{"report_id":"e0c3bc67-bec4-448e-b173-1620feff0556","version":6,"status":"done","tags":[],"date":"2026-02-25T17:56:05Z","url":{"schema":"http","addr":"galabet928.com","fqdn":"galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"104.21.44.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.galabet928.com/","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"title":"Galabet Giriş Rehberi","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galabet928.com","fqdn":"galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"104.21.44.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T17:56:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.galabet928.com","ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-19","domain_rank":0,"first_seen":"2025-08-14T11:01:32.829988Z","last_seen":"2026-02-25T12:34:14.15256Z","alert_count":105,"request_count":21,"received_data":2651999,"sent_data":10213,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:27.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"galabet928.com","ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-19","domain_rank":976370,"first_seen":"2026-02-25T12:34:13.654462Z","last_seen":"2026-02-25T12:34:13.654463Z","alert_count":5,"request_count":1,"received_data":187641,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.galabet928.com/astra-flexibility-js-after","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6c22b596ee916e355800afa8b53a6d2","sha1":"b798882d30d777355a256e09840cc8720500e2a3","sha256":"f59e0a1fc38ca8581b1a7f9ac50868c82cc27b91c4a72d29d5bdefbfead089c2","sha512":"7f0d4905b9b9eaec3d9cf819ec6f42f642b3d896f12d82acc43f639a4cc71d6db0149f049cf02b2a9cd2a631d726f2ca0886cfd268013e7e8ae6c05e2b4b1433","ssdeep":"","tlshash":"acd092b5c2e0a52705bb097ba8e7e60964609821eab7b168811cc32c8872ac01da1bcd","size":255,"data":"","first_seen":"2026-01-13T06:19:10.995017Z","last_seen":"2026-06-21T16:04:47.92764Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T12:57:41.822203Z","times_seen":1014348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.81-1771418813","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6317d5a9083cd31c722ff82c4bb99ab8","sha1":"3e6fa72af48bda570bbd5cfc965960a0e4b017fa","sha256":"455c72f3a77fb3fea62fe1a06c4898558c8f324d69a1a91f3dbad333a39c49e3","sha512":"c056571053140ea3a9b85f467ce3ec486facc021bb34dfb24572f3ea0aacb50a5a37b760a8d2421186e805ed8bf6c0fced901ac0395281c7a8817ac3b862de5d","ssdeep":"96:uBtHf07kBB/+Lj6UNMIHyUNMIohgNM5tyUNMIl3u3c3F3JDg29SLYT9fSlFQOk++:uB1c7kwjXNMIHfNMIohgNM5tfNMIjg29","tlshash":"cba16160f562607061f6195dc9a732067b6dec2fe6c38099b8c4d8d41d68dc6323be76","size":5067,"data":"","first_seen":"2025-11-27T21:25:32.23562Z","last_seen":"2026-08-10T21:51:08.920583Z","times_seen":3133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.3","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","size":25965,"data":"","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-08-11T11:34:40.492057Z","times_seen":21147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"74d98da7956ffba29dbd3767ee5be928","sha1":"1b7b0a599957349d2cf8b7ad92e8c87cf80b4895","sha256":"355060d78157334a981e970a9e9ab9fdc3063a6430cd5a304a924ffa3e95bb27","sha512":"4f27b03f9976678c7f19c3a3b2cc0c5b44e09d593df22a81fc6ab1492325752b99cc63ee75255c4728b9a76724aea72eafbcbbc51b0202509ac158b93fb36026","ssdeep":"","tlshash":"0971969ae77638dbb2f900f2697a0d47eb614435d6c8d038c9bea3141cb5893c274a46","size":3805,"data":"","first_seen":"2026-02-25T17:56:07.88768Z","last_seen":"2026-02-25T23:59:43.558026Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f74050f4bacb44b594f0014217a4b3c0","sha1":"7f45d27c9185b2b4312140f234258bb76573a2c4","sha256":"66361c617e79f2f0643b4ce1a922a59cb6d4e048fa3ee5cbc2309ab826af40ac","sha512":"69aad8eb67d3eb01ce4c2fc225ab620d79bdf63ca9fb5009afeb113e725f028c80ccca020f7dd049299f3504043da7c7ec76c4780e50321503cad287ab07ddd4","ssdeep":"","tlshash":"5c51b7857399b43687fa725c42ad6a0751e6e0329ad34018db0edc8a13e1f87e073b89","size":2907,"data":"","first_seen":"2023-03-07T13:19:31Z","last_seen":"2026