{"report_id":"f679a5fd-c210-4ee5-8b7f-28bd52c1c9ee","version":6,"status":"done","tags":[],"date":"2026-02-24T14:23:27Z","url":{"schema":"http","addr":"galabet2647.com","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"172.67.132.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"galabet2647.com/tr/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"title":"Galabet Güvenilir Casino\u0026Bahis Sitesi","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galabet2647.com","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"172.67.132.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-31T14:23:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"dataspot-bucket.galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"galabet2647.com","ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":173,"request_count":173,"received_data":6869672,"sent_data":93645,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"icons.galabet1051.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":48,"received_data":5401795,"sent_data":23932,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"crm-lib.fasttrack-solutions.com","ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-28","domain_rank":1905587,"first_seen":"2019-02-04T20:13:24Z","last_seen":"2026-02-10T04:19:42.461673Z","alert_count":0,"request_count":5,"received_data":2899849,"sent_data":2412,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-02-23T04:05:34.530775Z","alert_count":0,"request_count":5,"received_data":7622,"sent_data":2600,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-22T22:20:46.526035Z","alert_count":0,"request_count":4,"received_data":1750833,"sent_data":1825,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-02-18T15:09:10.496678Z","alert_count":0,"request_count":2,"received_data":2114,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dataspot-int-bucket.galabet2647.com","ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":790,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-22T22:30:31.423356Z","alert_count":0,"request_count":5,"received_data":2675212,"sent_data":2416,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-22T22:32:51.303032Z","alert_count":0,"request_count":2,"received_data":305244,"sent_data":905,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dataspot-bucket.galabet2647.com","ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-17","domain_rank":0,"first_seen":"2026-02-24T14:23:39.785663Z","last_seen":"2026-02-24T14:23:39.785663Z","alert_count":1,"request_count":1,"received_data":788,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"tawk.link","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-22","domain_rank":89439,"first_seen":"2015-06-24T11:31:14Z","last_seen":"2026-02-22T08:26:50.384618Z","alert_count":0,"request_count":1,"received_data":6936,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-02-19T01:12:38.826767Z","alert_count":0,"request_count":8,"received_data":451429,"sent_data":5058,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2026-02-23T05:34:41.901983Z","alert_count":0,"request_count":3,"received_data":96386,"sent_data":1874,"comment":"","tags":null,"fingerprints":null},{"fqdn":"galabet.winwingames.io","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-01-16T16:03:38.346691Z","last_seen":"2026-02-04T12:39:13.608448Z","alert_count":0,"request_count":5,"received_data":58217,"sent_data":2345,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.segment.com","ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1998-07-06","domain_rank":9348,"first_seen":"2014-04-11T12:30:48Z","last_seen":"2026-02-18T16:05:54.785783Z","alert_count":0,"request_count":2,"received_data":111166,"sent_data":955,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":2,"received_data":5296,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"geoapi.btcoservice27.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-02-24T14:23:39.776853Z","last_seen":"2026-02-24T14:23:39.776853Z","alert_count":0,"request_count":2,"received_data":2292,"sent_data":934,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"vsa4.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3096340,"first_seen":"2020-03-11T12:39:07Z","last_seen":"2026-02-17T18:19:30.779997Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1078,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-02-23T04:37:59.14964Z","alert_count":0,"request_count":1,"received_data":100209,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-02-23T02:57:59.281263Z","alert_count":0,"request_count":27,"received_data":1235266,"sent_data":12324,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-02-23T09:39:16.493485Z","alert_count":0,"request_count":2,"received_data":7085,"sent_data":1223,"comment":"","tags":null,"fingerprints":null},{"fqdn":"statistics.btcoservice27.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-02-20T14:37:20.243897Z","last_seen":"2026-02-20T14:37:20.243897Z","alert_count":0,"request_count":46,"received_data":79335,"sent_data":21105,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2026-02-04T12:39:13.107167Z","last_seen":"2026-02-04T12:39:13.107167Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1182,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":2,"received_data":81922,"sent_data":1098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"events.eu1.segmentapis.com","ip":{"addr":"52.51.51.56","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2018-07-31","domain_rank":186340,"first_seen":"2021-08-11T00:43:45Z","last_seen":"2026-02-24T09:04:25.795583Z","alert_count":0,"request_count":1,"received_data":260,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"galabet2647.com/assets/HorizontalSportsList-BjU3O27Q.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c73fa28cecd62ba3c31d6201e137d6a0","sha1":"613037010dab087777a8974502c79d92a15d3c49","sha256":"83b5ad3b3f3e009497b2dbde83af71ee19ab265c0027f0fb23504d2a209d2526","sha512":"5d6444f570ad2e892840f2e46a64d2d908a6989a8f5560eb63cb2058bef99bc9789030b9222e2f664de865261633e807a77b8df2f43637ec68bc118d8a3cbbbd","ssdeep":"","tlshash":"44e02bc6dc618af45a2b88efb95c24846112047cef47a671d29492281b7408bf62d04d","size":422,"data":"","first_seen":"2026-02-24T14:23:51.203754Z","last_seen":"2026-02-26T17:03:57.739299Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"31b2ca89afa369d4cddf5a19e0da8913","sha1":"0eb01d8c0bc0e6a0d37429c0bcf9218112ba4d69","sha256":"445ace4a47ff4853970c108a145562248ade8f4480b204217eba4c1f65d44952","sha512":"5f86ca42b121ff3e31c69aeeb9c22dc9432beeb108d069f804409c23f9926f656c5571ab017fc0d1b79b5b99ff856a17673adabfbd2ac857cb7fd952bf7bc484","ssdeep":"6144:vM2mO7CW6y273J5wYygLIR8Nyk7pNH08pddlmOrELkS5fenMcm0v:vTuW6y27ADEIR855VrEff3E","tlshash":"8ca41bce73d670269396f478503f018ba57b29a2b44dc89af189cce42d74a5a4237f7c","size":455117,"data":"","first_seen":"2026-02-24T14:23:51.410455Z","last_seen":"2026-02-24T14:23:51.410455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-BiJIhSTW.