{"report_id":"d53b5c83-2134-492c-bd43-13fe767bb26e","version":6,"status":"done","tags":[],"date":"2026-04-16T15:03:43Z","url":{"schema":"http","addr":"galabetbet.com","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"104.21.84.130","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"galabetbet.com/","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"title":"GalaBet - Turkiye'nin En Iyi Online Casino ve Bahis Sitesi | Giris Kayit","dom":{"size":32353,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1191)","md5":"081bac59e417a9d480bf1733a1605ef9","sha1":"daa92f467bd700294468317bfe5d6b4149a4ad0b","sha256":"8949c0f45b6440657a838ac3d68e4a95cfeb530efe5b4cd3069af34f99436fd9","sha512":"903bb1c93e2d34e2219116396ee2cddaedc95a6ca3deff4a8d0242f54d24a4e29136216e8e7d96a13a771a8b0b95b0abdb42410be530b82ec6bb9816a06aae9c","ssdeep":"768:oGWIIvRy2rxP6lLfxPZlAEP1lw9PslXG1X1p4CUhu8P7gVrLBv/D:QII11X1p4CUhu8P7YBT","tlshash":"a8e2d823745751360bb393c7e5a3a71671c2c623de23f882cafa9b594b95ed6c5a100c","dom_hash":"domhash1ad6af08ed03e25d877bd28a2ebf0ec2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galabetbet.com","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"104.21.84.130","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-21T15:03:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"galabetbet.com","ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":54,"request_count":18,"received_data":3473949,"sent_data":7798,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"galabetbet.com/assets/script.js","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"182b404e5baceb69ba8e48ea0dd940f0","sha1":"e570e599fc0be630125f8c9e0c07f5f1cba7bca7","sha256":"1941dcd734033c6b3c956e003586c1febbefefe7fb36ea656fe67dddd49cd139","sha512":"8ca1ea5cd09741d808930f88ffe1d627c30553a71a22920703ef487503184410162333af41090a648556638c52ac672faab232d4ebd2027cb9c18b22b932e9eb","ssdeep":"96:iaEVfIaOC42Wb3YI+VjqVrFNRy7E8h9EtciCX8MdqvXoWb:iaEVfIax4203YI+VjqVrDs7IXCX8MdUH","tlshash":"b1a1127675051a3548fe27fb259f639d7ffc40909a41d0010c6dc88d0ab5e8768babed","size":4654,"data":"","first_seen":"2026-04-16T15:03:49.37631Z","last_seen":"2026-04-30T14:02:07.724714Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"galabetbet.com/3.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /3.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:11 GMT\r\netag: \"3af6e-64f57a65afc22\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 241518\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKc%2B7ocRgOv4wmx8brgtnrINC6Ve6HH30A16CuifP8UyXkJyqz0cNaCBJugiRF7zade%2BRl4JaqnwvxyrbFzIrRe7aEZHBrKaKpi836CuiIr0H8BeJrkQdculenBmaeo2mg%3D%3D\"}]}\r\ncf-ray: 9ed4138a9b942efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 404 x 278, 8-bit/color RGBA, non-interlaced","md5":"f1ebd45af8d5a265286763f445f715b4","sha1":"78ae5c34e34762fd4611f1a551af95b2af8b3a93","sha256":"2f332d59974ead2e5c7bb224d0f23b9eaf3819129ca5e42e8ad4839ed4931d94","sha512":"f4ad44209b0c2758df77f6654846afad6a14385e86cc07abfafa893d192e41779724c5d3f5a78e9953503b46318792fd3b1a1bc573ede642e6b1afabb6e0834d","ssdeep":"6144:8EbfucGDUwy6LhoncBpT3iIR6LJGWm3po54MDVPDP9G0:DbfuzD9LTzZ6bxDs0","tlshash":"5a3412aba7cd2271d23d377cc6aa24321da75d800943dd49978c296d71cb63af43e29c","first_seen":"2026-04-16T15:03:49.360415Z","last_seen":"2026-04-30T14:02:07.736316Z","times_seen":4,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/11.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /11.