-08-10T21:51:08.885578Z","times_seen":8504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/ez-toc-js-js-extra","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"18c4c0a0a3f6a0adca346faf3b11e851","sha1":"5e2f0fdbcb4c33cf727abee826c6bad0512811f4","sha256":"a2368e41a301fd66ca3af7473b8c626e626fcfd692e3fc13252b5d5006991578","sha512":"a7bd484a1a9a5025f8143ff93ff7b905245bad453907c71c81fbe20acf4fd7b6c7fee88f30eded88098aaf751d20a518a7bab685d243bfb52f71ac0f52092c2f","ssdeep":"","tlshash":"7541dc24d094d6276467c1b1cf30e77d70be31a8e9a7c2648dfe8c20d11949a716538c","size":2005,"data":"","first_seen":"2026-02-25T17:56:07.889815Z","last_seen":"2026-02-25T23:59:43.559983Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T12:57:41.868528Z","times_seen":929235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T12:00:23.621155Z","times_seen":310885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.3","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","size":15525,"data":"","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-08-11T11:34:40.594425Z","times_seen":17782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1e61eabb0c508a4034e9463f5c21415","sha1":"447d61fbd289f19c196dca6db57fdabf396f37ec","sha256":"14a0347940d8cd4bb00302adc1f0e7a52331a4e1453dbca140e5064622f4d1ce","sha512":"f0d5eb7750e9bd24c160562d63b62a3e8fa761d0e9e9dbdc522c1ea848868eb301bccad139ac58e713a32abe4c899064b7c179ac43ccf87eee0d9a1b23322426","ssdeep":"","tlshash":"1bb092b502e0952705ba055ba8a7e609646098216ab7b168811cc32c8872ac01da1bcd","size":119,"data":"","first_seen":"2026-01-06T15:13:01.552784Z","last_seen":"2026-08-10T22:37:28.191568Z","times_seen":10506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/astra-theme-js-js-extra","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"58ce1a775865689f638599b32d692404","sha1":"0c7f615884bd821760d566e74ca55ba34d36ffbd","sha256":"9a819f64bc297f5ae6be6c40f39574cc31c2be6c7d3e66d5d27a96340bcb8d43","sha512":"7ec9c2a6ac5184bc7566aee5e9cd1b535eb7b0334d0db882683b1933e2dd704d08633b80217ed21ad3830a2f39db16e80827d9f2bd494986a413bbfcb14570ce","ssdeep":"","tlshash":"9811a710c2d21d0176d78c7250118f64b0fd9190d1d4f08d9a7c454862e6a1a1668109","size":1036,"data":"","first_seen":"2026-02-25T17:56:07.893158Z","last_seen":"2026-04-26T03:31:46.386491Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"634ee9f21b34eb24ea532f2ee6042baf","sha1":"6c32dedd95da07aa54c3b852d789bb529956427d","sha256":"ef09f4bec10862578ab2a20b0b0f5cff4faef4b3ce0fe01872a1460ad0d72c50","sha512":"26bbc3e0ae94d2dff02f696b53e5a15b3455cd25eb10941672fe81715b80a1bd94b5c535ac3a8730b401737b1e0c236524ccb29f212ab4ea1295da2992d0e508","ssdeep":"","tlshash":"6551557070192abb0d4b1960e27f568af238947d084541b4a18de5f22d3d84755b7f9f","size":2542,"data":"","first_seen":"2023-03-07T01:11:48Z","last_seen":"2026-08-11T12:49:11.209979Z","times_seen":8424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/ez-toc-scroll-scriptjs-js-extra","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6db23a41590d7b2f27fbf288b2f1ce0","sha1":"b3993871822319fef218778f0311bfe6402d1815","sha256":"5f9527941baeab521547f8f25af19fc1156199b093e5718748130dea1420f127","sha512":"ff3da3b9de2d27f59992ccee2f3c278fa691971d07cd712a184509f29cf28ef3dc38e1029b109eb0885e26c5180360a57ecf7118fd5368cb8295e5ee70f21b01","ssdeep":"","tlshash":"f4118c0ac9a45640a2d80430cc952373e46aa243d61d894aeac84c5c0091fe9619a103","size":965,"data":"","first_seen":"2026-02-25T17:56:07.895301Z","last_seen":"2026-02-25T23:59:43.561577Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.81","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f0d173893eab3401131bea6b2a24de","sha1":"cbe1ff491cc8f890c5ac8511302dd89cea5c1239","sha256":"23288a00ecc43659a2cdfbd9b13996f510fb709bb15bd48712849763491ec420","sha512":"2047d93471b28d52330712533878880c177c0c6376dc7356bf77000310098eeddee82bbca8beed1d11dca1865f148d9225a97a7f2dbab0e39c119d4c336b448e","ssdeep":"","tlshash":"3621ed85e70215bdf1bd00dcfc392322f36bf19679257409265868972d44f7928afa60","size":1239,"data":"","first_seen":"2025-03-12T16:27:30.342343Z","last_seen":"2026-08-10T21:51:08.916499Z","times_seen":6624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/uploads/2025/06/cropped-galabet1-192x192.png","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/cropped-galabet1-192x192.png HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 4834\r\nlast-modified: Tue, 17 Jun 2025 08:15:43 GMT\r\netag: \"6851242f-12e2\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0J1HB4yAbUzUoZJ3xJBF%2FssmeUSVIpdzcNDTgn6q%2FF8qIobeJOav9XeExlIY6RTjkaHzt9zg8%2B1lk8ibhg%2Bt5vS9PBKyUawPEtx5TOc8Eiezhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d39134dde3d805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"18113963a371cf2b8cea843874ed8bfb","sha1":"2c5077d8f053082a64b87a15b07150398a245898","sha256":"682de69c6db24e0c9e65756be496b64de9fb1a340d55596e75bf5c192d48d145","sha512":"c08c278f083240c8e74094baeb874161034cf44be5e4e8724701283783d6cb13c1a72e0f34bb9e02cba9123e59c36efb883576ba81ed94a4852fbc384a86fb62","ssdeep":"96:6ZUpFg1kYj5Q744NIgRznboinCatJERxJmpZ/szEK6S:6+pFg2yO5+4bbvCvgpZkR6S","tlshash":"88a16dc82106d4e5eb0d09229cdc119a2f9064dcf09b6994c3f299a71da2e3b5472dd2","first_seen":"2026-02-25T12:34:15.976035Z","last_seen":"2026-02-25T23:59:43.552041Z","times_seen":3,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet928.com/","fqdn":"galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T17:55:43.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 25 Feb 2026 17:55:43 GMT\r\ncontent-type: text/html\r\nlocation: https://www.galabet928.com/\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbjNLUAlRe0%2FOiXZvCQ8OA447CkcMOFUyQd6NsR5wgHt6IFmnfEoDzlO%2BDEVgND9q9doqsLhsKPYvtfFBwh1gjIqtCRdY2q%2FdwxEYzF7\"}]}\r\ncf-ray: 9d3913448a363a56-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187089,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":37,"dns":5,"connect":8,"send":0,"wait":110,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=4.12.3","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=4.12.3 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 12:56:50 GMT\r\netag: \"6985e512-dad\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1882\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUPTEmn5L5oU4BBTQbRmZH%2BZRu%2Bq2PzQLRgxzK72cTGj40gaVT1KI8niMFuwMM8Ab1Js7q0Tj16doDkn1hEiLXrHs0XLAhQhZSIa7E5WyKV%2BYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a2cb5805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3501,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3501), with no line terminators","md5":"f9fe7d6abdf0b467614fd13d77fb9c9c","sha1":"507858c11804e060004cf34f84f8305595bd23bb","sha256":"5615ca8a377672f9a922f76bc7d979e3abe1312657bb27ab620833f1afd50f94","sha512":"ad3f5d15a253975e93d7f310eaec41b07c7ff9e41aa6ffce7d3984cab3d12140aef47b87df84bc0d2013e9085ec43eabb9ed955bed82dccd640a6cce1ac1b317","ssdeep":"","tlshash":"cb7183c99fe002751152e37ad4aec11c97b88c93abde546933f91a8e4b1438943f3d6b","first_seen":"2023-12-12T15:58:33Z","last_seen":"2026-08-11T12:17:22.326465Z","times_seen":6628,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Feb 2026 12:46:53 GMT\r\netag: \"6995b4bd-9ee\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1881\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KMyT1qcHRRfvsWOWqX2Tn4NCDl2A5rx9q1%2FtQRmDv2MqVBUbB3M14gP1Qn7vxO1kn8iL8p1E1bR5EVCTLfd2k4OZqiH65WhTa63RUh2w9dQE1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a4cc5805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2542,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2369), with CRLF line terminators","md5":"634ee9f21b34eb24ea532f2ee6042baf","sha1":"6c32dedd95da07aa54c3b852d789bb529956427d","sha256":"ef09f4bec10862578ab2a20b0b0f5cff4faef4b3ce0fe01872a1460ad0d72c50","sha512":"26bbc3e0ae94d2dff02f696b53e5a15b3455cd25eb10941672fe81715b80a1bd94b5c535ac3a8730b401737b1e0c236524ccb29f212ab4ea1295da2992d0e508","ssdeep":"","tlshash":"6551557070192abb0d4b1960e27f568af238947d084541b4a18de5f22d3d84755b7f9f","first_seen":"2023-03-07T01:11:48Z","last_seen":"2026-08-11T12:49:11.209979Z","times_seen":8424,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/uploads/2026/02/Galabet-spor-hosgeldin.jpg","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/Galabet-spor-hosgeldin.jpg HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 192372\r\nlast-modified: Wed, 04 Feb 2026 10:55:08 GMT\r\netag: \"6983258c-2ef74\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 1881\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6MSb9mbLuaf0lUask69ZgITRIGln0vhzS0amhDXsZOIIrbnzDzqR8OcZ2%2FDKmDhPZKiaQvr7BYHDDDgUfdDQVhEFFnRdWl%2FBnrVEgEfFVOWrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d39134a3cc1805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192372,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 950x564, components 3","md5":"bf0e368a42a37581267a4e066cfa2ea8","sha1":"d60ed6518d4ea67db8407d046e23f9dc64ed0135","sha256":"1f45131f45a20bf720d47ef75df3799a78b81c8014e9b1794cb8707214f49ff7","sha512":"c77a2f5c57b02811763399024894dc6f5dd7296f001216587198d61d627845a98dda61ea4bdddd35c244b458b78dc8e159427b6666df5d9294b2cdbf33b53282","ssdeep":"3072:PNwOVpcGSjEcgIGDTWvAqrm5zYDRh2m3n08bR0eWN+p0JmFvsMbrN1KMLn:1lVp8j1YGAqSURGgR0Ip0JLMbT","tlshash":"3a1412f6ef1eb8a1e29cd7f6fa5400c4800316b9759dba59fde85d49738e1bc180412b","first_seen":"2026-02-25T12:34:15.995155Z","last_seen":"2026-02-25T23:59:43.556306Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.3","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.3 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 06 Feb 2026 12:56:50 GMT\r\netag: \"6985e512-656d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1881\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xk%2Bssw1rpbZSDRP5oHbOBhSaFrADnsgcyH6UK%2Bp3Mre0lVAOmtXREpu8X9Zj7KR6WhbYsuWyug23mO6qI9o2%2BER6Cst4UqRFkys1UmRdTmOF1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a3cc3805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25965,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25965), with no line terminators","md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-08-11T11:34:40.492057Z","times_seen":21147,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.81","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.81 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Feb 2026 12:46:53 GMT\r\netag: \"6995b4bd-4d7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1881\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4biMYj2CEsRAyjjalFcQpYJqypiGxYaha%2FxkDpTxf0%2BWifCwlEmQ37hkl0FR5T7HYWlat6o0ziMG7AXEaeaIDsZFNoxNlo6F91OidpncpjF%2FXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a3cc4805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1239), with no line terminators","md5":"81f0d173893eab3401131bea6b2a24de","sha1":"cbe1ff491cc8f890c5ac8511302dd89cea5c1239","sha256":"23288a00ecc43659a2cdfbd9b13996f510fb709bb15bd48712849763491ec420","sha512":"2047d93471b28d52330712533878880c177c0c6376dc7356bf77000310098eeddee82bbca8beed1d11dca1865f148d9225a97a7f2dbab0e39c119d4c336b448e","ssdeep":"","tlshash":"3621ed85e70215bdf1bd00dcfc392322f36bf19679257409265868972d44f7928afa60","first_seen":"2025-03-12T16:27:30.342343Z","last_seen":"2026-08-10T21:51:08.916499Z","times_seen":6624,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2.0.81","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2.0.81 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Feb 2026 12:46:53 GMT\r\netag: \"6995b4bd-1d31\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1882\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKMpJE0y66SV6VxrGifX3HbfxTJ4%2BbHzfJF1wakb4ZVPeYAqnCvTTon0xHgEMiPLpQCyvcmg7jGSOsXSqnWh7KuHN8IB6MF6E%2FUkx%2FJKpQJulg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a2cb6805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":7473,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7473), with no line