","last_seen":"2026-08-17T20:04:43.263547Z","times_seen":555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"182d43d3439979bfc6aeadf8170a789c","sha1":"67e3b77b2e2cb4db66ab0e94e15d276a6925978c","sha256":"daaee75c923966969c6dc6700fe241d2e9d0d562505cd8440a110d3aafa46905","sha512":"b2878de8e4437560b8841faf261709edc9f4b006f4ed7b08fa5409a6d9673444d26361b2d2d1957bfd23945ee834a9402360750ba3935c41e8f6dbb6710fd3f7","ssdeep":"","tlshash":"35e02b853b4ff01e2e6332c0a0dbae43b879ed305088d51c8b81f11a1531038d02767f","size":391,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-08-13T15:41:25.293461Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f74edbc794ab17f9e9f259603d331c14","sha1":"de5398753afb19faf3d28c6e1c289512d15db01e","sha256":"ef4f6c00d1aaf9b224313f5f9f15bf6fbd10a016b42d253b0d6eddf4ba146415","sha512":"8ede6710084f39e1ad66f65c01eee9cd4e365270aa47c834d4da43c81fa8ffde9de84a41b45881dfaa220850e4ac335feeda7ed485b28e773c107fb472ed52f3","ssdeep":"","tlshash":"07e020963e5de05f1ed531c45057c961bc6c9d71414dd42e9780d6652533499d02f32d","size":333,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-06-04T23:15:29.186253Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7bcfe97ca52d17d5520f12a6cbb2a8c9","sha1":"151ca3fa05e57e5c94172c89255d160056ae8c5c","sha256":"ebc98d69013cda4051175823e107ca7f68c47fded1bfd24fd70eef77c5ed129d","sha512":"36369cd151250c950a3b8dbf84530efb5e18c04580792a354fd4341b3ae3d4a95d1d4c16cbf9566f456eb916be773df0ba6e9cebbf2ba4b7210971de07ce2568","ssdeep":"","tlshash":"eb21494c2bae550103f760619acfb0d8a4acf762475ca2bed6c2c11d0832195e13b76d","size":1132,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.176223Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/requirejs/require.js","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc8bbb2fcef87fc194fecbb632fcfa","sha1":"33bc97e78f4905e72b4c1eb2ca0a4662588443e3","sha256":"9485f0917f97fcf4f63a5ea365200ffd57f123f451382a2f9a1ad2e2fd51ac9b","sha512":"bd1aa102bdb0b27fbf712b32cfcd29b016c272acf3d864ee8469376eaddd032cadcf827ff17c05a8c8e20061418fe58cf79947049f5c0dff3b4f73fcc8cad8ec","ssdeep":"768:tX1TDwxKrBTvGsPjHX4LjjEvOFs0ETaI7wZEpW+5bbVx0si8uaILqbqS3duK3YJf:tX1TlBg+1bVx0sif3eqFK3YJp7WbM","tlshash":"8483835e1afb2223912375b89b9f70957725c0a70128dd50bc8e93e85fc057896f2fe8","size":86483,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-08-15T14:43:53.724838Z","times_seen":509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"791cdbbf2d15da2fd7c20a5f272ab226","sha1":"a1f2c76eb99ce93d7083521c0c10c33b454b3155","sha256":"d8d4e44c818b69237c17c6d913e5f16b02ccdfdcf9293c14101ec4607b1c22bd","sha512":"51d59949991a1f135b5774d247aaf065c867740cc747141441a4d16e37c3a7dd862541db6cda6a621491d1711204d1eb3f2b00c8d667ea313b765fa60b2f1333","ssdeep":"","tlshash":"ded0a78168e355220b3357e47c53660d785a718d70089c029d2c956cbdbe661262f40d","size":243,"data":"","first_seen":"2023-04-20T05:52:30Z","last_seen":"2026-08-17T03:42:20.435326Z","times_seen":487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f0288926cbeabdfe1814817589ff6a0","sha1":"94d96b25342d450e1947b5d97d79e0f25e61e268","sha256":"d6c726e02dda86fa732bbaad92c68a48975ac105ef473f790c6c060c60f2b07d","sha512":"448c1e8a31a7ce56a49c8bbaef6060bf4cf11b9e1bee7b7afef82b7ccc590e46ab1b0095d54eef8a0d914b683d59bf9ffb0d5fa5630d5d7d3cd123da04098bdc","ssdeep":"","tlshash":"c5c02b6188edb2b01f318144865d3150c9c086478c8370f4760c02253f0e72c10b3b48","size":183,"data":"","first_seen":"2025-03-05T11:48:53.281186Z","last_seen":"2026-06-04T23:15:29.163566Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f3c066b02a7796929dc183dcdda6e94a","sha1":"8f7171eff860f19fa475721a5a239c6db66bf680","sha256":"974554310861af31ff4bab0ebb089950c3d486b8a5d9849acb96661a5df4bd09","sha512":"3c63b57b8818dba9d5916342f30ce3ac29a55deaf4c14a1a9588bf4d086efdd9b7e39eb13f280af92fd66d9cac279d63cfc4f832bd42e205df98e40c8bd2c69f","ssdeep":"","tlshash":"0ed0228074a2a13a1ef30ac19c8b027e30beb78cd04cb8114f38c51c083ee70a930a0f","size":219,"data":"","first_seen":"2023-05-17T00:10:25Z","last_seen":"2026-08-17T20:04:43.217394Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8debf87fea469415f0cbdd7072a71a6b","sha1":"0bbdfad4b3a7a8c9b4e602bd89cb8a01cb30fcb8","sha256":"151644cd80321fa3f7cea9d2c5ed795e85ca8083cd38db8a733128bb4908b0c1","sha512":"a0bd7ef5909aa13aa80eba35f074f64a92f57822e6157db466e84ab044895c60b86502762c45d3a9a1d097a330edccf11fea46458becc6d50b63e68ea542215d","ssdeep":"","tlshash":"05e0d881aed8d41616ab50e5f0ebc58198ace5705bc8cd9dc5a1c56e09b2005d53b71d","size":351,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-21T06:50:19.41063Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c63090870610d3b06b1152f762d08a4d","sha1":"2ac9c919286e1531d81370f00e1682f314643c15","sha256":"c77a52d33ea6819743fa35d22d9272747bab6501a5ce785f9aaae276a0d50a2b","sha512":"630503afce5328e11b4df0e50a874d339aecb8b616ad73ef8d99cebb0b835b1c9165d2d36d1714571071cae281ad4bb3062d10dc546bb2de4e0bb8deb9b4d830","ssdeep":"","tlshash":"56e0618d354be013277e41c460cfa46bd566eb20d08ccd00cd83c1251531708903771e","size":384,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.50259Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c307db72d314a46e96bbbd94c4ea9d86","sha1":"1fa9fb1bbbd9b9456effa3fc03d33b2e47f33c49","sha256":"b94097c6a8aad9e585489912ea05a158462532815e4c71bd4aa6ca30c7f15dfc","sha512":"b01a2d69815330e36feadb89362d91976d18b0ee1e9f6526ea569fdfedc3700413d55f4d6829a8a60c2fcaeb493c245a605f0f0ac1f16266f6baed5fb636b69b","ssdeep":"","tlshash":"78f08b812eecc5021ebf50b9f8dfd7826458d9234bd456d4c6a1ce2f40b2006f52a70e","size":533,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-07-08T10:37:28.191529Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a94cec68bae7a2fe2d62afe447818204","sha1":"25dc4e733193822a90c35dca49ea8c9a65a10898","sha256":"b43aa1156cd17b9167f34a843e47fa84ffa615ab75f5a77023437e4324ca8dad","sha512":"a018d5f9b4ba28089d26771770469940311deeb44bd09e2e11f99d66b3988f0e2f9ce39dca2e5095fc5cd9df56865f81c7afc60d9e2031311fd35ad13fa7f14a","ssdeep":"","tlshash":"24e0dc962a6dd3121bb490c028cff693e4acdd3397848664c9c2ceac043200a917eb8e","size":435,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.511634Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53f3d8f04947fea821678d6fa1eea0","sha1":"ad9d4d56f9ceb4bf610e0c1a8e603e2fb227e56b","sha256":"f791289188b0e9b6f1b28a5789c822769b8a494788b2f829659ae2dca6d64dd4","sha512":"db5ce00704d18edefc73dafd14463abefb602f5328bdd8a4c29778abf6850b47b4f48efd08858503a23403a3d2622fbd5c64267063bf75c11cf3e3a0930024f0","ssdeep":"","tlshash":"70e068ca368ea022276a10c068cfa5c3e89da9209988b714ddc3c2261732009b03ba4e","size":377,"data":"","first_seen":"2023-05-16T23:55:35Z","last_seen":"2026-07-06T18:31:15.494561Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b33ee80df9097618666ffce52f1701ad","sha1":"531b5f0a55140cd9570e680d2cb916db9f8f736d","sha256":"d976adf18f76164cc694efa3e1993bf550555949922da0aa5d3e210a903b172b","sha512":"8f70c76086a7321673ed4422a9a87fee0ee29b58cb3fde5c040906e44debcea0d40438968fef641d5f272d71dbfe4bd0db3dc2226d5987de5a32c347719e2ea2","ssdeep":"","tlshash":"e0d0234534cd7828531240c0b46f484474de543080cdcc19edd9d1541973414911df0d","size":197,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.531362Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e128f4afeca115e432c551a21953b99d","sha1":"82c46e441c6d84c25c5fee9595d683976dda6a07","sha256":"398f1ef8498128a6533ada525e9867d8ba30349caad00f2576701496f0f910e1","sha512":"df930e314ffc41dc0b6b295f3d25b205ad5d0b173469a8a8c9d090f663cbddbbcc3903713d22ac3f94438306aa430e61ad680e794c21b14543c66e586d4e3866","ssdeep":"","tlshash":"6bd0728836aea02923a620c0608f8882585cea31a78c9a989ac0c26d1033214813eb0e","size":280,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.162465Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8661c9f6438ea7ccafd4c287e1731cc5","sha1":"796e7f6976ca59532b3d40f7a6a45edeb2faa0ad","sha256":"637a695ffd237d786a99b8e4d182c72b4e1f779c3d1d4f2fe9721c13b43f83e8","sha512":"8af838d641f5f276a33c1ce2025d474c9fc68920e2878ba7d636b41481e8976eb009e602690dbdf2f45d0310c53edcc473f0532963c85b4d80e3c0cf3b3220db","ssdeep":"","tlshash":"d6d0a74a34896424a30710c4747f5851a8a664709588c815f9c9c0951e72418a51ef5d","size":208,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-07-06T18:31:15.537321Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cc642c2372621f5ef94ec3790a98544e","sha1":"f460357df6cad2ffc4383a41f87ba511b80749a2","sha256":"4744d52fcf623bc65a969f58714b67fc57f55e8a5e23ee38838fea2ecfd6b27f","sha512":"9efced58ac9bc4629e2aed561fd5d6847709355825db4507789899624c6e529fa43c7e0b7754d8984fe74e31b1a6d2762cc3f540ab01c66b17aa92f2b78d265b","ssdeep":"","tlshash":"b1b092d0b4d2e06115b34aa08867a649788aa6d8a51ead409a51d2282e19ba2611958e","size":116,"data":"","first_seen":"2023-04-20T05:52:30Z","last_seen":"2026-08-17T20:04:43.252481Z","times_seen":573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"21f8780fb508b943394600d27f2baf86","sha1":"0b349e6800fb2838490dd81004401c34f3c4fed7","sha256":"17d163f791848ea0ada79fddb1a6d29960e94ad413a057ecda7389e9891d0b34","sha512":"bb298815a117a40f213321aa528fe329d6238b71d02aab1be80d1a21bb82f2aee8caff7bb7deee5db118e216c765837e8152791d801b1c807928315fcc7f25f6","ssdeep":"","tlshash":"b6e061863d6ad05a1fa101c564dff5739c95ad30508d550689d1c52a243208dd23f61e","size":370,"data":"","first_seen":"2023-04-13T20:22:26Z","last_seen":"2026-07-19T00:50:56.383369Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dd08ea6f1d359c40264cefac7eb5e05e","sha1":"b095c32218ee4654844196148723b9284d07af06","sha256":"e9af0a5fa694a5880590f8d3c9b9f6d24a05a8d264e5d36d34d4152e20316c99","sha512":"22dc6e65ceadc2a014839ac7e01fdf1d123480dd02f511f6de0440e6dfcc4431e6fd1816fa1d149ef4a8cc30e8aac840d4207d3a64c5b0c682fe1f9e8e21ea22","ssdeep":"","tlshash":"f8d07d4569ad902913a620e060cf8481445cda32a78c9a98cac0c16d1433100807f70e","size":282,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.199373Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/es6-shim/es6-shim.min.js","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f80f35060549e35d1aed7d0113f820e6","sha1":"e1af5353a8df0f581629bb10bb32f2c52b366afb","sha256":"6fee0cfe78705de2b6e3473b536d963ccbad9ff68c2b03561bf5363ba6906b88","sha512":"e69f90b440754494e29b0d9dea2b1e88241df9ec0125b54dccfd1613e8f0e860ef9f53baacb2a807e2f57abb54cc2b0ea47b4e9ce9cfc3301dd2f68e3063a5b4","ssdeep":"768:APnTpyncARLAIedD29GJlYo7f+qJk3TCCyaUhUvOU2YJ4l1LrMDb2XKzWD3XW:tcAl2t2QJmo7f+qJwTRylPMDbYDnW","tlshash":"ea43758876e1f0b147e761b0202f600bf23d5dba545ed190e255e8f17cba64a8737f2a","size":56557,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-07-09T08:49:48.654218Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"657c48bb2b9ce8f37be682fa8282b4c5","sha1":"b6eed30a3a983f12550884d486c9d5f88438710a","sha256":"5b8f1f4351ac261b8df2f2752dbbdee402407070423e354ef9d60c7019847038","sha512":"70075d0a58e84d82c26b591cf0f69ee355e37160801eb7e0af2e86aab9af31c6e746fd77bbec67b7ea85116561b3ba3012ea83ec9bf2b5de30160c12996ebd02","ssdeep":"","tlshash":"f6c02bc1b0f3449100731bc058530318709d6329d0098c00c52dc128497876130235ae","size":136,"data":"","first_seen":"2023-05-17T00:10:24Z","last_seen":"2026-08-17T20:04:43.22277Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"665020c38353c6ef23871e2b90436cf5","sha1":"e3aa737edc30e60d6bcbe437c50b8b3dcaf3c1b0","sha256":"706db10aeda4abec84ff4ca3b5dd8209fa7bd1eda5b462f787247215e1522619","sha512":"2d4da5d8eaa7135dd26c7fb25a596bad0ab775eb432adff89da5a21bc937d2643d64c674241a0793727ab7c32f16391e84449ab8e2fdbc737f6709def8e5d5c1","ssdeep":"","tlshash":"4dc0224a30c97428a30701c0f5af4844a8ea793080cddc45edd9c0a429b3018e22ef1c","size":194,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.173794Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"543b7cf094c4e58c2822f227f61d8cfd","sha1":"09e674d9983d281cf8c90c118d4a37bc2337cc42","sha256":"306b5225e92d6aac24a651d12d6eb989059e3ea288f65d662d20e96c4fa22f43","sha512":"e8409b70bc9dcb2c096c5deedb4f064bda637e99f3491c2ddbdd89d545fd090b0f7ce11412c73af767fe65ead2d2a076f99a38585c139cccdb585555d1fbcd25","ssdeep":"","tlshash":"c5e061c577c6d41227a500f0a1dfd473e555ad24508c951fa986f15414f3018d23764e","size":370,"data":"","first_seen":"2023-04-16T19:02:52Z","last_seen":"2026-08-17T07:09:32.44253Z","times_seen":12042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"436c8d3613f5d903d5b0527a0ebf4b96","sha1":"4a8a77c5a433bf8aaec74ee627199519470a7e37","sha256":"1294bd0d5c2a2e60faa97ace5187d0f12323d0524c958df9f7723e3da9f81194","sha512":"eecc8d622aa6e21b0fa5cd90922400dc7e8c34b273dc044f90cb530141ecad06000cc94793e04c9e16fc9cfcdeefa48635c403f1ee4f9afb848eef3538ddc72b","ssdeep":"","tlshash":"a8e022863f5fa0e22b6100d4648fe683e8b9ad20d0b89689c991c25538b1a08d03ba4e","size":384,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.52117Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"58fdb6f9789ee1c99fc34f08c4349071","sha1":"7ff1548fee24c92ce5c1c88ea39090f9d0652047","sha256":"24ad3b23d0e5068ad57e46c48510f434db2c0a0ad3dc07dd6136f8cb1eb32fef","sha512":"151eaa78c476d2974e96d4c123cec41b7265a0d950a5c75ebf2bd095ba4c2b2eb05b58d6a3875b6a3ccd186578a8c8bd8cc38f103010309fb687d4fc3b4c4bc8","ssdeep":"","tlshash":"2fe020817e8bd81e4b0631e4d40fa84164bdad30854cc41f8b84d2550633028d03bb7d","size":333,"data":"","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-06-04T23:15:29.169043Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d41764b52104ac82eb6fd3dd0f6eee9e","sha1":"d750afee9baeff3c6c0de797c29a415805e6176f","sha256":"df7207186781af9c48e71f2fe1a11578f1a0bd762fb51b67dc86d7f6ed40a138","sha512":"5bb62e47d2b0f8beed77033c2e7b8dba6c346c56ad77fd4bb3ca76f37e2315fdfc154092e97d64ecd55666fc0a9c179eb660e41e307ff6750cb69b13d74b3347","ssdeep":"","tlshash":"0ce0c0963eabe82ba6a531c4406bc801b4b8adf142ccc47dabd193321e330d4c03e71c","size":356,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.170346Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"61ddfb616a56e7bad883ef937de14509","sha1":"9a33b065b30cc4bc09d82145b11335cd382c6e23","sha256":"ca171bae4b0663ee6f635cc03aad8bb838f0ec666a14d286131a001b84d7ca4a","sha512":"4d4bc36fa8fc971f01fed7001b65991fb8217898c14055da7296759271ecaed630e1b87826536897465ad552ee5e170d7c275035b3fa01a4df7162e038e85003","ssdeep":"","tlshash":"64b01288b4c569d016632e209057085930acd73c101c5c80cd8eb8192c7abb1421d7ce","size":100,"data":"","first_seen":"2023-05-17T00:10:25Z","last_seen":"2026-08-17T20:04:43.245362Z","times_seen":480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"864206bb841ed8d7eba3126adb4a6f10","sha1":"58b4db083bb720899bfda9fc990fbe0bf456b870","sha256":"e5105dd93db25838dd72582c15c0002f4400d027a9877025fc62500dea36d07e","sha512":"4e0c7472b7c7d6c39d1fb872d3fcb9560c5a7ddd2ebb8412fffb0ce4fa95bf4cea2f62db2e18c107d20751b6c85af1648da49fe10a3165cfeb5c477ee5a49379","ssdeep":"","tlshash":"22f08b621a1d91313f7d20941dcfe492674ce922f384d5348959dc7d04f200580f6b1d","size":524,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.49399Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d61133fff58929162493cfdcfb61fc3a","sha1":"f99e1bb250cfd1eea3df5020fcde504771355373","sha256":"f7f144dafbc6d88f4101410a1782e5527535c26ab499b42227c83f9dfb3a9395","sha512":"887191ec6bde0dbf5aebf1b3a88480e0c9d07f7ed900ffaf253ae5df742c7b01411bfc92d0db9540ae00737d3c58763c8adfc500e535a0908b1d6637ea06382e","ssdeep":"","tlshash":"e2f0e04d3a7ed1112bf6609074cfa5d6545cd973574c5be8cbc2c52d00322155127b1e","size":502,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.168545Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4375f5dbee1f935911c0ea6746b4e9fa","sha1":"139c1b54ee1e462f26a845159ab627552ac91de9","sha256":"8076842c81fd7ae025720d5444fdd8f3cfa0ac2bc13ec6e019e10a61abafd05a","sha512":"480b31da2ff0ab557cae5d8044a9ea75af77311a04c374adf5cc535b6cc7da90bce046704b38e60c2823f911551071da19c81a4e932296c866fa638f415e692a","ssdeep":"","tlshash":"38f09e426853313b0a56b5f40c47262d716ca798d10eac057740c4ec33fb52129f2e4d","size":488,"data":"","first_seen":"2023-05-17T00:10:25Z","last_seen":"2026-08-17T20:04:43.210001Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9bde234f63f0093b876b0090363c3da5","sha1":"221cf8d7291d60dd66e545e9e3eba8c4eea5c607","sha256":"75f71ea7292db6ae931a168d2501451f673b5850e64a4caf92eed9e88e3ab0d6","sha512":"841ca84113f4bbf9ea9d43d89edf17319d31d4f244bc78fa8b21df781bba6192242ac64a40038fc43319f18029d34c7e4665c8f44fd44fffb9470c2b598942ec","ssdeep":"","tlshash":"89f0f642165d931116fa50e018cfba86e568de225f4457768ac1c769003230ae42be3d","size":537,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.493461Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5cbaff8caf40d8994fe00a762722f5c5","sha1":"05da5441c72fce4168d7901ee3e86cd8e2d495ba","sha256":"23d20a4f06224eae8f505e0cf9a072919359e6205eebd77396f94957e948197a","sha512":"b208cc04895c1f30006b47ddc00187f01c661b228e086bb7b651b697b495166c39248c34c5d9f9100183ec92c87de5ae22eabadbccd6076fb8da07f5d36dedbd","ssdeep":"","tlshash":"97f059ca7ac5d90727a650f0550fd460d97cb8b4468dda1b95c9e27008f2008e437b2c","size":483,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.51244Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"de78b9408e45f6e5f2595fdc6aec5873","sha1":"64495ed451494aefa5e777805f505876ebbbf731","sha256":"1f9dfa56eeba2087c29c1e5235051981dc2f6c80129fe68fbd049dd4df9a4f7b","sha512":"d49c5d81e259efebc47da8a06f9922ed44c63cc91129af3d9e82172a2d01cadf491539336f084fb83d0332f0dbc59d54bb6afb7ab38908b87f547f46a74e3f77","ssdeep":"","tlshash":"7bc0228a30cda828a32600c0b5af0844a8de6c3080cccc29edc9d0a02af2028e12ef0d","size":193,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.518113Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fb64f2b140bd768a30d449d8aebc7a97","sha1":"d4400e90822383f6ac1e6dd211c1cd339691825d","sha256":"7006d8ec70e85abdcaadf6fa6b367a336971865bb26763355505d2fa7e1a1741","sha512":"e403dba0df7e0e056a6236546007c711e744f9a8fd5146cfd4ddf4b85e1b21b86abf72602f3959e5d276b1547e0dc845d1a0fbec6a419cabeb281ebe987055ac","ssdeep":"","tlshash":"ded095c9355e902513db20c0309f44c4485cb531d78cedd5cdccc1c9473e018812e70d","size":245,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.181367Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f16ab3104a6139071d6750ed8c47db16","sha1":"c94e58b3ebc9f1d018b31d19b02fbaffab25e078","sha256":"70fca64d4c937b512d44025d9e5739c579b789a9e3620461fc3ceb38a66c238a","sha512":"c57f6ee997812402b8cfec82715da4a0c722541bf73ae82b10e5c4fb11529c0f4c83097a044fd1eb81318555df9729b7474449371ca10bf8d217ef8a90112db8","ssdeep":"","tlshash":"bbe02bc3354ee8563661d0c090cbe443945ded705688ef098db1c2da1c3200c922676f","size":391,"data":"","first_seen":"2023-04-12T10:26:26Z","last_seen":"2026-08-16T16:48:35.340408Z","times_seen":860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e118d81e78b3ad0fcac9bdd749ad3dfa","sha1":"6551f03a60296dcbbaf0e50b8b76d82299af6671","sha256":"c344c3b273a66b107c682c0d00eadb50c8672182fba447aac119794eb537d138","sha512":"cc8c7a292543b8e1bf60daa4ceb03d3fea809ae93762ec5f1ea0d9e13a5a49bf3f821d15e78d6b9e710ba718ba7d8dac8f37fab08b168b372e7f7cfc8147a7e6","ssdeep":"","tlshash":"3bc02b4174c3a026047301d0842fd8587cc9bbc8200ccd00de51e13c1f1c770213264d","size":140,"data":"","first_seen":"2023-05-17T00:10:25Z","last_seen":"2026-08-17T20:04:43.213638Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c71d5140a63653b56668446c4256a25b","sha1":"82feada39aaae9bf7e3ec049ae20c61be7202c97","sha256":"5e00d7b3110361796ecd21cb85c9d097803b43dbce4695881fbcb2b71e06db7a","sha512":"fcf676f1bf0098d056fe8f5efeb07f225414164a3f28bd7a1ff071dfef6b37376d1e63af69ef4db50657e616f74abd6ea4c6d1fa47d705664e27d25edc719837","ssdeep":"","tlshash":"c2e026863d95d45a0ba511e9c04fe0614ce9ad70854dc817dad0c2681d3289dd13ea6c","size":318,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.535355Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/i18n-js/app/assets/javascripts/i18n.js","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