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:14 GMT\r\netag: \"4ecd9-64f57a68392c6\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 322777\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PIXQRpPR7Oi2aPzUapwk%2BuOUmSGc5H1D8StOgUFZkSyH6kM%2Fy4AewjmFHuO4wXL3A8Nv4GJv%2BrtgY1t%2B6OJq7DdvGO8qoWvk%2FSL0oxYud8i0GE566n0CEgmV3WGFLoiLvg%3D%3D\"}]}\r\ncf-ray: 9ed4138aab9c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 296, 8-bit/color RGBA, non-interlaced","md5":"667c35f1f987df74371a4d4aff77046b","sha1":"62df59b0b018e81e866381f3e40858a50152f6b8","sha256":"f0637ef7ae59470f937c21a8523bb19c629f0f404a89510e8986c7ba34a1d2a7","sha512":"1f478c5b8f8d361e5368410c398e3727ae1fe6a3ee51ad988b02cb9d6f9d9bfdd2b7a0b6402a751b1ef92009260cc868247bd85196623cb258a40f4c8340f3fc","ssdeep":"6144:0M2DbIeePiZFXmjLq5u5c4dEITQsXbBu6tDaKtPw8zLCPUB37joH9rvvGqqoQr:cbIBoMHPdN5rBXtzw86c37jodrvvGr5r","tlshash":"5564231bfdda86df756bd3d60bb8a23af834879b130d118464081f6e23e893c7541e4a","first_seen":"2026-04-16T15:03:49.361379Z","last_seen":"2026-04-30T14:02:07.726949Z","times_seen":4,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/12.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /12.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:14 GMT\r\netag: \"3e1d2-64f57a6886527\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 254418\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fL2Bo7SSr4U94wJcnUwj3TD%2B4S2OpixS8%2BOqPEpLqT%2BQGyMhRare5KcShq0%2BxJjs6DQMa3eSvIKrRMnCnsVt5ZNqh0dFWoXpJD1AWQwY7%2BgkCWLb6pj76d4IjcR9Y2NkPQ%3D%3D\"}]}\r\ncf-ray: 9ed4138aab9d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 286, 8-bit/color RGBA, non-interlaced","md5":"88042d7189398a0a4fd91fab85f81c6e","sha1":"ed737d9e1299ea43a71c5f536b48e892cf91f9ee","sha256":"a59d5efa7176bb6993f66595cc6019dc099e0120882fe8344c2f1c3009e2be53","sha512":"23141e5f55a50a9c9505086a1574347a755474b7aa3417173dc2d4a0d10bd319b79db0978b35d943f37a76bf149afd0b3d3d02cb4ec5ac79c38ca3d0251f4f45","ssdeep":"6144:xsqxIn0PnNEWhEP1O44oEv4yMuOtn751kmdujpqp4g:u7neLZVGR1aqP","tlshash":"2a44236b1c14f900b2a7b72ae9223b14de577d500e2f354f6fae9ba1590b07468b7cc0","first_seen":"2026-04-16T15:03:49.362323Z","last_seen":"2026-04-30T14:02:07.740132Z","times_seen":4,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-16T15:03:21.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:21 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:17 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mA%2FZJAp%2Fc8l98gC2BIisdZUbCWtq2qVRAWYrP28dxcMpWQI9F67QvbtFMguoQwmEg7F0rLy6ObqloHSotlkrkQWHKH5b9Bb2wWhPIS83eiuoCnBVEgpOYzZ2V2WKNCV4g%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ed4138768200883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32509,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1191)","md5":"c7d41ccc68b19ca10130bdfbd4b434d7","sha1":"1fef897c78116cf356806b1f543850f54d531cb7","sha256":"ae2ed6cd45c74dac74f514c8cec78d091ddc4bca3b2bb279485622557861f9e3","sha512":"bf7a82182a43050b68d957dde04b4acc70005b659b1c324bb00e654d4d50f3789ac784a451466eeb2f139a6f2f1c1eabb99fcbb307bf5f931e607a196a4e6611","ssdeep":"768:mtWIIWP2rxPJljfxPylAEPGlw9PXlXG1X1R4CUhu8P7gVrLBj/x:3IIt1X1R4CUhu8P7YB9","tlshash":"a1e2d733745751360bb393c7e5a3a716b1c2c623de23f881cafa9b994b95ed6c5a100c","first_seen":"2026-04-16T15:03:49.363253Z","last_seen":"2026-04-30T14:02:07.734565Z","times_seen":4,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":44,"dns":28,"connect":1,"send":0,"wait":317,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/logo.