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"290dcee25f8e870092e0107cb9f53b29","sha1":"d4183bca37682f05060e8d1ce6d7868f860cab86","sha256":"0ef379043ea494139dc0f9b188aeea5e4a27103630a8f5fc565f4ece328dbd3b","sha512":"ebcb68e4da4f4a2a0c0f600e0003a5cf9a682273ffeb2352ed169c1e539a082b0c906ad037c92633945224fe94adcc66992a58eb154ffbdd8f137b841c348f30","ssdeep":"","tlshash":"ae5141c7a042e7f4bfe708e6429b10b074378d5cbe1b84a092be58964958752e36bf4d","size":2923,"data":"","first_seen":"2026-02-24T14:23:51.440572Z","last_seen":"2026-02-26T17:03:57.799137Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","size":19498,"data":"","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-06-03T04:20:31.901901Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"58af910ffdf47530d4c586f9b1dd874b","sha1":"6fa1b8c649e038f297f930be0d297dde892bd1eb","sha256":"e53bb2b5ed81cd24975f9e6a99bf3aa482a242cf71ee4d5367be0579c2ffd0f0","sha512":"13982eee690c3cf4d850e9642cfc6e14a08eff5a9fecbad11078db34d3408a09ffb1e2773ee2ea36dcad49487487121a2b04e0002e7dc1a796194b829d764a36","ssdeep":"","tlshash":"69a002043d4d60571616a65d4d674c0c88a78c29d4591d15d84686d81ff517e125fc3f","size":64,"data":"","first_seen":"2026-02-11T12:38:52.817944Z","last_seen":"2026-06-03T21:18:21.882352Z","times_seen":3793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-04-15T01:21:42.763559Z","times_seen":11136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FavoriteGamesButton-CMayIdHJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"272697ecc5d859b61a93b0b0508d2361","sha1":"0a0782ab4013707f27c3542fad98a4275be02566","sha256":"c28bf4ed911a1e3d95ee88f0294ca02d9018275938aa0d5ce62559f21ce18d54","sha512":"5359a5b24b62b4ee9bfbe3fdef282c4e44b9ccf8b2ca3dfb73138287b4bc2abfb1f94f0daa37c4e8ceda755456e63bbfb771a5f8e884683a664fc97e17151f1f","ssdeep":"","tlshash":"04e0ab0be4c9e2fa2b826b911607c1282c2be4bce7a8e19050de04643d35597c81e96f","size":427,"data":"","first_seen":"2026-02-24T14:23:51.182796Z","last_seen":"2026-02-26T17:03:57.838455Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__config.js?v=1771942827176","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e7261456f5abea81d7523bd45bf9c08","sha1":"c769a950ab481ed64288bab6f998bbbae1d52cc4","sha256":"5128a0dec3d3e8442b757502e33a2adc2225b1cb5e29887fca5ddc391e6b4830","sha512":"c548c96bdea284ab95c4229dcffdc54677f58cd80542f91eeeeff524dc54aef0d45c34275a89612918895cf6a5c559f23c262c2d243ec388503615af2248512c","ssdeep":"","tlshash":"58e06820ed50087203256426541a1603391ac1cf0a0dbd0632e0186c9f8527f8db39ba","size":361,"data":"","first_seen":"2026-01-26T08:13:17.653624Z","last_seen":"2026-04-26T13:53:22.515958Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/LiveChatAdviser-0F1bzkHq.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac763154c645295c6b3cd9919c57569a","sha1":"ec6c1ebe026ff72a7b1588ff08ac5acb27f35609","sha256":"c7bab1e70362eaef1eda0b1acecc8ad6cfc72706f66f8ef2189f406be6cde7aa","sha512":"7378011e2960c6cbd8d4b05aebfd3ef1d71a399eb5bffb8b8693169d96d3af88bc41ceef1f5dda4e8effcd4c46c5e8a2d8face17a9a2bf31d5a3dd2f48a425e8","ssdeep":"","tlshash":"f211ef96f082e3fd66a7184dd69a6047600a4ea4d27d0db6807b15641a6ce0ae20eed4","size":862,"data":"","first_seen":"2026-02-24T14:23:51.27206Z","last_seen":"2026-02-26T17:03:57.833077Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/BetslipButton-tfWg31Ws.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eac9758e461b39157cba1601935dac2","sha1":"a98041afc6e405b1feb514d42441787b6eb716f7","sha256":"c93e12cd7a9021b060876cbe4384088c2c2183d1617cffb509a17dd883f51d04","sha512":"a91e554873ed7ff7c4ae676e2fb3fd11f331d987f097d1b82f7ce55e45d95b1e99c534efee805ee87f54a34d314b8158c9c96f8887d987a4df027f9fa1c89d1b","ssdeep":"","tlshash":"16e0ab478888c2fe07425e82110682123c2795bca250e69180ae6c657e38646c81e52f","size":418,"data":"","first_seen":"2026-02-24T14:23:51.354145Z","last_seen":"2026-02-26T17:03:57.763051Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/TabItem-zqZt7Nh0.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7399832e6d7898196fe5a4b445f58dea","sha1":"2f4b483b30eadb90910b318b43c8b68aeae46a35","sha256":"4d9195a229d1433eb80aa41cb3d5a1d41e315d57081e871c6ba0d6069b42159f","sha512":"103e8255fb328e1f8ad8edd4ec6dd2a1c36b1533e03b5286272b5f2f6c53ced739ea46c254fbd7e5008e6475b3e81ac6ce268df769c0c60c8593546176533ee0","ssdeep":"","tlshash":"25e02b42e020f3f5982b84d6d26ed4c7761249dcda9588e6e0a22054072e521fb4ff8e","size":413,"data":"","first_seen":"2026-02-24T14:23:51.086077Z","last_seen":"2026-02-26T17:03:57.833559Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d21ad1b.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1115e2fca9841903408279b7425f0389","sha1":"caabdc62a38aeee323b94ce629f1c12f260e7353","sha256":"8ae1a405e5dbd536b519694e1557e6b6ef73e4e679da67cf506cf43ff0f36ec1","sha512":"ff0e62573b59fbf6d2315eeb340a8bd798b0ac2a793b849665b46bf06f5fdbc774a27aff3dca3fde1c06b05cb8b5da46433ade1c441be88bbf0de9b2ebf6b9f8","ssdeep":"","tlshash":"d57193a8f195fbf98603e75240ff5322f0347955916ae025fb70caf803d44da6269f1a","size":3572,"data":"","first_seen":"2025-04-29T16:20:56.245573Z","last_seen":"2026-06-06T02:28:37.788447Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8e1fe1da5a4b19204be72c5a9043700","sha1":"a4dc076a6faf08b29c1759e5120e59533ade6b0d","sha256":"dbdd116306d8cf37824cde048f77aef495328fd09c7432638d0772c4e96fa514","sha512":"eba38b80bb3b6d58c5d99aad304a4ac5107afa7503028a8d4652ca3bdf1ce0273b261e8a9c372d3b8f4f15e1641f1e10575d2b31a0a79bb53e070928202e84ef","ssdeep":"","tlshash":"ce1142b21a15e1390b720dd0e2ffcab5e482701cf15884d8a401eac86fbeccbcd05589","size":1054,"data":"","first_seen":"2026-02-24T14:23:51.340293Z","last_seen":"2026-02-25T02:34:32.486712Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FastTrackTracking-BNZErIta.