ec68a327e052c943f35b2bff5f8b34a","sha1":"cc274c529f47a9ce7c2a72dee8b7d2f0d5b69612","sha256":"dbcb4c7e9359ecdb256795b7e1216e23588190db7e35e7d8713689677bf77b0e","sha512":"d5a46b30a4ec02971e70b32c2cd25f6785e535f6f3b740675320261696421fccab3b280151d8e069e0b8acb4b4676b9e2ac400ce3982718c2350532e5625ef3a","ssdeep":"768:NhRYw9cfig8CmD/n6CtpECJ4EtK0SHC/1W2DSqBAvz2:FY0cfigCt/J4ev/1WOBI2","tlshash":"bde2414968e35212895331ea1bdf20847a38c117622eed59b99e83c51f44d3c93effe9","size":32365,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-07-06T18:31:15.438507Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-17T19:41:58.534843Z","times_seen":383445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6dffe42d5d374c1be134ecfc7f467d33","sha1":"30cad81bfb0b718cfa12f1c06508a7c690e5f7a0","sha256":"9b0752feb1ded20c2bdd5d6c8fd4b42fe51a8a6f1d9bc5e665a74145a80e376b","sha512":"41ebc2ff600bf26038378875ecce96b670b911756155f4733fe9b9fe7a6542d279e6a1ed469d1b3c137291f82cc5906292bb099fc7c4d961ec2c8dba5b82cf92","ssdeep":"","tlshash":"91d05ec9a47e42ba4c2330404803587c204d735bc80fdd0d5914c4e84b3ad1163f375f","size":258,"data":"","first_seen":"2023-05-17T00:10:25Z","last_seen":"2026-08-17T20:04:43.23666Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8ec6fd39187a6aea9c23d95a89494113","sha1":"fa75b0d5d9073a883cf629e70243eac3df76b196","sha256":"57dfef0f44c3c8059c0734329caca94be46be92fe2b29675b58583731b84dc34","sha512":"6163b0855c1ffabf63e98082d8b2650aad279c4241cc56557477f8fa624d26a89da7fce2cc47d39c17e223ef3af4a1c19e74489598f122ddea4b8cb6675a03bf","ssdeep":"","tlshash":"78b0928a3889a05c231a22d5a02f2c854cea7870a998dd6aadd8c5a51db2028556ef5c","size":114,"data":"","first_seen":"2023-04-11T22:12:58Z","last_seen":"2026-08-17T19:36:42.813776Z","times_seen":24713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4eeafa427968611a2e74ffe1eee5aa5c","sha1":"b414717e6a1dec3a649ad9e0e83883823667d1f7","sha256":"2db9f31ff28fcc8c93fed446ab07d1d341b0bd19152137ab5f71f1e57356039d","sha512":"4d5269f24043eeed5a70133e4ea037dd308a0cbb958a56e1dccc4ef62ce3b45583e83eba9e45a4847475107b93993c57b64606525676a638f89c1a63c94e1c8e","ssdeep":"","tlshash":"2de0e58af985ac52275902e0b8af549a7c2bb93065c8e946cac5c1286876414f03ffb8","size":412,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.204336Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"18696d598684b95fc715bc6ee9ea7494","sha1":"00cd77fcd00b7ad440ed73d4c6d4ce93ab386954","sha256":"f73dc563b4a5fd562159a7b10ef11aca215fc5bc4552ed5af7035666b0769ec4","sha512":"2babe39ba47a884ca1554d5692978beef893f1cffb34b932edcba6e423809049ee9945fe5542efff7173115d053e1e996dc7403c9b66806a806ce16e07540d6f","ssdeep":"","tlshash":"cae061c336f69c12276100c252dfd55794abb920548da5048fc1f12414b3315d13b62e","size":377,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-06-04T23:15:29.178388Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fee1aee52e26c3fa618aabd54181e156","sha1":"dbca7c051eb347f0243e405bbabaff187eacdb0c","sha256":"54d3b6fa82248b9d405e7ab94fbb4c652ef42e89791d6a57e8d465cf44069ce8","sha512":"1483526342be0d936b3b763236b4a93c7bc82e21acd256a836c1dbaf692170f73010d5f056d932cca546591348dd4a017ef2a46d8d669e84eaac1b3125bce220","ssdeep":"","tlshash":"74c0228a30cd7428a30300c4b4af0892a8ea6c3080cccc49edcac0a02ab2018a12ff1c","size":193,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-07-06T18:31:15.525984Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"61d3759e7b5776d4fb38e35c73b0f2a5","sha1":"68bad190881a126ce6cb515c12467ce1a842e4dc","sha256":"d19349506cd09f49c6110bd8ad6e22d7aaaf2cc0e179293f38bf4eb31f35c3af","sha512":"0fa6b48b388c6228c0f1905ac638c54b1614244b5264d94fbc6b7568d867894630c4d5064e219f178da56e8dcf0096e6c5d5ed167e7d7788beebd214057ad128","ssdeep":"","tlshash":"dce026833af6ac16136510e5d18f904948ebb974854dc812dfc0d2641c73108d03ab7c","size":322,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.538443Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a92d69337466bb62d549f53451e1d1b7","sha1":"e3bdcb4e0e37bb2688c3255f61176adabf019461","sha256":"aed0103408b0dfcad01ff4948e2e1fbdb9cd913108ea26f938950f39071e096b","sha512":"15fbb8ec84c1068313da714b77179ead5730f34c70f7d799a8511a53dca8e47b6ce9c9fe85ea66d6abc1e93f676cacf7b031fae4e9a0602dedb2d55de8ae3993","ssdeep":"","tlshash":"57e0dfa56a8ad4250309a0e4c02ba4439dadad304b4cce2a9aa4c5652d3a00ce47abbc","size":338,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.529794Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0b4a81134088848b3746572106801d4b","sha1":"69001455c61617e4cf925458aebfc9c1f3316d31","sha256":"3e9431a72b616333159aff75d677ef84cf12767fcc153810712c8b2a30ab6be9","sha512":"d32d09f2cd5a82a645cb8243726916bac3ab562915dd7ff8aa4d0a2e8c2e6f93a8a1e587ff5a214ecc552d792a7e3793f3090178d7d633da9b3f994797fbd92a","ssdeep":"","tlshash":"bc21cd573f5a6c1b2afa30d044db6a00f4f8fea5475994b9e901d3556e73848e03367c","size":1284,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.170954Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b20cc20de6582e113b777c203c6bd456","sha1":"ad4af11165bc04e67343983d57e6401143aee419","sha256":"79aea2fc4f935c1036a0b4eb245160bfc4e002d0b9bd6a0e19a5410a8f534a9d","sha512":"1a649a389ae05837387244e8be30ceed63175fcaf0690d85381966a4effb67c921184bed4dbd93e91fefcd6c0743b230bf837e2fee1822d48efdd0e5e425c644","ssdeep":"","tlshash":"98c02b66f8c3c020191312f08833498d7089f3558009dc42c900c25c6eb4330300672d","size":140,"data":"","first_seen":"2023-04-20T05:52:30Z","last_seen":"2026-08-17T20:04:43.21988Z","times_seen":574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b30494d5e432ff1e08397e8389264ca1","sha1":"7617372b265cc2a86dc55f862fa0a04bd4ab0788","sha256":"5c84ffa263662fb5d6e04d833c4686ee80f0caafc5ea3c8cb8ad46cc5cb06a2b","sha512":"166e31d30b93ab6835e25a26f354ffaec905c1473ff1c8277af6785f30da6c3b5b9afe542837bbe174755ca5039bd122553319b0e4eb466987d092c05acc9154","ssdeep":"","tlshash":"a6c08c8934cab018131621c4a43f2d819cda3cb2a88de81a9cd4c98428b2024653db1c","size":149,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.533541Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a135fd617b5935ca5dcc215707da4bb8","sha1":"0780cc27536e41bc6fdaf6d9109443ef8244f5aa","sha256":"1224d85849db25ef74ab9ba3df91165e6de9bc44913891915baac6dee467afe5","sha512":"2f033e81bb75c73b37e33727f3785e1f14041718cecc4244aa0c42e25a062e7ad547b82008a4a75c8bddecb79a2b766ee311501eceac17e45fdfff2bc2b8d5f1","ssdeep":"","tlshash":"f3c08c89349aa018131a22e4602f5c8148e938f0d18ad879e8c4ca942872028843da4c","size":141,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-15T15:30:04.83426Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/jxon/jxon.min.js","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5f3bf7a3c864c197a2a17828894b310","sha1":"fb9dd4eacf96cf0fcf7008a551ea77d2085e399b","sha256":"a7097fc43cb7007dd8a9594e7c4d09c76ae2dd8dc587392a1699e86b4141f95b","sha512":"e0b02a554da9d5114b662552613bd419d9beb1f71bddffd90a2f50a23bb24d9cb00c7155b037892cec81e8acf61b68ef02dcae2f915b85aa9e21c66b7539abb8","ssdeep":"96:BJQRCCjTOGSvfVV2jK0KTlpWiIVuhZgcQlmxzCZHVZz+I5keS6i9tG3I:BuhjTo1V2jK0KTlEiIa3QlOGHVE8kyiR","tlshash":"fcb18593b5ad32930be720e0485f1113f176d245b4dc9898e229d4d97c71e47067bf6a","size":5360,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.444402Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fa3612b863d1ac23f9aff4bdaf0a8ed6","sha1":"80b1a7ff52453d02f5296a5e9cc794b240a1c2e2","sha256":"c64ad29d9a9d2f6ab53299784f73713396957b5df844c53ba0f1800b1c14bf7a","sha512":"1c5006dd2ad78051601855ae70ed03cc3009d32d389f5b1d5370b3d6549d7c01434bddc7d52279949a938ee67bb0459ef9b6a8dee967748cc98efe753370bd85","ssdeep":"","tlshash":"39d0a7e07083502360b386d09993578a3815a2449149c5008b60c25c7e84b23e10944d","size":220,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-08-05T13:56:17.580167Z","times_seen":178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e25defa6204e2b13f667cdb5cfab25c6","sha1":"51620232b986d55da978ed780a4c618a536968ce","sha256":"302ba455ee75398de57a8183e33fe419cfd2ea009002bbc22a1bd8aa27cc3f84","sha512":"7460bc1acde59de1fdb1f261fb07227fd08f9e143b800a2ca880ea4c369d822b4ece2d50d9d239539df6ed65f92db3249af7221275964561ad4dd1c39f304b17","ssdeep":"","tlshash":"b0f024d22e3de11216f4209868dfd5b2d45cdd6263857616c981c56904b500590bab1e","size":486,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-26T10:59:52.224479Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9920d1b80bc5109da95769ad459516f2","sha1":"b0b4c5032744d6487073cd16a07883da569a6c47","sha256":"ddace5ffd9153aa02e07bedc7c2eb39c79480a3a6cc1d28fd87d82a6e36d5ada","sha512":"e553186aa1d6718bef8b36f313b9c382a9a67628dd11149d9dded3eaf896e0964cfa64e69e714b9d44d8b40bee3b51e95307f7e5d0ecea6610e69f3a750c5763","ssdeep":"","tlshash":"01f05c963e6be41b66f531c050abc541b97caeb14288e47cafc1d7365a330c8d02bb6c","size":457,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.519852Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"637965ccc81c42c6984717b88fec3764","sha1":"47fad2f0f11069ab6bf90baba8d9a1316f3e8b6f","sha256":"1c88d26c22650a9edf2000841626cc9425e06f7a44d02171121b5c516f0b6f27","sha512":"77e57c3dede2726882e1efd5c67af0eba39eb7763f68d829e89e555e140b953de110b747cefd779f9d6433335b8d2612dc23e378dc98e3c69e4c5a6aca4cdb73","ssdeep":"","tlshash":"e0e05c115668a12617f561905ccb94e2883cf931a76441b04dc0cb9ca67a005c16f3ce","size":424,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.536484Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9eeac016f11281ed925098f0f2d1d678","sha1":"0ccfd8489d922a069571820bdcee454e7314463b","sha256":"7092d82d9b4c0da58e0fe34e9b5f564835b52c63709fa685e44ec7c88106833e","sha512":"0312402f34ccdf028e57b359ce732fcbf8b18c0739a27d346ca83daa0e9d533ec2acf74ffbf9c10f8939946c60d49d461ecc20f4fd0d37c8f654fcdc1c7961c6","ssdeep":"","tlshash":"35f08ba66f6fd41766f530d040ebc640b92dbeb0d198a07ceb8183266a370c8d02b72d","size":555,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.200836Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