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:18 GMT\r\netag: \"5a36-64f57a6bdec4d\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 23094\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUaU4Xkr63DUi8an%2FTV7JwyueMLSNkb1ENebKYJoZYLGETZUOD%2FD9Y9YEtZNs7A05OHFGW6lnAwrozcum%2BYgbOZ1P5kEgSinHphJxpIYajpSnTFr1eKNomFaDvllKaF2vw%3D%3D\"}]}\r\ncf-ray: 9ed4138a9b912efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 428 x 92, 8-bit/color RGBA, non-interlaced","md5":"336121a5b9dd602b7b483a57ae1d0ffc","sha1":"13e084ff5fb92c74456c975eba4d88db750dc1a0","sha256":"0c3b733cc2de3ed795b34cd54ed876fd783cfb90a9a435d1809ae4b74d0127f8","sha512":"72bd8e55cf1be07b0cb59e2c25a0a00b6ce28a16cb5e6934ea9d204f4e38059a6c32824038e4602f5c796aed448e435a31a2dfeb19316b9bb582b177e7debcd1","ssdeep":"384:YOjAR82aGtIY4wVgMWZSI4anNFnyHVqMuIpmOIg6m3PWiJbMInbrCwWkPdFmwWy:Y782/v3VgMkP4anNgzuIR6m3PfMR4FfH","tlshash":"49a2e11c853436e3edcafc79bd97060c5d778261678278ca7d4cb4269c46a8e3b369c1","first_seen":"2026-04-16T15:03:49.364121Z","last_seen":"2026-04-30T14:02:07.735434Z","times_seen":4,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/apple-touch-icon.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:24 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:15 GMT\r\netag: \"5d45-64f57a694b968\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 23877\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZDRY37ISyOr6kkR5hBx62xZi66LlUogxK%2Fij6AYVixeijfJxkEZdY4XuW8NgQFGELoP0FB9UfBtN%2FGTcRYPlu%2BE2YPRH6%2Bt%2BwCDSvh9B%2B%2FJZElADOBr2oSM%2FtHZHnHEmIw%3D%3D\"}]}\r\ncf-ray: 9ed413902c602efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23877,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2735a12db78c2d02be3afefb9cdc724c","sha1":"f2195a1cbddf8020dc619d56aa6bb1deb2682dad","sha256":"c7bae0ff2e2e1e275f4b97c67e999a9882983846b76d7ab85effeb1c9ece5eb2","sha512":"62458cc56157709aedba05da210be812fa14bce2a1c8007f26f4b7e997d6ead7a7bb2b8b9dfa95196e7e58e2d217dbf80dc278503080fdd0a5cb21e57d92d569","ssdeep":"384:CN5RoVT5v+E6mFKbyB+7lRLewLbAiyP+Mb2mxlzHqxzGGdgg1Q99NtaDV+Ez:C6n+qK+gHbAeMb2alzHqsGdg/99NtPO","tlshash":"54b2e1186eefad30a729233cb459568bd964f360280cb46d6a094eb31d8f951b3c91f7","first_seen":"2026-04-16T15:03:49.365108Z","last_seen":"2026-04-30T14:02:07.7292Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1985,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/favicon.svg","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXtV0USl0V1As9OAK8TMrbrYowUZImaBwNgGT4gRzwanvmmxM75o2IXS1ym2yV0TJjr14YGuoe5CZF8IpVW6NNV%2BOtnTWUnoRaKnQQPD5l4stzobuR7hRKKlMsNmoK%2BXHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\netag: W/\"1416-64f57a6a5824a\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9ed413902c612efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5142,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac6c54820e4cb64b16d81079b7d800fa","sha1":"c0a172c5399ed1e495d143da7941aee23f3ed761","sha256":"6799176711b7bef30d8d84bad900a186fcc2b33b28abe74b84f64537862a0aa9","sha512":"338ca91b59fe5eb69ab9950a2d6982f7356425c74872effc2d8d9ab7bdb95c244c9cc774b72575fd965454de2b5bf953824f728b9a2f6ce98d3a60c9e98d735b","ssdeep":"96:FWFkbmbH3OYqJGk+4gyF5xu0Kb8lALmoUL2zyfafEkdG+nvoRAhMxD9Izrr:kFkbGHeGLyFWulAaosNKzG+nvuAh0haH","tlshash":"1eb17d3fa69572b8620bbf85b4adfb639ccdbad76e5ca0d2d3c23d194102440f5542b4","first_seen":"2026-04-16T15:03:49.36606Z","last_seen":"2026-04-30T14:02:07.728295Z","times_seen":4,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":978,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/8.