terminators","md5":"4e9656055ed5ac197dbbaa74b1866e65","sha1":"5a654027dc2a17ae32ae0e415bf1f6d50d0cfe1d","sha256":"d302a71cea3359e98eff944257e8690f35d82c5b48d55c2c91b145e3f16803fe","sha512":"3167323c4de29c2a07f988b422a5306af169ad59d8efcbb34ec51053d3e9f4467e32e7e90f0f6da8872700b017a488d43041ef966358669f8ac63f7d1fc6ea3f","ssdeep":"96:rz8fLiJCEWrgPTwm9cZoZ5esg7rvZoZnRZoj3Bai/QMLXMDB7G/k1/hme35:/8LCWMT5OuWsg7rvuKLXYB7mk1/hme35","tlshash":"eff14132da421124f8aac15efcd075c52f2cd117d9539eec7cd1e9a0cada48a353e261","first_seen":"2025-11-15T18:54:51.291189Z","last_seen":"2026-08-10T21:51:08.913686Z","times_seen":3007,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.3","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.3 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 06 Feb 2026 12:56:50 GMT\r\netag: \"6985e512-3ca5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1882\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZAbqc5mXDPzFBa1SxERWl4Y3HMg1CCJRxRyB2a%2BkgVUIbbdt%2FglysEH6Qi21d9AfAeUJKeGhOQ9wWDWIJ6hvQ7Fgx15SD0sR7B%2BwDgjy5PUIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a2cb7805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15525,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15525), with no line terminators","md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-08-11T11:34:40.594425Z","times_seen":17782,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 02:49:24 GMT\r\netag: \"64829334-3509\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1882\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MLeCpZRBQFZJsX%2FigbqJ%2Bfyr0c5SfnzmqWM5YFWpk6c0%2FFDIOpU8Ymidu0ZoaDbV2Ki8H%2BK0Ml5tsTTK0Sgyv57v8PpiQ0KXIBkpvfXqOqyPFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a2cb9805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T12:57:41.868528Z","times_seen":929235,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/uploads/2025/12/galabet-casinoi-hosgeldin.jpg","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/galabet-casinoi-hosgeldin.jpg HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 214014\r\nlast-modified: Mon, 22 Dec 2025 15:29:50 GMT\r\netag: \"694963ee-343fe\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 1881\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bwro5OkZZWvjvlnvrClYENWiAcOraD4mk1cAW%2FuVEmCA4yYlJxjpwbyAzXFliSDSGGuCWparUR3tSq4j%2BfdKVKtPMxFddbZfOkSpvlNL4SzTZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d39134a3cbf805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214014,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 944x556, components 3","md5":"b2a1a11c9c8fbe71fa952167e344d2c1","sha1":"f486c8ff42e47d5e6fa9d9adf17c609ddd0a4bda","sha256":"efb2d2a7ff49a0a1bf0e7463ad887b6d62856ef6b3c8c44360ff823a766bb0d9","sha512":"a1d9d9ccf90e067adee5d9dea7eb8b5037d264c4cc07fc171993dd2309f14abe799538266b914759a0da177b1fa9a7b69ad75caf43b4a9531588f4052c65e5f8","ssdeep":"3072:fC/IgcGp8Zkhw6jm4U7KdApai/yrvyXpjU6ci8jXTjYcvreV71Yqr9Jj6FOjBst/:qDcm1JuqDqpjUasObrD6FjKKawsA","tlshash":"5f2422864306dc2defbcd1fcbd112780c5a6aaba60ddf33551c0ad95f1cc69a6a08b5c","first_seen":"2026-02-25T12:34:15.981808Z","last_seen":"2026-02-25T23:59:43.547938Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.81-1771418813","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.81-1771418813 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Feb 2026 12:46:53 GMT\r\netag: \"6995b4bd-13cb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1881\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=duTAZo5MvPHqCO1eLkhOUZw5hXTRyfKrnmfZNuob6yooBYN2cu%2Fg9pQsACslOOBthE9FEo1rKPBvF4NlZuZuCfo%2BEGwh7zWiKBr6fZRbZ3gjiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a4ccb805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5067,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5065), with CRLF line terminators","md5":"6317d5a9083cd31c722ff82c4bb99ab8","sha1":"3e6fa72af48bda570bbd5cfc965960a0e4b017fa","sha256":"455c72f3a77fb3fea62fe1a06c4898558c8f324d69a1a91f3dbad333a39c49e3","sha512":"c056571053140ea3a9b85f467ce3ec486facc021bb34dfb24572f3ea0aacb50a5a37b760a8d2421186e805ed8bf6c0fced901ac0395281c7a8817ac3b862de5d","ssdeep":"96:uBtHf07kBB/+Lj6UNMIHyUNMIohgNM5tyUNMIl3u3c3F3JDg29SLYT9fSlFQOk++:uB1c7kwjXNMIHfNMIohgNM5tfNMIjg29","tlshash":"cba16160f562607061f6195dc9a732067b6dec2fe6c38099b8c4d8d41d68dc6323be76","first_seen":"2025-11-27T21:25:32.23562Z","last_seen":"2026-08-10T21:51:08.920583Z","times_seen":3133,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/uploads/2026/01/200TL-bedava-bahis.gif","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/200TL-bedava-bahis.gif HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1571913\r\nlast-modified: Mon, 26 Jan 2026 08:53:41 GMT\r\netag: \"69772b95-17fc49\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 1881\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7uHpX1L7kZ4jU7ITfBMIpYFi3ar52kIIFMglJzW9mY%2BtPGt5zcIdtBRDhYAhZUgucJIcgV7KzXsHHarUDZcoRiUSTq41F8ZOLAgbcbRYzGhfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d39134c1d9b805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1571913,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 500 x 700","md5":"a62cf01ab1f5e22196a5be90c465d948","sha1":"3661f053b5062cc964ed8da097369ae3589b6903","sha256":"546f3e4a3f353351dd3d1221a3b833668db46e673e68c23950b8b3c1c6e97436","sha512":"f9654976ab9f6978b3377b9abb898de726f36c592b133a7e2f2cb2d787caf390801617312834b050e7dccb84d22435ba78380fa0791782aafdbaa82312cbe998","ssdeep":"24576:OS1uR/p3F2YGkqnespiseHAlOdSzC5jsyvVeHZLZ6:OSIR/xFxG5gsrQczHyvVoZ96","tlshash":"ba252325ee742ca93d556e6d7c874bf5eda92102387f4516308cfbcfb2026687da0e21","first_seen":"2026-02-25T12:34:15.966819Z","last_seen":"2026-02-25T23:59:43.542287Z","times_seen":3,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/uploads/2025/06/cropped-galabet1-32x32.png","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/cropped-galabet1-32x32.png HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 905\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 17 Jun 2025 08:15:43 GMT\r\netag: \"389-637c01e5e29c0\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJTkARsB0NRA72q0FDnhcrmgLEJ2sBCQICHIq9E8CyAEc9DuovMn3Y0clPNktt%2B%2B2lq17ffrxmvfbesG3Lh%2FHIHW4KS92drZoIo%2FE7ZIE1DoAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d39134dde40805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":905,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"3670b094a24dc157f7772c0d32ab2e90","sha1":"a198125e8f82f3ece23f845d142b82e13cfb49ac","sha256":"bee2f0764b54df816c42f6df51db1aec19ea9304d2c201a781dc47858b094597","sha512":"1cc0fee2c6e141e5e6bf6ebe54355089bb6747f224972c1d0ef069f687bb666c967ee446128306d0e5aa6ceba0d9ba53853c49c6b3d3e56a8a3adf1c5935e073","ssdeep":"","tlshash":"ab11b7ecac0e29277fcfc131e45815d470a72605a3ed72bf528f410c292ab55fc28697","first_seen":"2026-02-25T12:34:15.969237Z","last_seen":"2026-02-25T23:59:43.554107Z","times_seen":3,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T17:55:43.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=1,i=?0\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nlink: \u003chttps://www.galabet928.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.galabet928.com/wp-json/wp/v2/pages/8\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www.galabet928.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wcDhHOAsCstaVhpTtIkRlQFUeuKp3l0hcTe56kAOJZutwmY1ACTqikpWsecTCuF0tBQU2aiHE37HQXl3EKLBVCAJgTS9if5b%2F9MathrY89x8UQ%3D%3D\"}]}\r\ncf-ray: 9d391345bb12805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:27.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187089,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54988)","md5":"df207ebf5653d79bdfe3e4ed0ab72f1e","sha1":"d77cdb36ef1acc3ff01938d80ded25bf916a9a37","sha256":"02b73dd24b733011f5ab10f4d798b9f79923eadc4215abe62119f6339cee5aae","sha512":"4e83e37207661c780c5f8e997da6a6079ef1f90e2b54386876d9a2d1901424bf620acf5cf15999b469d78c9cfb1dc38b8a9ba387920236902b147bf717101f86","ssdeep":"1536:VZoxa+jnFuHfhJiTCpsvrypXwBs+MPRTAg3ApIefp12neBEqJyW1DTCG06FGqiQx:Vef2hwBs+XHWQyiRSEuAP","tlshash":"8404e8a193d0643f276b837da19afb04a65a4503ce4e62d9f1fed29c87c5f4314b260e","first_seen":"2026-02-25T17:56:07.871168Z","last_seen":"2026-02-25T23:59:43.544293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":444,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 