c6b1c562e4ee5a607a8e1e2681bd551","sha1":"d3ca3984f2c7c97b86399505fb88c893f8284624","sha256":"a6917b848701e452cac629885162383f9bc1822beed640f3e8df8a67d8ae10ce","sha512":"a14291ef8829b5ffd84e5cb5c37b023298b6a5f9648dcb3c840ae1a7729e4d2c5318b5ddf659f6459e3a071a3988baf3e26ae88c6b77e9edcb145e3189fc9dd8","ssdeep":"","tlshash":"71c0805579d1c031017355c044676b9e304ae755d0065c464b50c35c5dd8710656765e","size":173,"data":"","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-08-05T13:56:17.493728Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/scripts/main.js","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d71486e8710f1a9de5708616b32912f","sha1":"ff93788cd972c60cce28efbfb120abf7c3eb728a","sha256":"ee3248227f6d258dfc10f1f19469661734c195ca5f30b488320c9d1da9e778ac","sha512":"5b8e54e2f7a1047468fe6ecdeb191b888326eb476b90063c2e77abbe05e1e7baf9850060c92229b44aee062a5d6114e7ea7c70c496ff3f0840eff311280034b6","ssdeep":"49152:phin1oaM0SBG+op/BJbjoSw7kv9Ta6PTSRAcG+OkExajhqEipshlhBT6SRduMViZ:pl7WZo5l5Me2","tlshash":"1c86c449b6e32d61466370798baf50c5b23550076408dd24be4cb3d46faca2c92bffb9","size":8052258,"data":"","first_seen":"2026-03-20T07:22:59.04185Z","last_seen":"2026-04-04T19:51:43.632522Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e9f349d72121feee2f31bcc441e99a7c","sha1":"752f8035679da86ae2ccd83f27be3ab08680d903","sha256":"8efe60dd49be62da3da0cf883f7015a0f913cc36e5a708f0a336add0199cdbca","sha512":"dc37e7be9ef8e935ac9f4f401662706b13b3beaa47117754a50b84109702cb80cf1a50a8cf41f14c514055175c6e896f8a2fd2699a76d0cffa061269365d3123","ssdeep":"","tlshash":"fdc02b83f4f3405000334bd1c85fc60870896209c0089d908ed4c1281dac7253209e1d","size":136,"data":"","first_seen":"2023-05-17T00:10:24Z","last_seen":"2026-08-17T20:04:43.210861Z","times_seen":488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cc949daa8d0254af0e9291f02f24be29","sha1":"0b114d3ba313ba0ab5c70f4224c47d23f27950bb","sha256":"409ba190de90769aef2656caa68d62d09a6f5ccf40361b009a01387fb4b238a7","sha512":"1dfabde6f75a42315e838377dbd916ca373985e57d262ab63782032f17337c218d1af5bb83b617b946c353afdb266f21a1416a8023376cf9356e9b44a3e9d995","ssdeep":"","tlshash":"72c0224a30cd742cb30311c0b8ef4850a8ea683080cccc85eec9c2a029b2028e12ef2c","size":193,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-06-04T23:15:29.165076Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b4371ee7405eed2d4493681dddf438e5","sha1":"72948ff78dc5aed9774f48404ff7e09588cb1cc6","sha256":"8ed323fd8d4ad7e5711a05377468c609d57ac57f22aa2d125c8daf8d02c9dbf6","sha512":"50e8add5d609d0c70e88e5fbc1a3960334e55b01caefcafe155ba4200e8d7da400886534d65d41623e9b55b9a65e1c64aa257843a01125132146c7f4dc49a73e","ssdeep":"","tlshash":"3bd0228a38c97828a30351c0f4ef1c44a8da683080cdcc05eec9c0a11ab3018a52df0c","size":197,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.50034Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2aa8cea72d09e97ecfc695ca916a8ead","sha1":"34c3794b321a45db8321a661fae205d1bfd027ed","sha256":"48aa94629481d67f22a23f24368d44d24d6ecf5f3aaff0f921e1aaa783247c35","sha512":"7b1314fcc07955678562bf33ebebe4cb5229378e82b5f1417c198c1e8c5a62d94af8f11c4715caf1bb478de49382418b2989763219f7054e3e4ec0fabe3da8ee","ssdeep":"","tlshash":"91f0f6951afd92121b7f10b9f8dbd7925468da236bc45ad4c991ce2e40b2006e42a60d","size":533,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.512979Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/#/host","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"31f89bc42d40642795cadcb02df056dc","sha1":"3c558776be1df4f6d4996b61e931357910e4abd5","sha256":"d2270579e123989e668601dcb3ccef0863a7bc475e042716a007befb461f2d25","sha512":"7465b0e3cd1948a307ecb0f859ab5d1e99124a4ea7bab02c985fc0ab40dc12ba81bab91e4af085c4e7cfe8ced77d4ee5a693685f70b8778b9f099bb5cbda92f8","ssdeep":"","tlshash":"14f0c0911aec91021a7f10b9fcdfd7c25498d9325bc456d4c9e0ce2f40b2006f83a71e","size":533,"data":"","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.491519Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/i18n/en_US/task.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:42.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/i18n/en_US/task.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQl4yRCadT83KgJnnniJeg7VbV7GAcV1zTt0nYQWaycAlTw2NLm4srnoMQAIxnN2eEYsZf76sO1vieb3z49ObqXLGm6e14p2a9QG0qROfxz3xatad7h%2B5HS%2B91MY5vTlroy8Ue1Ihuw%3D\"}]}\r\ncf-ray: 9e705ac0ac470daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1649,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"37d271a5d14f5b309f7db1938246ac17","sha1":"163ef23791999103eb241d36cf6472052f6b6759","sha256":"bccace78595bcca0ef04b91a5dc42240c4e0b6b4fab81269565b5c87da999f99","sha512":"6680e2815aacdcd8505e4684eee2574723511579dcb7612dcb91d84d7aa17ba00c7153fe9c87d11670b781c41cb5f601ef6853c5fa3c3830e8dd31350a5a015f","ssdeep":"","tlshash":"3c312729d2b08de7086b709684bf0193b02091570f083d797a9d455c8f1ea6f68bf3da","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-06-04T23:15:29.150713Z","times_seen":65,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/views/landing.html","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/views/landing.html HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gLUpO8u4MLmYMzV6SDSQZ4ceQ7i%2FPOhInE%2Bdwn4td9kjPYwedtgZ%2F0GWQarQ3rcj5%2BOcGey9B0LVZTU1bB%2Br64TYS2RpEHh%2BG%2Bq5hzBVJ%2BrlfxEtBCLPzT5ObbVAZb6GcRnvkB2C2OQ%3D\"}]}\r\ncf-ray: 9e705ac4bcfe0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13093,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"86009a8370e768c275acbf99275620f4","sha1":"457b5748a861e9af47697e030895153c3530ba87","sha256":"758b9ad2358dc9ea8905f5e38e0bb33faf887f60ecb4e982bbd6b2bddee8ea97","sha512":"9f695861856fb2477bd8989ce3ceaad494dcfc48dd1f438dec640d6049ad36a8aa726e3e35f076a0ff60ba3f078a35c9ee8916d8647780abe3092a138853936c","ssdeep":"96:fdoyc6D1Blm24MQk9l5HY5H/TiVMHWPiv0WclhmcwxesxAjPIy1SPXo2:fdR9lG52P1thladKP0PX5","tlshash":"c242435124f714f261eba0d356f38e0b6eb2c94bc90b220472bc4e942fd2da2e5cb559","first_seen":"2024-02-22T10:52:00Z","last_seen":"2026-06-04T23:15:29.146439Z","times_seen":63,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/views/menu.html","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/views/menu.html HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=19pX6noP668XTWF3yMd45n2DohPh6ef%2Bszr2SnZApNZmDgr4XUOl0jVL3E1SwOnZ0TZ3bxUbjJZmpIDssySxcan%2F6UtvectS2UcZmtENDcnfm2PU0u41SBzuT56fGmSzbU5jmKPSgr4%3D\"}]}\r\ncf-ray: 9e705ac4bcff0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10555,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text","md5":"cc0c25ae492bc2446ee32a0000b981a9","sha1":"22035c2d2e291af45a1a8bc98195560edd5b3594","sha256":"132031f136707a2bb64ee9d1ebf565d3ed2559c2d892f97204a6ca7679f60d45","sha512":"bcbccfe215a8c9ffef824c2204068d42595666627d5fcddcdfbbf3910d9508281b55b0930f16b3bcc02d21a2167ad0daf5dde5d3856347e090a1137996e28997","ssdeep":"96:OnAPkAN6deWmQAede3D3AG7/dK8Q+ABs77k/Z5QaXWAeVa9vdyO:OQNce5zwesGmBJec","tlshash":"6122be1130f3a996586970d7d7f58a25fcf24887c905242130eeaa987ff9c15e8cf1ad","first_seen":"2024-02-22T10:52:00Z","last_seen":"2026-06-04T23:15:29.144331Z","times_seen":63,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/views/recent-tasks.html","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/views/recent-tasks.html HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNiS8HBc3QnoqB6q2wygQODAip7pxumOGoUKfNR0me53PmRH800HNTLJxtjjcZmCbpA5tpGyb9jxdTEJsEfv3Xqry3sBujnkz9119%2B6vObZTbEEvjUj9WiMfd46awdDldsVVNI1wQAs%3D\"}]}\r\ncf-ray: 9e705ac4cd010daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text","md5":"18a0b8ff89d97714c54fc45af5a202ca","sha1":"21365bc1e12827afa3fe4deb8955afa567420611","sha256":"5b0e0c8c0744c434d32b26daf7eca3ab7a89898a4b899a38fdcf7026fa06c8a9","sha512":"40f1b3c701e662330fe58b986b711916cbada90e136b59be51bcde328ba4837546a0b8ca73dc5dfac8774ed8da57ff8d0aa8c25e714a5dd7b65ec35308c6be9c","ssdeep":"","tlshash":"f2900224e93864703a53182236f4c16d1576d69a85015417416010b2428429e5d7901d","first_seen":"2024-02-22T10:52:00Z","last_seen":"2026-07-06T18:31:15.437973Z","times_seen":99,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T12:35:37.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\ndate: Sat, 04 Apr 2026 12:35:37 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: upgrade-insecure-requests\r\nlocation: /ui/\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FRh9f0USbXuMkgtH7JDf2rHJTziq54Yo8nrhQo3APZZWxtzbj7tgpP4rw9NC2I4w0whjwbur87zs%2FdRnizhAzlSRXCK7tCUlV3ZkHJGdo1b8zdvpWOxgXptubUmXVofO%2Fixf5m7asQE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e705a9d2d1156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4116,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":41,"dns":21,"connect":1,"send":0,"wait":329,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/styles/main.css","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/styles/main.css HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=2,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpmz8zL85Sm2%2F%2FKGzwbvzaMXxuQlJiYp1U3I6TURnBMa0feCC7wrlXh6fJrMiUt9f6HmXPoEnh5R9Za3kJJ%2FH5Zi7mQii78NM0FppQiozxHtUefAq3HFIEivEfZ6ZlHjOmkJ4mDXqtA%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa248660daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8f04ca575c75612aa5807d25fd733b08","sha1":"27fb208284d09d0cb314b31c6bf3483a295b0cc2","sha256":"614f92b497338510c72edd9c16c4f415b6fb1458896f7eeb98284ca756fab9fb","sha512":"200e9ced599abfb52fbdbc430170dfedf70a0b109f2cd9a80662a987e09e043ae40f752920d64c2b9eed677435e7ee1e5cb8bc1a5188283521c5ac014ef3d498","ssdeep":"6144:8W1T8R4ZnoWb+B5iruEsNC9Ft2tJl2q4/AAnW5/e:RnoWi7iruEsNC9Ftbq4/AAnu/e","tlshash":"9d949630944552753727483ba7e16640e764a401fef16fbdecffa09c17bd2e25223a2a","first_seen":"2024-05-16T11:00:45Z","last_seen":"2026-05-10T18:34:56.302987Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":770,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/i18n-js/app/assets/javascripts/i18n.js","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/i18n-js/app/assets/javascripts/i18n.js HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZTOVL%2F22e1wO4be8JiiQM%2Bazwe6%2FEK%2BUSI4a478u0x2x8Sp99hibB87xYY5Zk6kcYjmvUsIIKJTZLwZ4WuOYH5gsY%2F6hKkXPgZENkvbyvNjyAfR0FJKERoLuvsMFrxMiqn72IpnEJ0%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa248690daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8ec68a327e052c943f35b2bff5f8b34a","sha1":"cc274c529f47a9ce7c2a72dee8b7d2f0d5b69612","sha256":"dbcb4c7e9359ecdb256795b7e1216e23588190db7e35e7d8713689677bf77b0e","sha512":"d5a46b30a4ec02971e70b32c2cd25f6785e535f6f3b740675320261696421fccab3b280151d8e069e0b8acb4b4676b9e2ac400ce3982718c2350532e5625ef3a","ssdeep":"768:NhRYw9cfig8CmD/n6CtpECJ4EtK0SHC/1W2DSqBAvz2:FY0cfigCt/J4ev/1WOBI2","tlshash":"bde2414968e35212895331ea1bdf20847a38c117622eed59b99e83c51f44d3c93effe9","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-07-06T18:31:15.438507Z","times_seen":86,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/i18n/en_US/event.