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1861326333be5ba0826cb14fc624519d","sha1":"203f8b49b38a20a34c025ee2bb55b976493a73ef","sha256":"51bf4e13eb7ae22577f81b7802fe6f66aba230e326f393a6593af81d306e496c","sha512":"8b7e06061c38400895b375cbece5a404410a986df6ad8dab6b4625d6bee1d6de78743cf69dc89fef75ca29971ab2b267bbefcfb468156737f1cd3b6e4fac0edb","ssdeep":"","tlshash":"1721530f80d443b478804d8da3dba261993e9975711ec4e1f07a0bad3f0ca66839ac97","size":1322,"data":"","first_seen":"2026-02-24T14:23:50.96774Z","last_seen":"2026-02-26T17:03:57.835165Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/JackpotPoolsWidgetContainer-CG5gkeJb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9c74fdfb9e5a74ebd6a40874d59f09e","sha1":"ea2993749891f4acd6ec817c2b7e543863bd3a6a","sha256":"bdfca645f493e6d1b5fc8fc135b986e6412413d80d764007c65aeb258abcbcdb","sha512":"75ec153ca1d34ab5fc39ed822e85ae9ad198813cf6947803d010b12a4802ace30fe5078ca669a875115285e13c4561d7d5da396c6531089ff099373746d929e3","ssdeep":"","tlshash":"c8818617e01ab3fcd8dc04a3502f910a2b7e0abdd75605e4d06e08240abc85af25db8a","size":4061,"data":"","first_seen":"2026-02-24T14:23:51.150408Z","last_seen":"2026-02-26T17:03:57.723683Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d1a4600d664a1e48bf39125709fcf16","sha1":"d905bf8d6eec7ccd135adf0cb50e4867d50f902b","sha256":"2ca4e36f342fa14396f7949a6b7e9546fd9511d2eb95a55cc3d28439e5feb9b4","sha512":"349dbc8fa23f7a9bd7535a1a74a95ae0d8a4434cd46fc382ec236c60488c90b45b0a38f83d4785f778654ba47bfd0b1ac2e1f859ff55af6c15c17c5149ec0ee1","ssdeep":"1536:EnCZo5ri/lsivSRciYbey40VjnjuSwppTPSD18wgnsG9:ECZo5u/anzy4Ynlp8jsm","tlshash":"dfa33ada7282b03453f786e7a17fa212b3391918340d8420f17ced6a395a987d177f6e","size":99461,"data":"","first_seen":"2026-02-23T11:36:50.098336Z","last_seen":"2026-02-25T11:20:48.471739Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/useNotificationsProvider-BxGEeL4T.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2d9d5bd0509144a8bc2d18c111af42af","sha1":"ad47bfab28e65d8364ad194fbad23ae5e79a16de","sha256":"2546dc615d6b471b0a8c83a0f9b156a345134b4484caf6574eb58c5954ba9100","sha512":"b5cde42dac7ae4b2a865530dfc69039ee3efe535764378d517e156747a03a735449ca23f15fe699894692ffcdeba8bd13ef0f84fb297d1605496ddb7f0a13144","ssdeep":"","tlshash":"c3b01213884013f061010cdc11149c294f31483c3381cbb05034811c11e80858b0e901","size":92,"data":"","first_seen":"2026-02-24T14:23:51.043147Z","last_seen":"2026-02-26T17:03:57.849061Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-06-06T12:08:50.150137Z","times_seen":48712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/tr/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25968e8050b03a228b4d547826b098c6","sha1":"b15ac3dce03be69ab8e198afebaf9cf761cf9da4","sha256":"583e20359cfc6a64154b601fc47309be1e57fc2b89434d8a7649445fc66af0fd","sha512":"d2256261787b021c3ef34b69e3509640f04abd03353b7dbea1d8f07211764770e8b0a4a1ea015475e3c326d1fc797d8191b87834550309076754f8b1213dcab0","ssdeep":"","tlshash":"89e0f1e77817486a749f01bd6bb5902431832119640dc922fcfdd4241f60693cc0e88c","size":435,"data":"","first_seen":"2025-12-24T22:39:16.413128Z","last_seen":"2026-05-22T17:22:58.341014Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/withPanelButton-h06qeZmb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc9a073bc116168bb1ccb3db6362b167","sha1":"2d604eb5defb9d3de829082b95ffdb14f52dd2d2","sha256":"b2a956b6195a69a32dceb99f54f6ed7835b54ec4a5c855ca7bdedd26536e97b1","sha512":"05c7a6f302c209e94029ef151d80b3ee05d9d20e6398ec5a3515584fe9bdab6cc7a305803e23110d3233ef57f2925ace9d82d67f74be4b530563b2f9a809fa8b","ssdeep":"","tlshash":"5311fce5f584a9b2e0c41188577b2cb6759a32c9dce114d031b6c8ea5fa80489a1e9ae","size":1089,"data":"","first_seen":"2026-02-24T14:23:50.979064Z","last_seen":"2026-02-26T17:03:57.873198Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","size":6791,"data":"","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FavoriteGamesContent-BWhyATt4.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"520492d6f1f44fba5d1f5afca843fae8","sha1":"f325824eb34b56b1770f80963c772d8f23321133","sha256":"c7d7349a97d49fe38ecb60e29f790b95bc64e28929fcaf25d26507769c95df54","sha512":"5e4491318fc800e80ae25f817e14c02f4787708539b9ef5ae96597170f432fe6a924209bbd0450631434b4c53d711a93ed68c09cca99a30f893e60eb80d54508","ssdeep":"","tlshash":"5151c51140415ff8bb9e5eda2e27c064196a438ca286c17da87c4f3e3818640713bffa","size":2755,"data":"","first_seen":"2026-02-24T14:23:50.928734Z","last_seen":"2026-02-26T17:03:57.788556Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"695f4911433476e3679770c9f5a73c9c","sha1":"f4384da4bdd1bad13070e6acdbdceda93b740416","sha256":"e3a8e80350266cab527123ef3e58703488c34c4a95ae3d88caae76c284e7279d","sha512":"dc1310e828001039d37dc8919c39c0d2035569d66b4b1a7a3cb976247339a009fa3387a5e2021642eb263999896c40b1be38ecf805e8eaa8853c1619ae490969","ssdeep":"","tlshash":"d67000083c0820020023b020030f000a8223002008a80000080080e00e3020e0202888","size":22,"data":"","first_seen":"2026-02-11T12:38:52.827015Z","last_seen":"2026-06-03T21:18:21.880889Z","times_seen":3791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-04-15T01:21:42.632515Z","times_seen":11130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/bookingBet-BkIiazay.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ff9453e086df71df36b0074794be5555","sha1":"26e004575c1a346c510ae5be3a2545489c7e5f90","sha256":"5d233e99dd55cbd6c4a6acd81c566dee1cb146166fc41726489d64c6b6a5ed0a","sha512":"309c579276d7680b59861354b688536af34279823f9396e3c5f122059ac7c50ea0b93cf70bf48989a7bf66a9915f7ddf366e722d109c72137e49752c1e6f92a9","ssdeep":"","tlshash":"2a71e664fd2090be67f2317df4de7b426b2c4ba871a19a40fb6b9d0841848cbb534638","size":3796,"data":"","first_seen":"2026-02-24T14:23:51.288648Z","last_seen":"2026-02-26T17:03:57.896099Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/PromotedProductsWidget-DSoPzSu9.