14:14:24 GMT\r\netag: \"64ecabc0-15601\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1882\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J4A%2BZ1BcG6NhuzfUhckqVoHS3RiLTBPl0PxHrW2JUNKF1kVKbVXPTqh2VZjIDkQwiKUSqJ1OfpIPrE1xyxSrbhKwXwPInkBGHLzAiM%2FzvrICgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a2cb8805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T12:57:41.822203Z","times_seen":1014348,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Feb 2026 12:46:53 GMT\r\netag: \"6995b4bd-b5b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1881\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdsLqVskJCXVEbl1cEOpmAtAfJaDlKwuXylvJElrp703xiEE5O9YYx3VchkjzjutvNimnuUIzq1MeWyXPKu5g%2FUSiYxAxfeRSDiq1eBXdu%2FJLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a4cc8805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2907,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f74050f4bacb44b594f0014217a4b3c0","sha1":"7f45d27c9185b2b4312140f234258bb76573a2c4","sha256":"66361c617e79f2f0643b4ce1a922a59cb6d4e048fa3ee5cbc2309ab826af40ac","sha512":"69aad8eb67d3eb01ce4c2fc225ab620d79bdf63ca9fb5009afeb113e725f028c80ccca020f7dd049299f3504043da7c7ec76c4780e50321503cad287ab07ddd4","ssdeep":"","tlshash":"5c51b7857399b43687fa725c42ad6a0751e6e0329ad34018db0edc8a13e1f87e073b89","first_seen":"2023-03-07T13:19:31Z","last_seen":"2026-08-10T21:51:08.885578Z","times_seen":8504,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.12.3","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.12.3 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 12:56:50 GMT\r\netag: \"6985e512-b2b5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 1882\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCjpYh7eX3btDFYGmUi5EAMX7LDp6WvfR9HsCmRHDy9yKMEdCYqqKUWKzEPnNo4kpcuFv82q1z8ECLPLEmvUB6VuL4F%2F4U2DLcEoxdcN4kTagw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134a2cb2805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":45749,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43567)","md5":"42496634dc1c555e846841a0080ada59","sha1":"9e2de8d81b0caa2745f374746c60a223c1ba27d7","sha256":"a8ff2f0b3249b1dbadfe779835a4b29346af2941144d12d2f95c2a6e505f4088","sha512":"68529399c5c478f9d4a9ce838ee0bc39e4a36e0f89e88633e4840795957f3146da15d8b6bc81e308f464dffb6bfe080bc42797fd4c3939f05259a99a562dbf8f","ssdeep":"768:mPcOrP1rhDYollnk+FHk3YCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:AnYY+tHQtBU5PTwDuaP","tlshash":"6823f96043d035391233873efad6b9082b694313d74f26e6f8ab8668c9c57d71a72e4c","first_seen":"2026-01-21T20:47:01.725402Z","last_seen":"2026-08-11T11:34:40.474618Z","times_seen":6415,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/uploads/2026/01/cropped-cropped-Galabet-guncel-logo-270x90.png","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/cropped-cropped-Galabet-guncel-logo-270x90.png HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 6366\r\nlast-modified: Fri, 20 Feb 2026 13:39:16 GMT\r\netag: \"69986404-18de\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 1882\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PjhElKu518XclHrwndt2OMLYfcmsaGUPC0Avp5%2FMkXmgSF8W1tBb9GMxsk6DmsMEdd1A9y1mYuiAJiNFLwWdCBwo5D8yhrvVbxRKdx12%2BNKomw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d39134a2cbc805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6366,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 90, 8-bit colormap, non-interlaced","md5":"eff15490c874f6fc13ae6d3e2d3d90e6","sha1":"76a69e1041cd2b16d7c54c0b907517035b98bcb2","sha256":"f3a724ccca52847766954b9bd6eb896177c671ff01062e23a437c87cd106bb02","sha512":"1f5f9ecf1c7d5adc389aeea0d0c964f201052188cb9995ba33d7db3c0447bb38344108794823f8d811fbc0ab63a81f3ba83c320b582c129617aac2be0e659b73","ssdeep":"192:JUy0DSCp5eDHTs7FgMxJf1e3vwsrx30z2P:Jh0+RjTWxJf14wsrKzm","tlshash":"c2d19fa3d9039ef147c122c24196a051dc107950c6cbeff9ee5b9a8c4f6205f4c79177","first_seen":"2026-02-25T12:34:15.992793Z","last_seen":"2026-02-25T23:59:43.545971Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/uploads/2026/02/gala-new-giff.gif","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/gala-new-giff.gif HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 25403\r\nlast-modified: Fri, 20 Feb 2026 13:12:33 GMT\r\netag: \"69985dc1-633b\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 1882\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iH2agudss5UpaslhPmqRT9dvtcL4BLW7insAWJjuaM9EjDicjF71JhlMz5nVx0haYlfl2paLyLxIJVhO%2Bm2c1p4qTKncOnIvIWAbTfMqoJrryw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d39134a3cbd805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25403,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"b9e8a37f76a67a3a8b2aed2a868f1126","sha1":"2763be8259873139ba6721aaf7b50244491e63c4","sha256":"86f5c794a880025cd42a1027b8b91a08195df6d2101c1ae81953b899e6c05a01","sha512":"3dd170b50c52a989f2fb719135183a30f955aa23e4044a570f0c67e017beae4e08e795d62ae757a9744d109970331719ac62b9c7fc145c7ca333499f243f0655","ssdeep":"384:Q/K5nInIQlHBhpn4CjZVmyufMcSv9ld4HXq/FbCfZe6gw7S8JSft/L6N3bU1S9vU:QKp/Qk8mdMcSVj4Ha/dozgw7T4uNrU1b","tlshash":"8db2f21234d4493ccd850ffc7e0674268a80a353deb966b2339fba1be54570874da3d2","first_seen":"2026-02-25T12:34:15.979078Z","last_seen":"2026-02-25T23:59:43.546635Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-content/uploads/2025/10/galabet-yeni-uye-bonusu-1.jpg","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/galabet-yeni-uye-bonusu-1.jpg HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 200143\r\nlast-modified: Mon, 06 Oct 2025 13:04:09 GMT\r\netag: \"68e3be49-30dcf\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ArvyF0Mzrte49iCoaQj3IrBUAEkkoaN6uZurYPR96kA08y05BptM3UAiV7tFUFe26QGAHZ9uu%2Fb%2BY4lBxH64hjtOulLERXsgF5IO5u%2BF9P7M3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d39134c1d9e805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200143,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 912x542, components 3","md5":"eea4f354db392f26be7ad6154ee2c217","sha1":"12f3b5f1b286cf511eda06d7c4daef292cbb3adf","sha256":"a6fe47c86f3ef30af154fde21fffb6bcc8d8b15d89527be51e106928835e6ec5","sha512":"7955b2b8d8371a501c70577e64f6afdeae1487c65ff987a355104500e98ed2c0839b8cd85f9950bf7152fd50886b13aefccc402cee6f2a496bdb298d2da78945","ssdeep":"3072:2EEHLeT1Ttw6ZR9e9QM7QZAt1FUMMK7Qqjj+TvNDDhEviWA/21eJymjqzHXUuD:9ErGSuGQOHMK7QqjoNZEviWA+IEyqzHr","tlshash":"0a141323a66bf135d30e2bf0f16ab8649612e5bd939e442dd8680d96778d8800ddc33f","first_seen":"2026-02-25T12:34:15.973751Z","last_seen":"2026-02-25T23:59:43.543065Z","times_seen":3,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.galabet928.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"www.galabet928.com","domain":"galabet928.com","tld":"com"},"ip":{"addr":"172.67.204.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.galabet928.com/","date":"2026-02-25T17:55:44.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet928.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:46:54 GMT","end":"Thu, 21 May 2026 10:46:53 GMT"},"fingerprint":{"sha1":"D9:BA:75:7F:E6:48:73:D5:BF:1E:10:1A:5F:01:AD:0B:52:B2:12:24","sha256":"10:6E:F6:70:09:25:46:E0:9F:1E:EE:0B:22:BE:28:71:1E:B8:F3:BD:30:DF:51:54:1D:B0:E9:F7:2C:A3:E4:11"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: www.galabet928.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.galabet928.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:55:44 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Dec 2025 02:38:48 GMT\r\netag: \"692fa2b8-58ea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBaoQvLdnC5PglhIF4MCW8t6OxGrgg3rTuyZ7oGripSV0w%2BnZ9Ebdq2rEgHTlug2gHBwLy2APvG2J8LM6IRU803Tj2atGczxWdnRrXD5zHqUuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d39134d2e01805b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T12:00:23.621155Z","times_seen":310885,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":127,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"www.galabet928.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"www.galabet928.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}