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:42.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/i18n/en_US/event.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKpc5%2BFkScr745Lk6YkLIxQIA1jUThmZEQjy%2FESBC4KFiv8%2B8Df3%2F4TLlWNpAC0ZBKSvO6TFr%2FqGngyWCF3ddlHN6pXCcgaOXZKlYII%2ByKmLciPFwhB%2BfAz%2FtHNeidE%2Fmh0Gfo8f4K8%3D\"}]}\r\ncf-ray: 9e705ac09c440daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"bdb1baac57b80ff93d9500518f7d1320","sha1":"031acae0c474351dadb0b984eb1b18a7303bae20","sha256":"21ecabea9df35d8e226d70867a41c108512814bc1ac0b66002154d32948644b4","sha512":"3b2ceb2914462006fbe1795958b0c8fbb64a3ec6c19df397eebc33e7124bb9b124a38d4146ecf9e90dbb1a39c626854d0b327f1fcc6ca3ed14b11ab1f29d0d99","ssdeep":"","tlshash":"d9c01214c4d04cb3010e9405a4ad0204e12492731cc87c60bf5c5eaccf0f90f8cf86dd","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-07-06T18:31:15.396625Z","times_seen":102,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/welcome.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:44.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/welcome.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 04 Apr 2026 12:35:44 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rL3enMHHOh%2BJ5LubEbZOFIBuZPoiW%2Fn7GTbFbafs1bUUOzSPFDiAzFeqlPUgR%2F1E6TpuyIYQL6xN%2FRY8Aof3RO3R5wz5PwPbuplfvNpAmX6iiIdo2LOxIuQns0zi%2Bc2XmaoMjFRzHz4%3D\"}]}\r\ncf-ray: 9e705ac85dd40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/i18n/en_US/messages.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:42.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/i18n/en_US/messages.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fqOE1wGjr6UIC8qKQtF%2FsXR4tUfzPocGtZbFLQEkn7LReXFStdYfBX6gzl4xesHqZghohesPSy8GDh2PKsKaqjvEhsOwkJSyJD4AAyLVKZlbAKa9%2BsxEyWb5WSLn6HPUVrPm3r8kvk%3D\"}]}\r\ncf-ray: 9e705ac07c3e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19168,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"2eb472dbdb9253ff0afdc9f009d1ce2d","sha1":"4118fee7b0c1f0a49539b8cc18a099b123195104","sha256":"e953ce1cda7911cf2df7820672149ea4125d9603ca06e9fb2b0515fc9b789dcb","sha512":"543f2df4e7a969c9584d8b0961bfb8971341af735544949dd4188e69176f2bc95be19bf484bb67a343aa4af7563dc1571e564d90730a4a300c5c4e1a7a91f89a","ssdeep":"192:9264q8fsNaN3bUAY/LmNbddg24DcCDMhK8wx9I8xcrZzkpmAROzSz:fNaNPYTzNQCNnI824pmeR","tlshash":"ec82222ae9744c7305da61a128ba56837520819b0f543c3d7b5cd64c0f8f93f56be2ee","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-06-04T23:15:29.154888Z","times_seen":60,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/i18n/en_US/resourcepool.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:42.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/i18n/en_US/resourcepool.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 30\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEgceZH687yMOB0Xx%2Bqp0yu%2BNQftIrar75aeRuyfeZU0Y%2FHWfiYN9jFklKpdljY4kSaFq4aP6smvgYBfEshsLWS2WNRf%2FFNPdz6%2FKB%2BWuLJtlLPibNLyDNgmmd2WaFDN6Hr0o1W%2FF%2Fk%3D\"}]}\r\ncf-ray: 9e705ac0ac4b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"f5d3be304756efb94faa7a3df7b23382","sha1":"3b9ec2e3b5979dfbcb84ad911a6cba610aba5eec","sha256":"daed9ca843da5b62bf79d7db472d2b7ce6b7c22fb425de98c0eb14c74a7f2984","sha512":"8c8f02105217f2b6813c17025a33aff6e4d80f25e73c8c657b5c5e26d89547b39e8e476bf0da837073269be8a8fd790ad59e704e3e69a1060a1a22cfd2111772","ssdeep":"","tlshash":"3c80002b08a22a32c22a008a802c8200a0808020a0288cbcc8008000ecaabb00888a80","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.405606Z","times_seen":101,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/codemirror/theme/midnight.css","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/codemirror/theme/midnight.css HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=2,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SaGeDP7tBvVir9ASahWCOEc0liGIc1EWOqIhuZ%2BLZAAoptL81YucplhLE4q9yXUrzgUGVgSNL5zTC5fTepLB2b3qteEWcCBTJJUc8CL%2BP82nyeyjIgOn8OeoV%2FUpFeyTh9OE2pmfSyA%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa238620daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2138,"size_decoded":0,"mime_type":"text/css","magic":"exported SGML document, ASCII text","md5":"950e76dca6461ee1a2eac39f2d886613","sha1":"6c8a1356b0e01a7794ef535dfa0643c6e4cd92a6","sha256":"f718ea003eaf341524cfdd24975e297e9742eaae8964a91531560de8a38c8fb6","sha512":"d3c95bec56c7e443af5d05e3c3d09e4f8285a18dc3b7589c56090c3a3ceb52a348947b39b4eeb439c6b06a130cf5f318d55cec44af74c95948972313a59e6baa","ssdeep":"","tlshash":"cd412bd3fbce72ae20a39237155789185b185ad4500367ad7e3ed090839fc5c7c25dba","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-06-04T23:15:29.13784Z","times_seen":70,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/nvd3/build/nv.d3.min.css","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/nvd3/build/nv.d3.min.css HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=2,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbwkvTPW3f3fVym1xLT01%2FcQyJ%2BkL8G1Y8Q%2BrfyrSGBQplFnQ6Kol1wH50gx1Y3WaRr0yjZCAuKOMppZp7J8QLBF%2Fi4pZUBL%2BtTn5qk54iyXWv0Tf1mlTb4gu5Rh7m259xWaUd6tYKs%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa238630daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8419,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8377)","md5":"7433cac9cfd7267ca3fb2a42d01052ea","sha1":"13e4f083e007bd1fddb5f03147459df8b65833e0","sha256":"6e6af01a31cea03edaccff99a4670e3a2b5435418d463c338cad5b65e4cae9f2","sha512":"e4792d1f7a7ea8134bcf1a4e2e7a48087daec00ad813f162edf74a09079ed79a620ea3775f74358aaa3c0f8de873c0c98183f8c7103bb1d1233427e678b2d87a","ssdeep":"96:yC4Jy5vxUTnwFwctRIiBcND+XaRNI7lf96TwoAuNbJpgm+GMyG:94Jy55UTnYtRIiBU4aox1gPHgm+pyG","tlshash":"8b021c2f07c2e86358a28d4d7be7fd03b4bf5892bf2129f3609425a867c915709722d8","first_seen":"2023-08-11T11:54:53Z","last_seen":"2026-07-06T18:31:15.427138Z","times_seen":130,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/%7B%7B%20logoImage.src%7D%7D","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/%7B%7B%20logoImage.src%7D%7D HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/styles/fonts/Metropolis-SemiBold.woff2","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/styles/fonts/Metropolis-SemiBold.woff2 HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/styles/main.css\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:44 GMT\r\npriority: u=4,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: application/octet-stream\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 17052\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Apr 2026 12:35:44 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzpeSTXPNzTMmQnNFVdu2NAi32jwfGCwA%2Bm1JvGfZ8M5jtM9pRVrkblskyZN6ojTEYQnS8sBBct%2BlvUFpPIy6rxRvy0hrkymB1tcrTWy2p1wUBcjPY%2FolmnV4iZGB3RV9ur77MZCXjE%3D\"}]}\r\ncf-ray: 9e705ac76da80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17052,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 17052, version 1.0","md5":"e863e76e8ae91a72dfdc4a33be42da49","sha1":"45cd0e1d507679af552d4fa8c9e03d5045367905","sha256":"4646f1d74f676eaaa7bbcaa5c125a43f145db2d23ea038cdf29188afe032ed71","sha512":"b9caac85617450e2da2dd116df2829ec9c50f4d23061e7ad5b0a3af1aaa1c7547f6a05cbba8529ba6d6b7486811ff5ca46712fa99b67f8b0b2bd3ef7cb120750","ssdeep":"384:hTH/TIC35NarPGD16cXqdTxA6aOBrnxaNW9oR7JdAB:RfTrpoDGDiLa4NcVdAB","tlshash":"2372d1d87e8490cb88172243ebb907fa511a32587eab5e7d42dbfe5043324d5f486a61","first_seen":"2023-05-22T17:58:00Z","last_seen":"2026-06-04T23:15:29.156391Z","times_seen":70,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/welcome.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:44.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/welcome.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 04 Apr 2026 12:35:44 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6pMvShkZqkz18GBLt8T%2FpIz4a9tqzqe6xvTWn1DeX2CPIXGJX5R%2FXlX3jJ4mmOnUVds%2Bzqhou2OeJe%2Bvms1smPU7x%2B%2B1ZRbFmUUUR69EWy%2Brr6ttP59C4OoFnKv1cwGaJHEZnD%2Fj4o%3D\"}]}\r\ncf-ray: 9e705acc7e5d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T12:35:37.