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d25f49c76bf72dfb92284c6c8f2dc43a","sha1":"4733586af980420660c1a628ce020a362106b16e","sha256":"2ac7c3f2e2427cdc73697125a1738aa01a5fe580bbef638ef5212dd8a5294adc","sha512":"d86d81adbadb6bf8b8413a53dd5a04b75efebeca14413a687d0bcff91e54809a670e26d12566633c3048257c0e7577073444220d4b0890e9ffbdf6464d43f84f","ssdeep":"","tlshash":"d2415443d535a2b9f23a5dec264210c43c167d34d5b148a5a0b7bd1e9039826fb92ffc","size":1952,"data":"","first_seen":"2026-02-24T14:23:50.993184Z","last_seen":"2026-02-26T17:03:57.830859Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89134e892271c99e4be394e757691c0c","sha1":"7e8e00a94406382ad3006aaffb6ba522a7172077","sha256":"d09d7f32db5774ee049fdd2fce086b87d897c6893753091886a8706e9747c9cc","sha512":"df656841a2fd8daa388e0345bb36bda46f568cb5b7f05cf9b10673227ba36da20c35d3fac4f96edc411475e93805cddbd8f85c545cc1d7c41aebbfcb9712f089","ssdeep":"192:0H9MawRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:Kwb9HkS316xAFKpLZEh","tlshash":"6632a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","size":11888,"data":"","first_seen":"2026-02-19T03:13:10.639989Z","last_seen":"2026-04-15T01:21:42.639775Z","times_seen":6484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/GoogleAnalyticsTracking-DmBvxHyZ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cd4ae15064f7954689f3a7849a73b53","sha1":"fb7422dc654ef8bb8c8bc1b5427a557d164b7f0f","sha256":"243564d221706adbe127ee98e3bceb0859347bb88ebafd4c342e67e1d1609b6b","sha512":"546ce01ea7b40447f0a0ae6bc1b4eebcb7d349bde18015cbc22a079eaa3d219a0f4585413a77ddd79127711a864164951fa124040f10b930ca774a14f9b368d5","ssdeep":"192:bfWWYceR0SE+m/CTb3bHXCT76hoxGE0VK7D6L7kBNrnPWh52Lz2PM7mBE:jLYcoE/CzCIEP3Byy2PdBE","tlshash":"1152b55c32adb0b682df6054487f720bf1755910a458f480a265edf46ef8caf026bf36","size":13704,"data":"","first_seen":"2026-02-24T14:23:51.075102Z","last_seen":"2026-02-26T17:03:57.730432Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/CasinoGame-9WoCdzkb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9394597a4dd6f86f5e43d734a073d194","sha1":"de0ffbb62bf980a6a7693d17001195f0ca02500d","sha256":"3d3c7b4dbc38c7c892cd346771c606bfbcc9ccf8d621bc8f4396ac7eb76a7227","sha512":"9c17ba1fbc81d094106907fd547a69faf5febd87bc4c795dad206094a9d355c27d89cdba231a68f340c25d1bd1821343fedce2a70308c9ceb3aa63883383a323","ssdeep":"96:jx1BM8Xcl/jL5p8u+m+9Z87/ORx2CZZ9Lm7nxT+xmZ97vaycesDa+e:V1BMJl/jPIm+k7jKq7nxKx005e","tlshash":"f7c18504e014efbdb8360cca986f202978191fa2de198565f47da839367c11db627bdf","size":5905,"data":"","first_seen":"2026-02-24T14:23:51.033613Z","last_seen":"2026-02-26T17:03:57.889854Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/tr/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab5194607d8db08f9abe85264322389","sha1":"105aa6a7c0d330d097cc7c9f6989d8223f23adf1","sha256":"3728c769109ca09c38155c787c6e13da31835fc34bfc842f7415f3d3eca691c2","sha512":"c48df33aa42a930e98ce83dcaf1dc59293d777ed22f746eb7ea8e299fe1622aec1f07ee914f18decfd1b998bcb691f84f58a5219a5e5ec1c230f9db6a331de8d","ssdeep":"","tlshash":"6ae0a31d1c1eb46227b419a8e237895530d5130529462655cb87d4543971cc554c6a4c","size":423,"data":"","first_seen":"2025-12-24T22:39:16.410899Z","last_seen":"2026-05-22T17:22:58.329852Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/___vite-browser-external_commonjs-proxy-A4ecGj_W.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b0079630f69a9e2cdbe4b40abd97bff7","sha1":"40cfb09a153adbed8c82a17367fd114b0cec85f5","sha256":"63d661545d56e99771af0791fb8d64df0442fa66bf15c3cd130a4b9554809a5b","sha512":"df1a0c04bb298ac8e6b2bbe3f4b791a1d97597cebd1dfe507bebb9c6024dc97086dc2dc32eb2eb4add9184364d7c1ab3ba24eb3a6024a0c522b3963e0735fe78","ssdeep":"","tlshash":"63c080451a54ecb052871d828a159402d94c8d6d73f4f9d1bb4d8d55060258b627cf57","size":178,"data":"","first_seen":"2026-02-24T14:23:50.964464Z","last_seen":"2026-02-26T17:03:57.910946Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/InternalDataspotTracking-DB2Ht68F.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28d8d80edd5ad66eefb0fc684755c355","sha1":"ee7ce398f30728ac54a405da4ab117bcc5a693e9","sha256":"2e8b31d05474087678a43335a1ae8e9257fe9a1a690b7d7fbe36e74c4d12c5f2","sha512":"c7a4ae165f4e0f5bf2b1331d3881ef08b3940022b8a5a9319657b7ede16edfdb12b37f16020ee2bb3ba6f2e1e7a7ee9064c197d5c51b121be530edba74832e5a","ssdeep":"","tlshash":"f681741fd83c08b070a0cad9583bc957857d3cc9a590d8f06037de6a660fe09d6f1a9b","size":3942,"data":"","first_seen":"2026-02-24T14:23:51.294039Z","last_seen":"2026-02-26T17:03:57.827934Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/ButtonWithAction-CMXROGdJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf13c23ae777d4ece9a23dfcef5f8289","sha1":"7978978fc78a9e74c7ecb60046979c7ec32a8ee8","sha256":"19d6a58feecc49b55a1436e210bd8ca17e7780ef68dc2a3ca293af206cf4e296","sha512":"4c2c9eb3a48494f7983f30743d92ed973b84bffe515172c826831ebfa850de894088e30b0a294a845ba0ffb278d2853b40a5035198d4925c83482e2a33a3dc11","ssdeep":"","tlshash":"67d0950f98c1d2f503c1ff90512bc1112e16ada0f7e4c551c08d54543e3165ac42e637","size":267,"data":"","first_seen":"2026-02-24T14:23:51.062944Z","last_seen":"2026-02-26T17:03:57.797516Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/GoogleTagManagerTracking-D0YNYPoP.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ba959810d4a9f7754c1811a32e116a2","sha1":"4ea9199a498728401fb02fc7a9f9b5705d7e96fb","sha256":"e3cd4a119c74e94648e229b1ccf657d25f63b948059b222f30a4adf5187c091d","sha512":"2ab8952eb3f12b16f8c4ea3d244d4da7d41281c83bf2a36a1a7b2a741c6ef5ad977478d3ca25cc1fbdbd8b60c91df2ab09096f4788a82d5af08b5ee30f5cf545","ssdeep":"384:oT5rzmJK7O+CQsGPsR9W+/kyMVVrkfknk/k9ktg7riGw7DUe:WrQiO+FQR97/kyMniKCuJ3SYe","tlshash":"f36295d7faa558a0b0bd4de81f9281c23ab1b56af58144707c7e3c0c6378e0af19596d","size":15790,"data":"","first_seen":"2026-02-24T14:23:51.041512Z","last_seen":"2026-02-26T17:03:57.813524Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/tr/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-05-22T17:22:58.325768Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/tr/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"73b8b49b4f5dd8adfdee877cd58546f0","sha1":"9f41caaee4b514ed017a6258c4a2166e6df5fad8","sha256":"b8ac084bd8c078db89ea019d31398c712a77cf27480be3b2aaaf7754615679ad","sha512":"b0dc33f21d8d930095dd34608c4cd501b4cecd139e1854fb636bb4e0d1722b22bda57425ebaf257860fc364a6ed9935865d391026a55c36bd7cbad695321d11e","ssdeep":"","tlshash":"6e4120b937867cb200f96633d6af771734f5d071d4018c10272adc896ab9d6a41a7c6d","size":2178,"data":"","first_seen":"2025-12-24T22:39:16.422871Z","last_seen":"2026-05-22T17:22:58.334241Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/useJackpot-DIZu1EfL.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f51e23fa741958fcc0acdce4b55fa46c","sha1":"6c5a17ada15a2ee108a351f4e8c6b7adb9a960f8","sha256":"7f255dbd2ebc95805077d7472e6cd99de2b6a488a4b6de2e3a50d6fa20a29d52","sha512":"2208a19286c5e3159732a8e30c75655fbd4bbd9fbaca53ea603e91996901533b4fefb57d23a5e7a859edacce3dfb03b856226dbdf2ac6d159600f466a254d577","ssdeep":"","tlshash":"8621264e5049e2f8f48988f20022537b7b3c3f29b590e0b094ed5d6da269d96fa30a46","size":1321,"data":"","first_seen":"2026-02-24T14:23:50.971725Z","last_seen":"2026-02-26T17:03:57.940737Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Tooltip-CV9gl-ox.