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /8.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:13 GMT\r\netag: \"49e34-64f57a67375c5\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 302644\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlydEu5rX2PqGErWSvQ5AjRDMI5d2HQKb5sRGw5ko8hj0d8kFTjeavaWnPh3ElcFZknziF2J8kl11xNx8fY6WiJhGctVNVhzCGfC2wbPxBxOZOgvzBdaufYCWoNJTf9kpw%3D%3D\"}]}\r\ncf-ray: 9ed4138aab992efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 412 x 286, 8-bit/color RGBA, non-interlaced","md5":"130fbc4e7100aec8b7819431f28f8bc0","sha1":"cf2f1e6c2be8f37896169c6f35f7b2128a3510a2","sha256":"342eaeeb57b4704610ca895eb137e7ebf9a41ff22659ed84a6213fdfd3ec87a9","sha512":"e0b4c4914353fa9f20631ee5707b442c72e88442fbc0cfa12f630c89e4d23b34be6dea7d12c782cd1d487cdbd64d7ac02f0b01539f2dc038f2f72aee04f89eeb","ssdeep":"6144:TkH7WmxPeUHZ51wob5dC5ax4mrBSpfcMoU8:TkzxPRttdC5aX4fH8","tlshash":"c85423a3d860335c765a1645f52afd7b24d4ec8f972f3c6027a2de06032c1e1aa95bf4","first_seen":"2026-04-16T15:03:49.366924Z","last_seen":"2026-04-30T14:02:07.722115Z","times_seen":4,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/9.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /9.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:14 GMT\r\netag: \"43983-64f57a67a7aa5\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 276867\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgXwQ4ChRXM%2F2h0AkT4wgOlgAdpMqabJ31WxbKO4M9Pji6XDxg%2B7RnGIouRQp%2FjAvs47zzyIYbfGU%2FHxE1RpJa%2FrjwUeG5Pwf8Y8bXHsAfVrOujd%2FysMBpZNPPXW7fcsYA%3D%3D\"}]}\r\ncf-ray: 9ed4138aab9a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":276867,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 412 x 288, 8-bit/color RGBA, non-interlaced","md5":"a8264d950519a536f957c83db21eb5eb","sha1":"d29e6820283c036050bea3485d9542bcb47c4c2c","sha256":"2d682a35604f560f2cfdb096a05818b3896981db20ed58149416551012881516","sha512":"0fce639ec87893ea6c6693aea27542d73dd6882cce59d71699d0b2236cd9e442f71ec1cfe125b5bda7cea9fe93222ab840dc1f1c5274011aa7ae873b5c4e2007","ssdeep":"6144:KOBUVZn3sp0kHzWSMpcxALBxvIUjswmNf2Oi5/:KOB03LfpaeBpZsSx","tlshash":"7344233ca1192619c54da1b59dd672c5bc2cd4e21a255f4376ccf8cbaa098cc3ef90ee","first_seen":"2026-04-16T15:03:49.368199Z","last_seen":"2026-04-30T14:02:07.739037Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":861,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/4.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /4.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:12 GMT\r\netag: \"441fb-64f57a65f8062\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 279035\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wF4W99I9TJ6XztM%2FgmKROy4GY03okeNE3WWQzvNKeeUw6iDDSTRYwbAz9ZZ%2B3AWAq0iqMtF2Ty6yqKNcLGKLqUK44tgq6Mhy9WiqaIxP3gzzaid0R7HZhDQ6MxZRDN%2Fc%2Fg%3D%3D\"}]}\r\ncf-ray: 9ed4138a9b952efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 404 x 286, 8-bit/color RGBA, non-interlaced","md5":"be105f1f21c14deef3bfb1caf0e52769","sha1":"40b6eefa0050c71389ef63161e5c3acfcfb6982e","sha256":"cda70d8d7793cb46188982d8b1052cce7d5bef3d7fbdd7aeef70e5973412925a","sha512":"7a11a09fb45fe74d7d3f51f899f76dcf4d52fc8278fbe52641849d361ce442165478d8812863465958f2ed121e1173c3d2773b93b82f1df8ef487c66b6301770","ssdeep":"6144:Oxp/ECGD18kQ7XFQa1XxpCqJpk/wMp2ECwN5DuqO80R:O0iNFDVxpCau/RTtrrj0R","tlshash":"0a54239fa27324f4ea64c4441af6a2f4811e9f0f941bd8745cc9bac310acbd1bf95c56","first_seen":"2026-04-16T15:03:49.369152Z","last_seen":"2026-04-30T14:02:07.737202Z","times_seen":4,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/5.