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/ HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:37 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oKcpOTZZQiUfKHbPKCtdg1MOIWjqfcT%2BzXW1SEGkl5a0IGOABHYJRYMgwOrrzu9qxfCbFBsmp0vpX8lQqRO%2BXT5MwoOEXqKsvLNMj%2Bfgachejl7eeFXx3fGDaYAB0HLkPJCfhEQKhs%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e705a9f3ef956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"NVD3","description":"NVD3 is a JavaScript visualisation library that is a free open-source tool.","website":"https://nvd3.org","common_platform_enumeration":"","icon":"NVD3.png","categories":["JavaScript graphics"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"D3","description":"D3.js is a JavaScript library for producing dynamic, interactive data visualisations in web browsers.","website":"https://d3js.org","common_platform_enumeration":"cpe:2.3:a:d3.js_project:d3.js:*:*:*:*:*:*:*:*","icon":"D3.png","categories":["JavaScript graphics"]},{"name":"AngularJS","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","website":"https://angularjs.org","common_platform_enumeration":"cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*","icon":"AngularJS.svg","categories":["JavaScript frameworks"]}],"data":{"size":4116,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"5f26dd38bca59919b41795b0d4dc09bd","sha1":"b0af8eb131dc5498edd6ae2fa53a333de2e59222","sha256":"aec85721a532727cd77b32454add97df884d757ebbe8503195ecd35efc86cb27","sha512":"57c10ce87132ed09056ae84d2fc2c853ed853865423ed5fe449a2cdf43b6fdaf82929ce172848864d705a2e4229f145d63daae041672ad50188ac239a999c36d","ssdeep":"96:R1HQHvVHaEgbTmNdxHhHRVtB/gm8BpXaHvu:RNSN6Z3mJx4rpqHvu","tlshash":"e4810e5a0da03019e180729aa6acb9569d4560cfb6e05b57b4cd30fd0f9fbd841e7e28","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-06-04T23:15:29.140851Z","times_seen":71,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/styles/vendor.css","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/styles/vendor.css HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=2,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 0\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BrPh8Lu3SCXE0u%2BG8axOeJlb3KtrCOsdATLZN6A6zTpqL71NJpL4Do6uyVZdCx8tO6Qm%2F0CQNH34IZIfLkX9vfG0mE8WdBIua4DGxq97kHBDa8bBdpjbpoV4iEwiQ%2FE6z2j8meu9rj0%3D\"}]}\r\ncf-ray: 9e705aa248670daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/jxon/jxon.min.js","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/jxon/jxon.min.js HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UQGpbfzF62T2nd5CaJRmQN2avO0eJsS5Q1MbCtyKBPxLSh7%2B%2Bw6biMQbXbV2XpGASs7MJ8R4gHHKh4sUB%2Fn4n2OVfmqsvkXHG90qk6L6mKq3ER8%2BdjWDDIM7%2B8X2hDP3kq8VBsTWC%2F4%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa248680daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2036)","md5":"a5f3bf7a3c864c197a2a17828894b310","sha1":"fb9dd4eacf96cf0fcf7008a551ea77d2085e399b","sha256":"a7097fc43cb7007dd8a9594e7c4d09c76ae2dd8dc587392a1699e86b4141f95b","sha512":"e0b02a554da9d5114b662552613bd419d9beb1f71bddffd90a2f50a23bb24d9cb00c7155b037892cec81e8acf61b68ef02dcae2f915b85aa9e21c66b7539abb8","ssdeep":"96:BJQRCCjTOGSvfVV2jK0KTlpWiIVuhZgcQlmxzCZHVZz+I5keS6i9tG3I:BuhjTo1V2jK0KTlEiIa3QlOGHVE8kyiR","tlshash":"fcb18593b5ad32930be720e0485f1113f176d245b4dc9898e229d4d97c71e47067bf6a","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.444402Z","times_seen":114,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/views/login.html","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/views/login.html HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzk7vswHwf4VttFXromXJkcO9UnaiQCTImLHPIjOtzEbmV1G%2FaNhGks0AZb%2FtzifPwrbixPSX1XeWnaUIAR0TimLikDjtE8sgH5fyxuI1vSR%2Fomc1amKD%2FRZ7BG%2Fsm5Dt7DhQQPgIZw%3D\"}]}\r\ncf-ray: 9e705ac5cd1d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6029,"size_decoded":0,"mime_type":"text/html","magic":"exported SGML document, ASCII text","md5":"d08513d5869918c09e9230b706920f5f","sha1":"784d9c452314f54330b53af8e1195ef17a40d577","sha256":"4eaab4f7bcba8fe1e09085e7f8e4047805e1bc2197847b0228c9179cb7f3de78","sha512":"bd2ae9127c190ef45a3f5119493e8772fc7e4b89b9fae8735bda5b1da7bb9f5e876241c63598984afd5b4848ce70e8340fbad77b9b7399ea5873f33e8b86d9c6","ssdeep":"48:cTED6F+ZgpcoV2yzm+KFXHeiXTVP0FQ1A4MtLKwicYHx8F4zeouLl46H5XKRZt:MowRfV2eKFXHeiX50fyueb646H5X6t","tlshash":"0ec1ff3844fe0cb3914e909275e34a1f7da9cc43865b9b39f6bc16802fc3d96e947668","first_seen":"2024-02-22T10:52:00Z","last_seen":"2026-06-04T23:15:29.153276Z","times_seen":59,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/welcome.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:44.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/welcome.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 04 Apr 2026 12:35:44 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zym5drYFMRPxgjE%2FGpoLc7P6ESFQiXLkNn4l6X%2FW%2FpIZbRyFOh%2F74JZuL%2BrnJapNhcGxtY1d81TBnet%2FZVIdiWoDWCJNPE%2F%2F6sVpqfAu6ZHTdI%2BmpIirTbdQBomfl%2FTQLVmNF4emSgw%3D\"}]}\r\ncf-ray: 9e705aca1e0b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/welcome.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:45.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/welcome.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 04 Apr 2026 12:35:45 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nV21IdiPBPdCzC1eq8%2FxfZ%2FqMIO0Emp5FU%2B2%2Bymy7%2Fiu1G9GYrA6rMyAzVsYnmOrwHLWq8qbFmv%2BukA%2FuuZybn88FExvZXFRTR%2BID8fncD%2F0Dh63eelmc7eyhBzuVHnARaMDExbev4o%3D\"}]}\r\ncf-ray: 9e705acf7eca0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/i18n/en_US/host.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:42.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/i18n/en_US/host.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sT4N2o5meuPyIq7wwrn7ixfhTZoVLAjb%2FhPBfa7Sq6StmQALG3OIQLo7WICere938sCXFeFbsR6CGppJ9MLdt%2F%2F0Kyscn2SWS9KG0k2jRgiKWKACsylxUZzyJ%2FY6mExwwuAJgY1vuw%3D\"}]}\r\ncf-ray: 9e705ac08c410daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79198,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"3fde29bac6855776d2505be3d52a9004","sha1":"3162b7b6f84d8c34dcd560a3b2f8f89a9aaddef0","sha256":"c34f12a9c5e320becfb7a3df6b5473673cbf1b23a860c6977b8abb0b219a66c7","sha512":"f38c79eb0c450ea3ed02169fef55cbfdc189ee4a55b28dfa46b857e1103b31bad285087a9df26eb9dc7a73758b92743d27728f0e3af367498091d20fd4e6f070","ssdeep":"384:4ZqTb02Ma+BBjYlF/H+zTVtk9ungD81++htyMMduNouKx3/GOxSORLOjt3iXnSpt:IOb02OB5YzHWngDmyXduNiPLu3YS84+u","tlshash":"e0730e29da708db305cb62e6187a1643b521816b0e643c3c7b9c914c1f8e9bf55fb39e","first_seen":"2023-05-22T17:58:00Z","last_seen":"2026-06-04T23:15:29.160078Z","times_seen":70,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/i18n/en_US/network.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:42.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/i18n/en_US/network.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phKUtAo3HoiQf%2BX1y7xB6U3yGKvKahkskYOokT%2F%2FkfNb0qK6ORfbfRJb7tNj3%2BJ%2BMix%2FF%2F3J%2B57DO8zl7Q8zjEtcueUjg0rCbGL%2Bvqdq0iSmqPDH%2Fmc0Ss0L5CWexmZKY15GZx663f8%3D\"}]}\r\ncf-ray: 9e705ac0ac460daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49300,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"5f02fff158ae4b397058e7c9e2f2d429","sha1":"772b82838937aea7da5dfeef7ea577b64d43d74e","sha256":"4306804d1df445efbd99fb09927532f648d0d22ee1e02fd9405b45057f08a6c3","sha512":"b58d3266ae6673be5efa55acc8fda915d8ab7e0838d960e510ff0e7dfddbdc6fdd9ee7a3c10a9bad376d15eab127691d198a7f7f659aacfa153379cf6ae87fd6","ssdeep":"384:0FkFQGL3jOWiXsJ32iPFib+XyCAg15m+TIRV0rMJE09mTE6uJlGafZIDCGOrSFnZ:Gu2IuKA4QhJjDGvn+IO7Y","tlshash":"6c23693dd9b04de300ca70a558ba5243f620829b4e583c3cba4d564c4f5e86f59ba7ee","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-06-04T23:15:29.149785Z","times_seen":63,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/views/context-menu.html","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/views/context-menu.html HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kGIcL%2BADGhdJF20nJirOkXsjmRYi2jp3u5f44xmjq6PNZxsONdXlo5r69CALEA7uJ94zkJvd8w2diWRXOAK%2BgUAuTvAzt6q1a98ozF05VYRrh7qNOGJoI%2BoCEbKSN3LwN1CFtzmv3TA%3D\"}]}\r\ncf-ray: 9e705ac4cd000daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6609,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text","md5":"6f429df5a961593abe6ed7e3dd6249dd","sha1":"47102fe473f34cd40fbfe0b7ee7c535557552033","sha256":"2745010cbf0e0824985f8a487312231d44f9ff4beabfe90563559ab3d78d6e83","sha512":"0f6f731242b2bdf3b02c103ce442affadda130243473d84a4b2f17e4063b411cb7e18d8e886a43529e946a49153c874f4e1044810202ef150593145c200eedef","ssdeep":"96:xuB4XPalBg4ET4EKBEVbmVv8BBvkm9zIm9zs:wBUalBONKBGs8BBvBzlzs","tlshash":"5cd1ab1361e7b9d4011da4cb9ef4ea067db114ab99042212396e08697ffec64b2df3dc","first_seen":"2024-02-22T10:52:00Z","last_seen":"2026-06-04T23:15:29.155484Z","times_seen":59,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/welcome.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/welcome.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yFQpWtd3Ge9XY9cRbc8aj1affODwbLUL%2B1scS8UAjGh9%2BNpK%2FoS%2BByyC7XJOazlQyMoS0tfOLYUT4ehScI%2BfjcTN0wzvOr7zEJ8K9FXxYH27fKwYCkT2tQ1bNy%2BzDG9juYWvrtRBx4%3D\"}]}\r\ncf-ray: 9e705ac73d950daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/welcome.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:45.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/welcome.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 04 Apr 2026 12:35:45 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BaQ7ekPWG0gPfphRm%2BOJjxLaRZjK57Amyyh6kyYRJmw0uNVrS1ZDyhJw8KusPRWmMEW8EFT3WXWaci6Fhajna9lblzvAtoHDkCBsMMOuWqQDbLgEj5hhz8oxF8ixvcpdQGBN%2FUfhs8%3D\"}]}\r\ncf-ray: 9e705ad32f7d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/i18n/en_US/storage.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:42.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/i18n/en_US/storage.