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c664a5ff794ec2d4923355276efa0494","sha1":"024efb4f2181efd35ff7b0996e3517db120391d6","sha256":"0544e8134a6142b6b1562ae0ed7f436c4432371c51bd27b2d4ef7787dded9749","sha512":"7e3e1f83336d26f2e7024b35825c268d4ada8b770e4a4bbfab2b2d7d160dcea410b775fcab5f563b66fb1767aca1fa53e891581c14e489fc1529c703f82cf51a","ssdeep":"","tlshash":"1201f646e032fbf4e17754db142d966d7253266cbe2f58f0a038058f0ae4984d317b8a","size":820,"data":"","first_seen":"2026-02-24T14:23:51.012578Z","last_seen":"2026-02-26T17:03:57.835687Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-06-06T12:51:01.652187Z","times_seen":43445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","size":10938,"data":"","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-05-27T07:42:34.869974Z","times_seen":26442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/lodash-BtsIEKKa.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5bc7777b8892642f23cd66c6e8d340d5","sha1":"95ebe4b13c3fed94f7028355dc49e2d6ce00388e","sha256":"b63e578e7a1623b8704017a97c4c4a2fc9893e75cacb4036d7a44e0c4130d890","sha512":"7055ad31472662e8b5c146095854ace0e9c9ba9da557bc6fdb31cf77082a158465dd5eb9144c3c16209bf8feb546b15556aaa0449a60365430434c01913f7031","ssdeep":"1536:KR0fO7acP1TyOF/Lkj1hvbm5889266e0YRbIfY47ePu3nVd7oa+i5DnIp6EvIjLv:KScPuV/87IQ4Xn6sjLeN551tQr9M/q","tlshash":"74f3a0c835d3f4a283a7287440bf084bf23dad65a84cc554e1aae0dd7db8919c277e6d","size":165432,"data":"","first_seen":"2026-02-24T14:23:50.996294Z","last_seen":"2026-02-26T17:03:57.824337Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324696,"data":"","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-21T03:41:36.073067Z","times_seen":12668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/DisabledMarketEvent-h1nKsvD1.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cafa2204750e6c428d8d41b6352c085d","sha1":"c9a9a7cb6e53b2302271d6843c7be573c05b249c","sha256":"24de6c529bd7bdafa022cf861a72397ca443c76bfa60e98475c9bbaa32d2ecf3","sha512":"1cf092dccfc5de91708958ba521a58df056c8d34bb1b490e1e12418e6775872817a2e9be50f976b8a0de0f97b09043a52096b7df9b425a86c5d4d384a37efc14","ssdeep":"","tlshash":"df415469e3a0fb7d653608dcd33f1a2a740906b1eb650992d07e0c3d1a1814e751ef9d","size":2432,"data":"","first_seen":"2026-02-24T14:23:51.276124Z","last_seen":"2026-02-26T17:03:57.830269Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87f83aeea14051d9edd97ec3dd41fa0e","sha1":"8649c359a630d1c55eb268ff051d5a284ef7587e","sha256":"38a072ee28e39fadd2153244a3f0a48df473ce7d8dfe16e2f2fcbe5d9cd0bc6f","sha512":"c56e03220951ba738fa2f29bec6d02b1de5ca769f1f41c39ff3f12334b16d0a82db78487c4e4cfcd8fdfaddf4af6b923c725af335346028224efa849bc140eca","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DZSLi8","tlshash":"37822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-02-19T03:13:10.613764Z","last_seen":"2026-04-15T01:21:42.807167Z","times_seen":8478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=ff83b5d6-c81b-46ff-a19f-41e5f7ea1cdf\u0026version=227.0.2.32.102.53.2.3.2.195.2.8.3\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3707024f02c31646c59ca2681cece23e","sha1":"f2b5b76398c1292c4f817830e5d32e680005bc8d","sha256":"7a50fff44b0a1bd6ca04b691e74a5a12f110a722e77a0e7eb483ec5e2e3db8ff","sha512":"ae0cc2308ef560beada74c0d52503e50ef5dafb4e75a6470e75362fc4d8269c15b028f5e96fbf107b43c2ec3e0018acbacde1e5c2d6ab075195f035f82845139","ssdeep":"96:80hUsXhUA4hUwhU9w3acJgt017gWrZSN+/9YXtJ/xN7QcGIIKTe3+/vCaq:FGsXGA4GwGigSZTqQ1Ih6iKn","tlshash":"e9c1552a834fc8bb7377915a62cbb60f31184179b5f8593fe474ca70a2861c7d206d9e","size":6042,"data":"","first_seen":"2026-02-24T14:23:51.205391Z","last_seen":"2026-02-25T02:34:32.57723Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/tr/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"932d1c008400401a55681904391c206c","sha1":"7cc9f4d6461805e1878406a830a785ed08d9adbb","sha256":"24cbc4e4b2c15b32036fbb84d653cb480e0818fda8318d2a806d8c3e8666dcdc","sha512":"06be73e2b9709f0164075b7fe30d5f2c03288af4d97b5eac9c0d77cd04b238efe0bf6dd746c6c9063b2f2edd00fa981d58769f76a1439687e7b0582a4d78167c","ssdeep":"","tlshash":"b421d6e238630473061625f7a93fb188b479341e2e0dd821c04fd9a839a9fdf81a3a08","size":1405,"data":"","first_seen":"2026-02-24T14:23:51.476805Z","last_seen":"2026-05-22T17:22:58.331427Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/DepositCountTracking-De1I4Mce.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2045707223a5f38768732a2b5bbd3ba2","sha1":"d5243003260f5bc1b15ebd2265ea7c8e7d94cfda","sha256":"7c77670e6513887e7a5d0931da2f6cd0c40820dc4f6a04f9dbc342ffbb83901f","sha512":"4369d6ce9fb4b1abb3b82c1679590f2293e7953da296dc18c75043818c4245e43e04df6f825843431822700cc874e547399839227d5630bffebe1da8bb36e106","ssdeep":"","tlshash":"6ff0dd576878e2f58a892a8472c6a8a367f0a55cb956c8c381bd8d4a0208002e4dcd1b","size":645,"data":"","first_seen":"2026-02-24T14:23:51.429292Z","last_seen":"2026-02-26T17:03:57.814227Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/SmartMarketEvent-CIsZCpQX.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f3521a316d53fa50c2e0381363feea63","sha1":"ef6cc843f6317261047300f861007f341b630c5f","sha256":"9a19b1d16ffc3ae168cc81796555a5a30f33875120447d64b6e5bf0d1f1cc0ea","sha512":"cddae7eec47f003557983c216afce6b7c676027eaff33b7433724e29a41398528363ed9be78486b068174c44719c49ed394238ddd2e816b53e04addce34c096b","ssdeep":"","tlshash":"3401d0a6e85172720072ccbcd2109b43961812d3cb710255dddf8aba7bfc86e939df19","size":803,"data":"","first_seen":"2026-02-24T14:23:51.208759Z","last_seen":"2026-02-26T17:03:57.767639Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/usePriceChange-CQ4NeD1O.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d734f3ff02b9a46256efc81b7db6485c","sha1":"7373bdc8979407b107b3fc9bb89d613befe67731","sha256":"fcd3434c3c2ba621778d372f19f8aaf5cb131adcac607bbcd2a765cda41ff091","sha512":"321e139a46f487a92e3a04e3f4ae7c7966058360ab75507b71e10bb3cb651faf57d4e0ea49bceb28278346ac20cc9186839cf7fc1909527b910069f62b40f8ea","ssdeep":"","tlshash":"9df05cbe54901823945f0cc8c26486571fd126d56bbdc31eb230c82d375c9af0a6ee66","size":470,"data":"","first_seen":"2026-02-24T14:23:50.894874Z","last_seen":"2026-02-26T17:03:57.782605Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-Dm17uEDJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa15a3716deb2c818e694c29f82d9757","sha1":"fbbe307e85357f8404e2555b2896f8aac7ebeaa0","sha256":"ac64b215d95dcc20f5fe3ecfa23ec65abb79d2af76139a4732edcd39445f136a","sha512":"aef0c5357b1438cbce28bdc72147cfd65e40f6e5b5a8f58287e51fce6cff4ccb171914d2df874a0c9f071688833922353ee747fc13e6faa4bfd38a1a25e8b10b","ssdeep":"24576:cWVkHIx9sL4CFLHodjJhtBPZ2d0gPGYZYqjmsKmZiKif3ikAXEt70VDbyzWiQnu+:VVkHIx9sL4CFLHcjJhtBPZ2dPPGYFjm8","tlshash":"d1358e85b155b97997b709e560af0102b1381e04f40dc8a0f17cddad29bd849a2bbffe","size":1136380,"data":"","first_seen":"2026-02-24T14:23:51.478462Z","last_seen":"2026-02-26T17:03:57.990061Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/NotificationsButton-pLBpik3l.