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /5.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:12 GMT\r\netag: \"48fbc-64f57a6657ba3\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 298940\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8caSD5dcsCVgo63xmTSPkeHpfif5kPv5izeKeNI2R6FBct%2FnhR1u%2FuoaLBU3QPRAjPEmL4sG4VmeKzcyRR4n%2F4jz6pKdUeFcnRSC7ATkt4H2gQRtjoGL7zt8dqQLZSnSeA%3D%3D\"}]}\r\ncf-ray: 9ed4138a9b962efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298940,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 412 x 284, 8-bit/color RGBA, non-interlaced","md5":"e2ba6832b61525106242843f26ac3096","sha1":"98af2a27d248c2892d9680581b2a3a3329f20874","sha256":"9fda5d3ba5b463a9a5cd3623a68f83552e16fbab03d7b56187c1888970d67284","sha512":"96abc25004089c2da2a34b0c29bc7978f405f2f6f99f112b1032bb04a1c95297532e96ae3146d1ed7b5ef6e4ebe4d10ce0f2d115c0daee13ac5c670b5e0c9af8","ssdeep":"6144:fYMcGxopqxXn0722vjC2kkv3mnubUbhKNxYHqRMeSUT:wMc5pquMKIuBNWqMm","tlshash":"b854238274afb25c07eae9e9e4454e8e46ce11d01fb764990f243063eee97b5c85f08d","first_seen":"2026-04-16T15:03:49.370044Z","last_seen":"2026-04-30T14:02:07.725908Z","times_seen":4,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/6.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /6.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:12 GMT\r\netag: \"3efaf-64f57a669d103\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 257967\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQ9HhSSAOvIKtPh7f1CVbOkE5feNBBr%2B9B9Bu4HE7x78ra9Bo2OodIkJmpDTXgtChQc7aAcOdDQ43zB3gfv8dKm1ayg%2FWug2GGHdn6HRaE%2FyVXn99v7hYkF0Zx%2FRivrvbQ%3D%3D\"}]}\r\ncf-ray: 9ed4138a9b972efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257967,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 412 x 290, 8-bit/color RGBA, non-interlaced","md5":"eab1b4dc512ce5a0a3977b397bfdf60b","sha1":"99c92fa4973880dc3cc4b7528cae0051879bd9e2","sha256":"8ab7066bae3a0798079a3bf9c355639f1fcc23fef874a40c44429c211a9f35c8","sha512":"7a6067b7683e764dbdf16dc0f60e385e3c5e5aed3756a3b21e6c241a36f54efbff31c9484b8a288d276c1a405c61de6fd4e1fdede3c1e092552955498b76553c","ssdeep":"6144:Kscb1fpvaxsK04/FGVRssk9CiiR/3z7vHxAGhGCBGd5cCodm0E:KsIOV0Oo3k9CiUuGBmjimz","tlshash":"c74413b17f808813d65b4f3e6fa6505da31a82c746b6f98077c223442ab36a145ddfec","first_seen":"2026-04-16T15:03:49.370872Z","last_seen":"2026-04-30T14:02:07.738125Z","times_seen":4,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/7.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /7.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:13 GMT\r\netag: \"464f3-64f57a6716284\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 287987\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWAIFnS4wqlEDrcIWpGK0q6b%2Ftf00nH5loenOZhQIwid%2B8Y82CpoFOnj8byhpXN4r5HvbRPSQOtJAWIK%2BGyCrLc4KN2Yc2mPZsHvFWi49PUbRBxtcE6fMgkZLKiP09tGBA%3D%3D\"}]}\r\ncf-ray: 9ed4138a9b982efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":287987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 392 x 262, 8-bit/color RGBA, non-interlaced","md5":"9699d7bea28167f6d59243a7eac07e29","sha1":"d687be540d301b82ba41da153a73e72e6e975d48","sha256":"d7a5caa6d1623d7e8431f4df85ab0c3a3aae49dd82c68671d1b9a20c97520b82","sha512":"b08d2c367b9a6cebf32eceacb4d5e5232f72199d47ab7fc98fc45f284c2567c8e2188f66fdef53e41fd02375b64715c755c16c5c2cfaaed11ba9b2bf5d649f7b","ssdeep":"6144:hRHn3YGvhnBng7TUg9uCWDWv+Z8MubXAnyePzMgMcSwE7nORqpsj9:h9nnxg7TkgvJPbQnzMLVTORRj9","tlshash":"2c542394465010a2611bf72c1806988d79e2eeb18226a68cfff7c795a704c3f771fd8b","first_seen":"2026-04-16T15:03:49.372096Z","last_seen":"2026-04-30T14:02:07.718969Z","times_seen":4,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/2.