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGQJD5Yp2GtLp1HF1eCSIkoheE%2BbNmCW0zJmgxVXgx21yOoj8g2eQ0EMzVeFAqUQi%2F4kf%2F8GoyXFHb%2BHYvh%2FMuHO%2Bt05ik5LZv3koF2jTYYDFE86R1g6RUrkJDYr7Te40GR8Q1KG0zI%3D\"}]}\r\ncf-ray: 9e705ac09c450daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43228,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"8c099854978fde82b346bc6e2fe491f4","sha1":"7c5e5f805e0458c494fd5fe3f6f87f936b76b26e","sha256":"b63f2468440a4fcf8509ddba73cd9701c8e9fce0a71aaa0bac03fb9298790882","sha512":"facebac64fd75c1775feba021d0096b3dde2d1acc20df1503720f4fcbc130e6f16495c6b1aada441adc16936a11a084eaa7077a427ad89aea9ee041349beebc4","ssdeep":"384:64ftwIcGCzJqi8kCdDH1qqY1v5pVVGgeol4Eofthm0Qia:9eIcGCuVqoRtrVm","tlshash":"ba13ed29e6710cb309cf71a62c7a1243f521815b1e553c2cba8c529c4f4ea3f56bb79e","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-06-04T23:15:29.152156Z","times_seen":63,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/vui-bootstrap/css/vui-bootstrap.min.css","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/vui-bootstrap/css/vui-bootstrap.min.css HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=2,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HnjTVVFOaSIxQinihILVOcBWQyKc%2Biqn2hbT2bY8g%2Bk34D6LvxRBFAaxJcgdYQXW7d4JvTkszxotn5%2BUvKCH5KeuihmqLBCvHpSPM248QMpgTpAimT7H5TijTViGRHXjjmMK3%2FgqKlI%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa2385f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":631055,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a349d03b3d95ac9f63789c4031c32fcf","sha1":"a8e206597a7d3a555826216870372c79d21d63ee","sha256":"876e5a02abbec363a24b6efb5577b3fb04154a3728e29fc8cac0b6503899a9c1","sha512":"4ac388d1b0ef2ec1e836ad56f3ead16c9d7d8de3edd2b430722ca712886f37be3ef8ae848d61119a8645d4311414436aba40e58b8da7d9d51f8409ca43e5166c","ssdeep":"3072:C6MwrnRVRzjWySqvl+838/5mb0AxsQHDxzbuo62RBt:5MwrnRVRzjWMlxNjxzbuoTRBt","tlshash":"72d4d87474453128391bc17de1f19caaa9eed060ed0699fbf03f60580fca1d8662bf66","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.432384Z","times_seen":116,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":836,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/eonasdan-bootstrap-datetimepicker/build/css/bootstrap-datetimepicker.min.css","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/eonasdan-bootstrap-datetimepicker/build/css/bootstrap-datetimepicker.min.css HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=2,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2F5ikfEqIfHvAgGaz%2FAs9cTkWFS3YyxSsneftrHdEJJMcekRiGP4IL7sV2l7726I%2BM8UAc6vnn4oyzaZEDrXTkrI%2FGHRcN3TuvuU8NJPvz8sQPbc%2BgGFxTF10tdUcOXKB4biOQZqRsc%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa248640daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7785,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7669)","md5":"a0143d275dd14b28dbe0b9faace1b5ff","sha1":"510d2af5aad29f9c90bb86518a3bace9d5cc276b","sha256":"7ef24a55b27cf0871a0a10fe5cb6d1ed6608b1a5d7ede50edea06e434565027f","sha512":"42f353053fe06a56cc6b55c8c03de669afe8d5e0ffc0243e8c3ef3169c69aeb7c78e3cbb6619124db5c6d021d5ba41952fc2f984bc7249d3f77b15f9976f2ea6","ssdeep":"48:Me/KUBvvDak/1kJkzlk9k4U5kgkhxckhKzkeKkhRGgYk7k+7QYwIgOtfG5UjYi:hCUdrV/Kmz6CBW7h90YUhRGgDQ3ctUdi","tlshash":"8ff19a2672a3299de43b822f60157ed51f8ae05ee752087c6ec733484f5d9cb38be514","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-07-06T18:31:15.450548Z","times_seen":93,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/es6-shim/es6-shim.min.js","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/es6-shim/es6-shim.min.js HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2BuogAY6gWPV9J8GSVT4xhUayKCllDgEeWr%2FpXTdzcuVn4yTYk0NxnT0QUaJcGelOP6kjwNj%2FI8uL2awopWSpf%2BmEEuRWoZqLSaCUQ9XXOpgvodBnHgi9nWrn1Lm%2FWSCwEPW6VZSe6U%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa2486a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56557,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32068)","md5":"f80f35060549e35d1aed7d0113f820e6","sha1":"e1af5353a8df0f581629bb10bb32f2c52b366afb","sha256":"6fee0cfe78705de2b6e3473b536d963ccbad9ff68c2b03561bf5363ba6906b88","sha512":"e69f90b440754494e29b0d9dea2b1e88241df9ec0125b54dccfd1613e8f0e860ef9f53baacb2a807e2f57abb54cc2b0ea47b4e9ce9cfc3301dd2f68e3063a5b4","ssdeep":"768:APnTpyncARLAIedD29GJlYo7f+qJk3TCCyaUhUvOU2YJ4l1LrMDb2XKzWD3XW:tcAl2t2QJmo7f+qJwTRylPMDbYDnW","tlshash":"ea43758876e1f0b147e761b0202f600bf23d5dba545ed190e255e8f17cba64a8737f2a","first_seen":"2023-05-22T17:57:58Z","last_seen":"2026-07-09T08:49:48.654218Z","times_seen":135,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/vui-bootstrap/css/images/kendoui.woff?v=1.1","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:39.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/vui-bootstrap/css/images/kendoui.woff?v=1.1 HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/bower_components/vui-bootstrap/css/vui-bootstrap.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:39 GMT\r\npriority: u=4,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: application/font-woff\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 67940\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Apr 2026 12:35:39 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6r6zJMdnu612q8SVEPaU9mZdRIl4DcLEAy1RBNi286aa1LwvSVtHkINHD6vhUBUyPKBGHReSwsLjqeZ3wF%2FmMc%2B4ooER7tmscHslQfXmGfeyFDqzOh3Q0FOh9cnYI5dH94dVMPIKRvQ%3D\"}]}\r\ncf-ray: 9e705aaa49580daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67940,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 67940, version 1.0","md5":"8a9b095af3a6c1bd30b41f3520fc2cfa","sha1":"329f8a082a6ce5574eb8d5a02d2ce69028396a68","sha256":"341e71a27cb09e36a75d34a68f11d8f691e0d74be4fe5d0fddb6e5224a1d8526","sha512":"98a604c59abfe7522513f49b519eef4880e6d50a731f476c1d3e142c9aed3f814fb31ecfa750d52f51b9bda599d3d66fd9679bbd6d815cdcb04b7ef0a4bf4029","ssdeep":"768:vJixUc8WxleoIJr97/99l99f/4Jf719tzcnv4RtS2Ray+rvayVrje+6dui9pk+3Z:yhxlcEPtzc+IfyGtNI9y+1+T8zn0GD","tlshash":"10633bfdbbba1793c8a5c1b65647f2842f641eb808412983cd53d94723a9a324dd0f6f","first_seen":"2023-05-22T17:58:00Z","last_seen":"2026-07-29T23:20:28.971068Z","times_seen":139,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":408,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/favicon.svg","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:39.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/favicon.svg HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:39 GMT\r\npriority: u=6,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fvv0KIEwU%2Fd9ZEqJmVVjByXhBRDsCIMklb%2BiDQsfgvatMdzRFZetQyG%2BNey1bistRcjqAgie3wEk5PX07NhUPMpFTxppk5ow9EaejsDG3rqRxD8D6JbNW%2F1YKsbFgoZQ9Mst31v%2Feos%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:39 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aabb9790daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1449,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f531df9cd76f8321aef12f4c2537a3f","sha1":"d4558daa50b99ff3fb42a09b2291466f5415fd72","sha256":"947f99610b07bbc13d159f563ba73d054e66c9c5b92656e54fa58ed114ea6206","sha512":"c3eabbd90422c01ebdcb79034eff52cbbcaf907ae5b5ab8d8894acc72230ecdbae1581d5ec0b8abf06837d964f933e3a120dcbba958fecd3c4cce7da11f40860","ssdeep":"","tlshash":"c4318bdcedbe052c248f133d9a15116f627e887371230964b84d5a6c9fcfa68c993ee1","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-06-04T23:15:29.14823Z","times_seen":70,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/apple-touch-icon.png","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:39.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/apple-touch-icon.png HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:39 GMT\r\npriority: u=6,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 6193\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Apr 2026 12:35:39 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqpBjF0AWh8Z3mm%2F3o7Tn%2FHQRGOL7iI9%2FFswsVGMfFSxW64pvpWbHc9VkO1bHBzZLl8KN3njWD8EYa1PaYup%2B%2BuNT1%2FlaVMO9Tt56B4rJMsORQqEQa4ZiFEAcId9RXcdCCOgDVg1xRk%3D\"}]}\r\ncf-ray: 9e705aabb9780daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGB, non-interlaced","md5":"898bc2cc4c003886a0c6d64cd5e41309","sha1":"48f875e6aedfa9feff36e5e927e1ade109b00960","sha256":"523ac94344ae78da83a32fa2ed1986405fcc490709b5036db103f9a3326a1637","sha512":"a2bdafce63080108abceadee112dacfd05453a7d388e8c1ed47a008bd6b191a7e35812759e98450ec71d1541337d355aee45e4244e800f16c49334d9ab655d2d","ssdeep":"96:Kk279gRksenl9LF4ZnRrrjHpHfDpe7sMT1gonWtwc8c/zrZtl7rbN/HUIq4AmvHf:KXaYF4ZnVnJHilTOuJ2/l3h/HZP5B","tlshash":"a3d18d8a68682db6829cea4039ed15272d5f4910ab95f27549eac2d3b4601aa0907cc3","first_seen":"2023-05-22T17:57:59Z","last_seen":"2026-07-06T18:31:15.401749Z","times_seen":119,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/views/host/summary.html","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/views/host/summary.html HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sv61sLUqkuCzcidhwXQtYMwUvSp8l6%2BqpctK2bJi%2FZe0hRv%2FnfBbBJfj1c0ns1T%2B0xqZtDttklcil5Dyb5qIZTSeij06mdjY7ilVpfLI2HafPL9A9lydC1mfsyZ5NVfx6o7TWu%2F2VjU%3D\"}]}\r\ncf-ray: 9e705ac4cd020daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9094,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text","md5":"87be517492dd2cbc2e8889bd5406816f","sha1":"e881365c7aaa7fcd2e3ca15861162e456f675904","sha256":"79a53b969a2b321549b4c47d632271cd07336492a57c8501b1214b51f843c96a","sha512":"0ad69475adf3fcef156d69ae320a7dd89c7d4177e666e44faabb7e62374a2a162c279d83057f82f1bfeefb15c8daa6be611b49d8d8e176cb4cf57df14f071fc1","ssdeep":"96:Kprp4XCrIkSHPb5nGAv55AXCXRS8vofGYg3S1E3As3PXa4h13zj2DN0MQupS:2FtrQEXChS8O230E35B3+DiMDpS","tlshash":"c1120254a1f0997365d780c24af30ec66e62e98bc827590a37be07d45fe6d6bea4301c","first_seen":"2024-02-22T10:52:00Z","last_seen":"2026-06-04T23:15:29.152718Z","times_seen":65,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/images/book.svg","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/images/book.svg HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/styles/main.css\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:44 GMT\r\npriority: u=4,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Za0TyFCvMxH4hcHa60tEvpV7v%2B77TnaxgIqoDrtUvK9WKs1oI%2BOSAx%2Bhm5%2F5t55iFOtHjnYLtuK7jlq1NEG6bolN%2BTV99gSBZHdyZfpRwp%2BNP%2BofZD0RnfE%2FP85gyWTZXOlvHpsUv9U%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:44 