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9b056a32d1ed76e431c79743fff40d0","sha1":"991812d257618219734da63f7572df103c290922","sha256":"1d39a6add7ab9c187045bdbe1fe951cd7aa476aa5df81ad0e50ac2a876c40934","sha512":"058802b490279b15a1dc08c0bfccff599583ce22b9121453e2282443bb321ec4e51145d312ccdf1d58cc0d7ed07506b8f89c3abcdeb726bc57778cfcdeeba673","ssdeep":"","tlshash":"aef0264be994d5f417c25a11623bd0163c3ba96cef4a588000eb1c591734116c81f55f","size":558,"data":"","first_seen":"2026-02-24T14:23:51.194058Z","last_seen":"2026-02-26T17:03:57.749218Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/if-defined-CWaLTnLW.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","size":53241,"data":"","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-03T21:14:05.348177Z","times_seen":638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-yvd_ZnLz.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fba2e1c245c140f4c56b555946eb95d","sha1":"e15437ad7685e61f87289d14a4c8b6c509e737e6","sha256":"e2fc3b5224d0d5e9cf9b6055ec32b340db14dac24312e4652c31eea4484784f8","sha512":"1c97606c460c23d83456ecc27d5ea0e862e10ca933a194daefa3f4c75c665b128639821faccceed7bcec42921a1ec987579acd0f0894019b9ec4dcba59eba281","ssdeep":"3072:m1waIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:MwhFHU4HNwFH7MoOWexZFHV","tlshash":"bff34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","size":157556,"data":"","first_seen":"2026-02-24T14:23:51.093868Z","last_seen":"2026-02-26T17:03:57.73553Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FeaturedGames-CmnWY5V8.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e24344281a7fbd4a9713273199c71772","sha1":"31949c747aacdd74360d42c5bdef538b9b1b1ef7","sha256":"cd4bbd4ac6d8c15d2e0161bbf733762f872971bef3f330f61722203fb0709294","sha512":"55516c7b75aac53acd092be82e3812ca3ed64b29355dce7d9867795b332110debbee7d5f7a536b5d6e1df37f4ac737357bf55bc82e733d0934768b6de87b77ec","ssdeep":"192:DjWt/Fh/fNHPEwDG3Qo62p7c0mhcMO/b2wL4Ula2yjRC:vKtHP4Qozp7cjhAI2CY","tlshash":"36f1ea0ae010fa7de63b49e7753f6104f47a06d4e7150890d0be6e2919e5246733ef8b","size":7906,"data":"","first_seen":"2026-02-24T14:23:50.903051Z","last_seen":"2026-02-26T17:03:57.839197Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e62j0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"611d3581db154eba9eed6f2fbac966aa","sha1":"a78b8fbc289e3fd3614fcfb283f88b0a643cbe5f","sha256":"e423ef402aa5f42b014a40b3a472aeb7c384ad27481ec459afc82f40780ab106","sha512":"7452fda28383f7cecf0e76dc7110d464a3d28973b0d08e6b11bd0a7d355a04af432dade7664a3d70a8820e03360a7b2409079d31b8243b68ec2b42392e76019e","ssdeep":"6144:d1mO7CW6y273J5wYygLIR8Nyk7pNH08pddlmOrELkS5fenMcm0v:DuW6y27ADEIR855VrEff3E","tlshash":"4ea41ace73d674269396f078503f018ba57b29a2b44dc89af189cce42d74a5a4237f7c","size":455039,"data":"","first_seen":"2026-02-24T14:23:51.282321Z","last_seen":"2026-02-24T14:23:51.282321Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-06-06T12:01:13.181049Z","times_seen":25000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7a6e8efaf04f2b0d3e221d916264d960","sha1":"bc33aaa4f74b7f2dc7e5e921b908f5db39edf435","sha256":"e5b9bfe25cd0a789f5ee67f386895bc3dd2612c7920955ee9eef15dfe952e5ac","sha512":"b517305caffd7e3a413126439397f237525db362997bc55f33f6a59762edc53ab34405e79f594f8d9375cbeadc7d2203794b153633990bd347836a63a57f2f03","ssdeep":"","tlshash":"2d7000283c0820020023b020030f00880223002008a80000080080e00e3082e0202c88","size":22,"data":"","first_seen":"2026-02-11T12:38:52.846935Z","last_seen":"2026-06-03T21:18:21.862346Z","times_seen":3792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-06-06T12:51:01.670471Z","times_seen":35798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/tr-DNMx9v2O.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fd777bf8093133bb5a1287bbc2b7a38","sha1":"e7dff7de238b28c10ee258a42fdbcf4c836129c1","sha256":"f3d64453462e4b3cab922024e5433aec52a85ebc8ebe805bea754142a074d3bf","sha512":"0101e21f6937710e2cb6d7a2a8a3c486e1f5551d293e734b62f283fb4651091180358049a6e655e0e2d63048a7a40c5c2dc71b78f41ab1286d2827a266e91707","ssdeep":"","tlshash":"2431624d2906eab2870159878c2f5f44f80d6a087136f5659be4d461ba709ee807eb3e","size":1459,"data":"","first_seen":"2026-02-24T14:23:51.318307Z","last_seen":"2026-02-26T17:03:57.781582Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-E_Qw-LwW.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9a5934fdbf3896c23908942c6ec28e8c","sha1":"819bdac227d7bb6d8f065468a0f65ed6697d3132","sha256":"83fa3f48a7e001a7d28471b096a8806e83653854e7aeeb15c4dd979cf31ef3a4","sha512":"5cc79da26050a6c76f22fedbe2e38373849eb51337ed406c5d035935c348268dbd172717a209a97b8388223f9c8dce07018b7ccdfa043716b518ebe1fc61663e","ssdeep":"96:q1SCtCFV0h7FhpokS73sjlsv2InwLRiTvHUgAaQKFJ0FdWpA6u6PEDdxrOq+IHWE:J0ljijHvN0FdIuSEDdxP+Vj8Eu","tlshash":"ebc1a65631907534c6d204a6914f82aeef3e7638f00f50a0b23f9c6d3ba1115daa3ebd","size":5948,"data":"","first_seen":"2026-02-24T14:23:51.109809Z","last_seen":"2026-02-26T17:03:57.724952Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/AiPromotedGamesWidget-DayfNQl4.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f60b4a6a3477a15b6c0c4006e622406d","sha1":"52903e538502c20f1b9d4963f5a86007e6b79680","sha256":"7c30e8e112ab68408fd5c004a111993bbda00f5a3821108446d5d76399194cf8","sha512":"353db56b85039292e147537b1f6459435e89d1dd703016ae61743e67f912dfb38f99ac4831eb046f76900da23ce941ea8af8d18c6ae53710ad86927f7af9fc85","ssdeep":"","tlshash":"f1415f2fb01dc97cf36c0aa48294b74a98127bb8d619e0e8b6ef4a11776409d637db41","size":1968,"data":"","first_seen":"2026-02-24T14:23:51.298658Z","last_seen":"2026-02-26T17:03:57.793021Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/gameDataProcessing-DtSnCvbE.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dcecb2abe07ee9dcecc6f662e238bc7f","sha1":"bb8d4fd833aea5f378e2bf4851ae819f8a96f2c7","sha256":"c5a8f4dbc771b4c88e6f971277095f148539bb64a22ac65dfda70aafa878b60c","sha512":"8c7ec6fe241f990bbfddfdf77be07986ab02525eedebc159e614b1c19988df95932d3b1d854f3fa73b3077d14215f91339822ab543e09cbe89b47adccff7cd27","ssdeep":"384:WwphrrZxhxlVz12awqhvT7vsB4Pzendc0aw5K4A1nV:WCpt7ve8Q/AX1nV","tlshash":"0972750b8a024c52c97e4639c0aa15f1b9781b32e8b8cdd11a655c7afb5fa5b31e1738","size":17282,"data":"","first_seen":"2026-02-24T14:23:51.212877Z","last_seen":"2026-02-26T17:03:57.951321Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","size":697,"data":"","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-05-22T17:22:58.055376Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/useOpenLiveChat-DW9DTPvg.