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /2.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:11 GMT\r\netag: \"3dd39-64f57a650cac1\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 253241\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKXlznfCGyPaR61uD6Icdqu5P6VJqEwhZZV8MxplFPCQp5Zq0T3XIxTw1zMFkVTcS6y6pb2NoRb5LnSeQFi1yM2lG7VCT29YIwGcZxarfXKsBjU%2FD7QRwDwcMaeqTR4Jyw%3D%3D\"}]}\r\ncf-ray: 9ed4138a9b932efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 396 x 284, 8-bit/color RGBA, non-interlaced","md5":"dcd1c85b5fd596713ac6093b44ced9af","sha1":"d60452a89783043d132a539ccae84b25c98802ad","sha256":"3d1d0056e979276fa742ad03a379bfa0ad85b48a0857c47658612850481a98be","sha512":"7f50c423696efc468fcbba46922d2a1e366c7eab12eca0a41461330157536db9e66d04f7a505e1800b9b1a85eacbb9454c043650fc8c8a60c50072f9886036ae","ssdeep":"6144:zsg7JYPF2KPqjIsm/z69hnwypzjbxbY1e7B+cggwADJjl8k:zJ7JaSfse9hFzjbxbY1AajiJjn","tlshash":"f3342388652e7a9c88719b1f9d663ec272cfcce095f51303362016624bef2df261857b","first_seen":"2026-04-16T15:03:49.373035Z","last_seen":"2026-04-30T14:02:07.732551Z","times_seen":4,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/10.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /10.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:14 GMT\r\netag: \"425ff-64f57a67c3fc6\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 271871\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eKBCyKpRR7A0WYnpQkICDgIgL4haG0LuUQIAD5nsauFm6ZABzg81kKriELgeE99hejxWd%2Fu1qHzHMrnYcHakSRqp%2BMWFkk9pXA8iVAMPsKEqOnF2yoJA77lnz7N%2BHgpTrw%3D%3D\"}]}\r\ncf-ray: 9ed4138aab9b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 406 x 276, 8-bit/color RGBA, non-interlaced","md5":"771c86532a6d457cc764c97b17d104bf","sha1":"496fd02d822bdb5462350c71b3bff4492b160853","sha256":"0e815506963a1c4a4fcc5017cffcd451fcb58047b902721b6e96277dac310934","sha512":"d1504509b53bbc6fdc405492bf49f2bcab148609f3cd3510ada80e035104ea833f708250f84f3738a699dde82addafba0b85935eb883678d05454154cb1e03ee","ssdeep":"6144:pam5Gn65mlFX6t44ozNqUqmpaT742P5vqzqDtFHt1IV2HKs6Ohx:MwGNMhozNVtoTc456wFHt1Ezs6g","tlshash":"c24423701c6bab6a40bf441bfaa3c449e5b77463e0c15f5f7c8b170146eaae3007a697","first_seen":"2026-04-16T15:03:49.374321Z","last_seen":"2026-04-30T14:02:07.733592Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1343,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/assets/styles.css","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:22 GMT\r\netag: \"3c2e-64f57a6f3b1f3-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 3652\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbYTM4TibNbC40rYUk9D1lO%2F4GHGaA9smELd6rKYoF%2Bo9eTbdiY6ua70GCWGesGY2rimG1dyHPgQ61x4k6240bslhQHmbZOtJUMQdvIZgxVMHSuSfpuuprqjFf0ZtqK0hA%3D%3D\"}]}\r\ncf-ray: 9ed4138a8b8e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ad57ae4420bccef4e8f3f6cec5ed626","sha1":"2fc8a659b14716b0421462381407311f2a07abc7","sha256":"10538f98d30940ba3714fb7c1e11083cd4fd4ebcf666b40623ec453e7d9631cf","sha512":"3fbfbc981866f6595eda9ad975c842533f12d75cb88f39d6989400b738d6dfa303ae8a2e56ae3bb8979726fcd207f9b21f2a8906432a8948e6491545cf29b43e","ssdeep":"384:c1SjiHtG9ZLWLC4wEvLkkXGWWt8dChIMrBt:c1SmQZLUnetSCWMb","tlshash":"c3627522a901312cb037d857e5d25bdf7138c407e76706acea56a2aacec70eb1771b4d","first_seen":"2026-04-16T15:03:49.375467Z","last_seen":"2026-04-30T14:02:07.723701Z","times_seen":4,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/assets/script.js","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /assets/script.js HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:21 GMT\r\netag: \"122e-64f57a6f3a253-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 1497\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xmfyvFNDAjB7MMLrYrige5LJKt2iQMJul%2F2LUH4MQgjk6NaoL%2BY7uGRmNgoeMti7LhdSfMbeRkEttmUqGd4%2BRcMOYTeS71ypL7zPpmUpn7iVB7rStEjPGHKWILLnt%2FQOQ%3D%3D\"}]}\r\ncf-ray: 9ed4138a8b8f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4654,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"182b404e5baceb69ba8e48ea0dd940f0","sha1":"e570e599fc0be630125f8c9e0c07f5f1cba7bca7","sha256":"1941dcd734033c6b3c956e003586c1febbefefe7fb36ea656fe67dddd49cd139","sha512":"8ca1ea5cd09741d808930f88ffe1d627c30553a71a22920703ef487503184410162333af41090a648556638c52ac672faab232d4ebd2027cb9c18b22b932e9eb","ssdeep":"96:iaEVfIaOC42Wb3YI+VjqVrFNRy7E8h9EtciCX8MdqvXoWb:iaEVfIax4203YI+VjqVrDs7IXCX8MdUH","tlshash":"b1a1127675051a3548fe27fb259f639d7ffc40909a41d0010c6dc88d0ab5e8768babed","first_seen":"2026-04-16T15:03:49.37631Z","last_seen":"2026-04-30T14:02:07.724714Z","times_seen":4,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetbet.com/1.png","fqdn":"galabetbet.com","domain":"galabetbet.com","tld":"com"},"ip":{"addr":"172.67.193.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetbet.com/","date":"2026-04-16T15:03:22.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetbet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 16:02:51 GMT","end":"Sun, 05 Jul 2026 16:02:50 GMT"},"fingerprint":{"sha1":"76:73:8E:B2:72:AF:F2:EA:E7:5A:72:E1:D3:50:A2:BC:4B:BF:EB:23","sha256":"3E:37:13:97:16:B4:18:C7:76:96:A7:3B:2B:B8:63:06:64:6B:35:8F:5C:77:19:E0:DF:2E:F8:2A:05:1C:9C:59"}}},"request":{"raw":"GET /1.png HTTP/1.1\r\nHost: galabetbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 15:03:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Apr 2026 13:42:11 GMT\r\netag: \"4ad2a-64f57a654d201\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 306474\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hp%2Fd3VlBP%2FtB3xjbujE9YMsLC0fNj7HxxyPWLIFtsUXUJm9KEcYlE3u7NbmvhI0s0JpaUczB7Hsx22%2BSnsoeHhTYooiHruyLy1G2%2FRdNYp2LKFzQ17myNx72rvNjObdbBg%3D%3D\"}]}\r\ncf-ray: 9ed4138a9b922efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306474,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 406 x 284, 8-bit/color RGBA, non-interlaced","md5":"5ac8faf19891c7d7bf44f8839ad7080a","sha1":"b245d7387a0af8493f175d7bfcdf5438a233a96c","sha256":"072bf367aa22bef285abb68368b064cf7e80661f28a387763dd02ec5458c10ff","sha512":"8b17a18fbb05a1be12aef6e4b84e0e7cc9abdded828af67470e7c224094bc8d82cc8c9342c484bfb4221a63d124c3f3f5f486c0ffd1525c859d9fd1bb69bb8c2","ssdeep":"6144:lpsHx724htZQzgAC2en/vyLkq0No6K/CO7ktyK6Ih2BFmlR:gRqItZQu/UZKl1O7fnIgBFYR","tlshash":"c654227449304aba596644ac3c496508bf93f8d2793efc837cdd804b4a7486ab1af787","first_seen":"2026-04-16T15:03:49.377158Z","last_seen":"2026-04-30T14:02:07.730065Z","times_seen":4,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-16","alert":"Phishing Block","trigger":"galabetbet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"galabetbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}