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705ac75d9d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ec33307d7818df92c51a44851efd9dd","sha1":"9764d6fcbfc1fef8ff16c4673b713cd504fbc3c4","sha256":"10af5b03762e56c68f14ebd0c8ae24ce6ac96493a85e49c2843ee9b24bcd1913","sha512":"027fb596682b879f3dead40fcab5ae9f6e255696ed0e7ae43906e5cb8e724d977a3d3e90a9a1618de41facba832962ec7262746171b465dc90723d368538a76c","ssdeep":"","tlshash":"b7e068a85b6c089c1807c6406b1ba7a3136fb079b22800e65cdd0a3121075e1e913c49","first_seen":"2024-02-22T10:52:00Z","last_seen":"2026-06-04T23:15:29.140202Z","times_seen":65,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/codemirror/lib/codemirror.css","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/codemirror/lib/codemirror.css HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=2,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IvbUQsdH8pxI6l%2B%2FJ7AlL1H5QczVhdsHKKTjH%2FHzsKclFEbomGYCwbtAQcBr%2BUtNIPYF3zyMvBjmZitPtFjOM6L3uURo%2Fptucnh1K1qvFTRHY4wygG4qSbx3AlChS6khsP9KfA%2FHBKQ%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa238610daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8308,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"95410923b46f2a7fa209e00c20100349","sha1":"b5fdcdf53f41dddb0bb0570c5db00772a8ba359e","sha256":"c19c12929fc449412680c201a88163b25f5b48af03a976e32b5fb74dd1b37766","sha512":"59718b74b164725fba3ba44ca4f54d7d89f2769b5b58899a79bdf2afd0e7074e78954eeec0dbf41ae2a927bc7c82f80c8e14b2f4bc9d4d8493974eba166fa0e8","ssdeep":"192:xLjCUrFp/UorEypmsGplIQGRAK2Wu82FJ3:xLjCUn1RGplIQGRAK2Wu82/3","tlshash":"f50250d3f15da107322bc1b124cbdf3d632c81e4910eadbc66b5642899e6a5ccd32f84","first_seen":"2023-05-11T14:22:51Z","last_seen":"2026-07-06T18:31:15.395521Z","times_seen":302,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/requirejs/require.js","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/requirejs/require.js HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oaH9wfQKPgcgB8Xrm5T4jp34MgqlnqGJWIBQBSEhA0yCNxEsUCkL2FF%2B%2BBIC7zOVvvrguvmSTfbrKoTDMMII4kNFUmRwoSYwD5YgjZH4VLXAMDawpxFnT2BSLC4n8K1wQpZvzQdz2w%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa2486b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86483,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f0cc8bbb2fcef87fc194fecbb632fcfa","sha1":"33bc97e78f4905e72b4c1eb2ca0a4662588443e3","sha256":"9485f0917f97fcf4f63a5ea365200ffd57f123f451382a2f9a1ad2e2fd51ac9b","sha512":"bd1aa102bdb0b27fbf712b32cfcd29b016c272acf3d864ee8469376eaddd032cadcf827ff17c05a8c8e20061418fe58cf79947049f5c0dff3b4f73fcc8cad8ec","ssdeep":"768:tX1TDwxKrBTvGsPjHX4LjjEvOFs0ETaI7wZEpW+5bbVx0si8uaILqbqS3duK3YJf:tX1TlBg+1bVx0sif3eqFK3YJp7WbM","tlshash":"8483835e1afb2223912375b89b9f70957725c0a70128dd50bc8e93e85fc057896f2fe8","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-08-15T14:43:53.724838Z","times_seen":509,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/i18n/en_US/vui.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:42.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/i18n/en_US/vui.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEiir59qOwI9lqIlGsEcT39PNQV%2BSZuijkH2YwdEUYobkNEg9QxErqTRwXCb2PyMmnZKK4XrGbyWJj92bnYOaPX%2Bpm13IY4waR1HEQzUVZQevQJEIMpmsNpYGFwGkM6byrTBGS48%2BWo%3D\"}]}\r\ncf-ray: 9e705ac0ac480daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3104,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"ff9f016374e1f39c39e883c7736c9f67","sha1":"256e02f3fc8d110aeb6623dfee760f70531c9382","sha256":"b325903ead716ab3cb15ffb0e31ad37ce68b479b3c2f219669e1dc28c4502333","sha512":"3ae715ca911641ac7fe15dcaa1810292d0f4521571cf16aebc09c6880bc62a5ba4b292c2bad3a21fda160167a1e0262c7163badc4afaf059163b355a8ff64d38","ssdeep":"","tlshash":"bb51f058e1540d53208b606e28ae96076132875b8e147e7abb4da25d0f4d81f80bb39e","first_seen":"2024-02-22T10:52:00Z","last_seen":"2026-06-04T23:15:29.143789Z","times_seen":59,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/styles/fonts/Metropolis-Regular.woff2","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:43.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/styles/fonts/Metropolis-Regular.woff2 HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/styles/main.css\r\nCookie: vmware_client=VMware\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:44 GMT\r\npriority: u=4,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: application/octet-stream\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\ncontent-length: 16708\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Apr 2026 12:35:44 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pFJzACbnSbsRZB%2BYt8q7BGMpVon7WqT3Sqei%2FTy3flALiQKlkvheQAooFmblfVHqz0QQFuYQ0H6Gq75UXRJ7gS1Byt2RqGzWrG27vzXxku%2FhOUOPSL2X5ks63FlxV5xhMRTqawygRrE%3D\"}]}\r\ncf-ray: 9e705ac76da40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16708,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 16708, version 1.0","md5":"8c4e9a224b10dfd8e29157247eb0e96e","sha1":"a8f4357b0c50ad284d88ac8f246cd7d40508b920","sha256":"6044f324376b93857c510f05ab366309510433cb972b9efb60e7a5a014330242","sha512":"be54ff58765c597dbe9e9845a58184c827b022cca867c6aa32b858019e916c5d55d6ebea4685ead9bfeeedfaaf04ee964b12c7fa5c06949fdc6606990440fe43","ssdeep":"384:XmFbViVjEkj9NBn+qsw7vGz37WmWbU6vuPKlrXUy/m2w++nVQ8fCl2secf5:WFsRNBXUWw0Bw+i5CYzcx","tlshash":"de72e0a33fe805e2c4a72638877a8b392110a7cc72644fca350fe71d50b7f551ca217a","first_seen":"2023-05-22T17:58:00Z","last_seen":"2026-06-04T23:15:29.15372Z","times_seen":70,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/bower_components/jquery-ui/themes/base/jquery-ui.min.css","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:37.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/bower_components/jquery-ui/themes/base/jquery-ui.min.css HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:38 GMT\r\npriority: u=2,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVo86wv4zbvJ5GrwcXh4QTy0OKhKkTVI8TyGDLXa1F8VFTGcnNcLCA8PFoAymBmzKndkWO5sNWONXye4KeV9Juy61%2Fotcvw4YZMjloTRs%2BUyR4ui5q2sn%2BNdQ9lcVpTjgf0gJrNRqWY%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aa238600daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30751,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29162)","md5":"9b56ce98a4e1b701a0c7d48a91f40c8a","sha1":"be28154f7bad96c18d2ce4be7d7b2f07f65a76d7","sha256":"c37bd7c3aa7a02b18f4b2c4796217832c0b0f46014e8c44837032c6d56ea2cdb","sha512":"ed2126eba38df120f510e17793f47ec1f3318e7616911cc096d2e0d904fccdfe8da61ef35e36372227a60f3dfbfe5d5437508bfd6a4b12095f11059d9cac8128","ssdeep":"384:PMlcR8lOXHc11evBMzymUh+4x6GcOzDBSc7nfZBhVtQ:PHXHcEBMznURx6GcOzDfBhY","tlshash":"62d24130a4c2253dfe33d23061e11ef4523bc142eda25fbda09ab65953ea8e4c57b971","first_seen":"2023-05-18T16:47:44Z","last_seen":"2026-08-05T06:30:09.68088Z","times_seen":186,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/scripts/main.js","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:39.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/scripts/main.js HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:39 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=taIsdmC0EYMhbhA6dHR68F3tz1q7%2FMjJYPmtZ9gzw9i0sEovj95Sy3NIqVJs5jb9GZf8XA2doveORjGUtgD7jIqSza7WLRhL9HemQs2f2aNcX5sGtX6Jp4n7MDphlVCDTzswWIpd5Hk%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 12:35:39 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e705aaa795f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8052258,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32069)","md5":"998063032918f343358542426f20c362","sha1":"0e0f708fbc14f8fb5a72ad0ebfe43128b38de660","sha256":"641de851ccb03b560bda21ea72fa184c1130ee456c91cdae46c7cac143d4e6fd","sha512":"141ad6ba922eb60e18ac6cd4228f3adaecb1e786b61b3630e034a83d84c5fbda1f4026547c93cdd018b5004ddf0251b2356f3f2717b840af73e4a8fb6418e2c9","ssdeep":"24576:phin1oxcGL0SBG+owl41J/5LJbjoSfdK7kv9Ta6v:phin1oaM0SBG+op/BJbjoSw7kv9Ta6v","tlshash":"36253a8872d2712243b730b551bf100ab236545ba80d8524f66dc6da7fb8e4da27bf7c","first_seen":"2026-03-20T07:22:58.976853Z","last_seen":"2026-04-04T19:51:43.620952Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2562,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":2473,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet-girisboss.vip/ui/i18n/en_US/vm.txt","fqdn":"galabet-girisboss.vip","domain":"galabet-girisboss.vip","tld":"vip"},"ip":{"addr":"172.67.183.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet-girisboss.vip/ui/","date":"2026-04-04T12:35:42.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-girisboss.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:30:23 GMT","end":"Tue, 02 Jun 2026 19:30:22 GMT"},"fingerprint":{"sha1":"FB:B4:36:24:CC:25:EB:AE:DD:A7:7A:CC:60:D9:F7:7B:F7:5C:62:BC","sha256":"D1:40:06:1F:5B:12:7B:89:26:7F:21:3E:CC:3E:D9:09:89:3E:C2:DB:30:04:A8:22:D3:65:1E:05:4B:60:DA:F0"}}},"request":{"raw":"GET /ui/i18n/en_US/vm.txt HTTP/1.1\r\nHost: galabet-girisboss.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-girisboss.vip/ui/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:35:43 GMT\r\npriority: u=3,i=?0\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nl7J0IFi6a5LAeIz8HYW88KpTcUurlcSs%2BeuZD%2BhNesYDRB74J%2F7l74X%2B8%2Bx1RfH4wlFpU2KEbu7Vp0p2INaWqR06%2FD4DRs1zncvvaVEIYzwcvNP%2FbmPb%2BPeGp02491sQ12M9OkcHTc%3D\"}]}\r\ncf-ray: 9e705ac09c430daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111411,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"66a7637831874ed14740c0fe5d297b90","sha1":"32453ed0a2413d6a63e6d63cb93a399cd8b13acd","sha256":"b354ed75153916400ff826a5cbac6c86c4a93a8a0859af3c2b2f04a7c96a3aea","sha512":"2acc52120bb7de36dcfff53ddf1c41ba6996257c3803f4d7402e4700e033a782d567aee4f42e4e8ba5c7ed00e44eccd613278a313dd1ef012817cc1988d7f4b6","ssdeep":"768:/gg85KLR6BjnoBgGm0gUxH6lhTnTDEDec/rHYwXb+t:l85KLR6VGUUOczX+t","tlshash":"ddb30f2ed6704c77198b319b28ba5243a530819f0f543d2d7b5c524c1f8e97f86ba3ae","first_seen":"2024-02-22T10:51:59Z","last_seen":"2026-06-04T23:15:29.148863Z","times_seen":66,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"galabet-girisboss.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}