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e9ab582a29b68015b7e4ddf4398ef218","sha1":"ae616bc32d6364ad889332e33ee220b80b4cc854","sha256":"0f2ee7cc918524f36e5698ff96bf1d9a671b9cef7dbebc73cd1434e9e8cbd7cd","sha512":"ea403228177e00db134af06a47eced70c0a176ba505a98d37d158056b49443531257168c5aaff6e57543baad9cad1e990f2a9c29188801d9bae9ac5eaff1b3de","ssdeep":"","tlshash":"57f041da86804fbc81c0cec1405be5f45b2c0ae4700dc480a43fac985824c00467ac53","size":583,"data":"","first_seen":"2026-02-24T14:23:51.066851Z","last_seen":"2026-02-26T17:03:57.79217Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/InformativeWidget-BAwOKhPq.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfe68e52383a846bcc852d13693ec99a","sha1":"bc0a69a7ab99db5d5e825560d41045567132c9ef","sha256":"ad6a0e54fb28450de78b863bf168d8664be8ae14ffd118032cc0dbb0aaf41642","sha512":"bbbe591918823d2e09b2fb24ebed7a12934e6d15f40e2f5ffedbf4eeeb766157ebf3346da3b0bc7421b552d4376106ca98b5184aa01a99e89893473d5889a48a","ssdeep":"","tlshash":"ca117947f550d5bdf0354dc44616d0946d212dd4df39d4e998f57008a83410bb6db7ad","size":1087,"data":"","first_seen":"2026-02-24T14:23:50.926006Z","last_seen":"2026-02-26T17:03:57.765598Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/StatisticsOnHoverContainer-BsM17Aei.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49787840fdb8d4df9761ec97f3432d15","sha1":"909f1cc9fab91b7aed0753f53218806eb5be34b4","sha256":"ad4dd40765aa61a8a852c0607b3c0bd802989ee4b7f3e686e8ede8adb6324907","sha512":"50cd1ee26d9cf314e8da57339139d5e00840fb7583f3dc1012b0e1ce38c787ecbbdf490fa8aaa6d3dfc693cf1fac77ce8940a95e394900b379e4e1183409c9c4","ssdeep":"192:sn2zkXAsarXDxLwxGEE0D9AOgzm6j/e0R:sBParTxLwxGEphAdzm6j2q","tlshash":"1512626c118e5f69f41a8240b5202e39bb3a7877958d66f87ebc441fd3ce444bb9cb18","size":9780,"data":"","first_seen":"2026-02-24T14:23:51.34682Z","last_seen":"2026-02-26T17:03:57.950488Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/GameSuggestedEventsWidget-C1YjPNkk.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"43787a45f5cfe74078cbc565e4521f6d","sha1":"3acd5a9c1111d8edd8650289999c4d104689e633","sha256":"cd5da6dea240ba73bfe9cc022b7d9453583f2101b409e94833a3aae12cec1a1f","sha512":"090bda22324787190a13f5acbea2eceaad19784af2d260ac172a2927898e787ecdfacf87d12a74f6ab5fbf3b8b2cd2e18a9d8c970aec4dba4dbd4c7e5eb443aa","ssdeep":"","tlshash":"7071e74ae010aa39a13740d82bef3219153632b4b94353c1b63fca7123f55926b5bbdf","size":3726,"data":"","first_seen":"2026-02-24T14:23:51.248389Z","last_seen":"2026-02-26T17:03:57.756743Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ba81e0f6200fd21d574687e2531acca6","sha1":"27db9109caa4c80f5687dd8840efacbb40a7c427","sha256":"6c131160bb0b8f0173af4ed8fbc5b7268573bbcdba957bea2795bd235ed73ccc","sha512":"58344918bee2aefd8db3f3ae40d732a13480cb7520d2899bf80008f502769d7ed937cd97d5a33f49106408910c0d443ae9665ab961c961272d10d565911cb410","ssdeep":"384:OvbvysPu7u1x0OhcHSdsoRjTWcx72V98Cl+naetlj0kETqyUz8c8fS:mbqs27uT0OhcHS752zKaezYwzfL","tlshash":"91a2c5ddf942b07d8263f1f4986f014d92bb2855e80c340cf14dc5e42eb0a9e546efaa","size":22399,"data":"","first_seen":"2026-02-17T08:47:05.154709Z","last_seen":"2026-02-24T14:23:51.481893Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e62j0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"058fa14de11009f3d7bf050324f8cf18","sha1":"e25d8e13b1dcde0821a8a55bf07f4e45788a17a5","sha256":"e7ae023c1e103e6675fce26eb93377224a0e45956044d9123d4fd1278b307fce","sha512":"42b00e15bcc3a46ce0dd106502abd2c5424d815e7ccece77c4df8fb0732a2cf41a86141befbb0da47bdb589936490205e98101536a704483e20c8addb5904e2c","ssdeep":"6144:dKmO7CW6y273J5wYygLIR8Nyk7pNH08pddlmOrELkS5fenMcm0v:kuW6y27ADEIR855VrEff3E","tlshash":"a3a41ace73d674269396f078503f018ba57b29a2b44dc89af189cce42d74a5a4237f7c","size":455048,"data":"","first_seen":"2026-02-24T14:23:51.412941Z","last_seen":"2026-02-24T14:23:51.412941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FacebookTracking-3dL4n6uM.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"140e6f6f98e0fa8d3b0be5a3a4600dbc","sha1":"2004a2007bd28e2bd5e5cb1c4fff8c59feb0c9a9","sha256":"86621dcf5dc5a1b34c4539fb729e72c42ae3fe9bdf8eacfea3b3313b43b7e3cb","sha512":"75615ef7f6a0e1a3bf5d09e5d022ab408abda5aa2632928b514b1bea7824cb439a0025caf9ff607f42016b5a64e255803a8b012cb78879e66cfcd15099850c41","ssdeep":"","tlshash":"5a01fe0f2c45b479167c18b8d3bbd8142aba990a258b45a5c6c7c9b92a24546848db8d","size":680,"data":"","first_seen":"2026-02-24T14:23:51.217193Z","last_seen":"2026-02-26T17:03:57.815026Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/DataspotTracking-BGnsxVvd.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eb0adb294d6e0b4be4655a714d18cf8","sha1":"a3f054659bf93aa2d3c363344c9d36aefa0a6965","sha256":"1903da0a3931978e3bf11cd481394054ee369eac77e1e9eb33dec25253c83ca9","sha512":"a704e987bddeddbfcf41a894099cab890cbc9b2499a6ba6e06f649e1f716331a64145953bc618d0da4f392ad06eb946e6679642593b509023ed2cdac75826b11","ssdeep":"192:a5xZqJXykg/uKb0n5OnB7tv1/3iYtWSsftQUs3:uZUXykg/b7ZFSXSsfDs3","tlshash":"2cf10355741e78bca033c6ac0d47616218387051e6329de476a6cf5aae3d8c28bf77cb","size":8032,"data":"","first_seen":"2026-02-24T14:23:50.919041Z","last_seen":"2026-02-26T17:03:57.92747Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4aa69d45c4b43f0b31fd971b1bbdd","sha1":"77122463966366aaa969b55f404af7903b9d8f86","sha256":"34b9a3ffbb7a87b04fe51abdb665588b82d1e5fba4cad27b6d6518228d20c2b5","sha512":"6bc666c4e89838ba9d62ccba15b642154cb69eb86ac22585e64e11eb0bca2ebc710c3c5cf8993a99aa85035e1ae44d566601f6b7649e7d92fa3d72a2f53f252f","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY7dZPkx3u4V5pfYMrlSf:4nmuTilGhmPx3u4V5pPrlSf","tlshash":"36a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106023,"data":"","first_seen":"2026-02-19T03:13:10.618029Z","last_seen":"2026-04-15T01:21:42.737131Z","times_seen":8426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"38bd5621d13c7a89dc6a5f627d4b7494","sha1":"4f4eb05ee1cee349218c1d22390a1621da105b6c","sha256":"39f57b3764fe6266e382d3bd96fddc4b7c106c4d6d0b2237f12df1fd6386662f","sha512":"de7abce087d375131cb67f4bd936e1a3451a7c7d0b6f77598c8ae19d608d03e4906c3a92f7eba980140f02e7b10ff3f399ed50fdd1d874e93321654456200bb6","ssdeep":"384:LnbvysPu7u1x0OhcHSdsoRjTWcx72V984l+naetlj0kETqyUz8c8fi:bbqs27uT0OhcHS752vKaezYwzfz","tlshash":"6992e6dd7d82b07d8263f1f4586f014d92bb2855a80c340cf14dc6e42eb0a9e547efaa","size":19871,"data":"","first_seen":"2026-02-11T12:38:52.836269Z","last_seen":"2026-06-03T21:18:21.884863Z","times_seen":3790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index.es-B9MYE6-3.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a71206a48931c8ca241fd0483be9917b","sha1":"59e384af328bcbe0c7ce52526799e2b0f111cfb4","sha256":"4fc8231f3b89b71260c8ee9fd5a048df864e54f3e54f968fa3bf7f795c8d73dc","sha512":"e35fd45c940d6d6898583f6f9a0582034184f1a392fa74f9fe38e9be216d64c27db00d61de5e9d2dfa06c8a137f911000103f9bc2e4452a39be41745f27501e3","ssdeep":"3072:fzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6UGh:fz77jdU/7sJJMcvYisoljSFN1Nd6UGh","tlshash":"3b54fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","size":295236,"data":"","first_seen":"2026-02-24T14:23:51.310714Z","last_seen":"2026-02-26T17:03:57.86364Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/getLiveGameAdditionalInfo-wT1MfhKJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8bb6d48e0059b4a0993ea7f2f68ad297","sha1":"ac68453f12a4713e30b7fe85e424dbbb266ffb70","sha256":"7f7d09c366f8afbb43e1439ce81afcdaf76f9f8d9aab83a3338c7b13e18e944f","sha512":"ff5ff2ccf22ad1c8f7d89b02340c0352025c54b019538a2633b759e620a36526188ed63dfc4dbecccdff53d6f723d2814e679da801fa29843fabb2e223625c19","ssdeep":"","tlshash":"aa2144b2606e92bbe5c94d945ab01b31e2b5ba05380445ccbb3cc9191877480a7e203a","size":1150,"data":"","first_seen":"2026-02-24T14:23:51.176176Z","last_seen":"2026-02-26T17:03:57.783484Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"205fd253c40be836ca198c86ebf9528c","sha1":"1efa4ed91199a039607be80c80897986e9eff572","sha256":"e0a77de1f1d2ffc5ea5bd48a92a9f465126fdd7c87e433962f55966c002ba111","sha512":"ead0b69f1ed577c3a9f70e534539868909946b8c3b6f703c8d38d2343c274afeb52d25dd5f0029b5ae28e8682f7c153d1c22596f0a2693cf880b76f590b050ef","ssdeep":"6144:lm3CPpl2pfyCUg4ZkHWOJN8Igixk5RtrsgKnAHWbacB5EVjOo1E73mjRHuGMy8ZG:UnpK5lM8mxk5DB2bv5WdK3LyHrGYia","tlshash":"6f055ad8721679614332bcfa64a31019a33e9666c89c4c5eb5e5c6f13ff084870b6eb7","size":861770,"data":"","first_seen":"2026-02-18T03:08:10.402444Z","last_seen":"2026-05-31T07:12:12.631707Z","times_seen":12048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20e590d9f11829a09290b6e894ad1848","sha1":"7e1b1241386c1bfd9aa1e0bde10882376066e9ab","sha256":"3d8affe453535623080b14889ebf569e16b547779c40f7ace8d0b18fd40ac80a","sha512":"e51b380b0aa00ff941e577678375efb77f19f0e78bb5c3ac1fb2d1c09a913a32fe074e6edb62d4ee324bb87916f9f36bb593817139101115025a406a19d0eb35","ssdeep":"1536:ojciPkmHdjzZ0EnurYnOMlKh0LHeJlt96ei+tp4fI:90j90hrYBKVlPP7d","tlshash":"5173af2be30330fedf7ecb515ae2a6ad237d958b119314cd22bb0092483add566781dc","size":74194,"data":"","first_seen":"2026-02-24T14:23:51.484304Z","last_seen":"2026-02-24T14:23:51.484304Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2363889186e23777b4b704661794f3d","sha1":"7f50ba76565cbebe1ce54ed6e30f3794fee96554","sha256":"f71def488c2fb369e417b84e2088a8c9c21a59a3d1dffe4a43f4dad196460b8c","sha512":"4fb51fd523149c9cb04134a77d41461736a1e832dbd48af01a71d47843a56fed5a4474275e8752a2460c3cd7203bbbe9fb897a4c027d81a6b446973169d3eea4","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJyO:xGBzd6BgJn+wT8ZI3I5Z7y+","tlshash":"688533582a6bf3849409d0d7f9373d84c59ed19aa44764d24fb24bf31bb2352eaacd03","size":1831195,"data":"","first_seen":"2025-03-04T03:23:02.060485Z","last_seen":"2026-04-13T13:13:58.719874Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-nSKS2CxE.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"37c4c49a4145406837780bbb7247a394","sha1":"d86eed76369d32d002b66a497e0af321c35eac41","sha256":"b6c086f2a21e2899b76a9393b869eb8a6703f59eeda23f3d5fd5971673288ea0","sha512":"b9f970a925bd992a373a452ffef7869ebfac3e8770a1587c932a88435d4c2131e18236af156b0aedd5da7a9cb77ea64b0397d783b5898b2efbdea01f249858c4","ssdeep":"6144:YfeL9y0h4R78o8e4YQIALoh6wj9Sd51jjVvFahIRcDGRD6On:YmJy0h4R78o8e4YN/j9e5xahIFROQ","tlshash":"23240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","size":221144,"data":"","first_seen":"2026-02-24T14:23:51.32626Z","last_seen":"2026-02-26T17:03:57.796635Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/69345a05c4e6ba197aefa96c/1jbq7v9mq","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cb8503928873fb0c37ddda8d9be2156","sha1":"5319387ef374c51d8602797090fed03402de834c","sha256":"f13f816cd905b4f21e6e1cb8f007a1a620bc765cc87dd54f77da47934cf78fad","sha512":"4dccac9b09a71eacf324e11bde2da2f4317c5360141051d7720cfdaa788e5987990302172d8af111afa579951c8a640cbd74266f563b35b073b5ad3c7fb7bc3c","ssdeep":"","tlshash":"8941ddea5b4f1c56b22410d90dbef90ef47620f749da6892870c085272657ad2f8ee38","size":2123,"data":"","first_seen":"2026-02-24T14:23:51.198663Z","last_seen":"2026-02-26T17:03:57.919065Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-06T12:24:06.758034Z","times_seen":85090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d894772cc8ebc08c554e305272fb743","sha1":"9630696cfb8fb02d834b6c2d590ebecc9e4c1971","sha256":"8822f04d16fcc6ebe390ead32df5d08238c7c383f466f401ebd9d235d32f434f","sha512":"20c22c322a8e6d0cee22113e4bdef0fd06e8b21ab65665bf648a3dcbe3857fad121cce2043bc46551247f2f88af76efcbc8f3ba5053a820439d0383342fa0728","ssdeep":"","tlshash":"5e511f3506b31521036b206c3babe316b23ad2433548f5457e9d93015f45f79d9b2bde","size":2492,"data":"","first_seen":"2026-02-24T14:23:51.4869Z","last_seen":"2026-06-03T04:20:32.028973Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/events-Bn7gRKKo.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"090be51e82542a30e21e332ca13babfc","sha1":"b52ff723bc9b697d49472078276e7ec7dcbff8f4","sha256":"75312eb0c62a763d09fc4297b47a9432ff15df3e82e2398247716855e7d21583","sha512":"b8b9804b08e0ca7f898643e26e9277b1273e6a53b8a6dfc29f97ca560c5d4f91e23527d7120989911d65fdb3cfa467ddb2ae4986cd90f6adeff0cb8e406d66a1","ssdeep":"96:Pd9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:P3IM2sWMtBq6n3PzH","tlshash":"27c143ccb38578b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126b78","size":6141,"data":"","first_seen":"2026-02-24T14:23:51.051447Z","last_seen":"2026-02-26T17:03:57.746676Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/HorizontalNavigationListItem-D8usqGBs.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2ee91c2a746e670fa0395e2402ebb652","sha1":"5b074a326d8263e052af7932050c4dd696f95dd6","sha256":"6bed6f8c738e862641eb57d60efd2be604d705024d3576fb68a1f6cc491e62f0","sha512":"15a2d3022a25b216582a549dda022b4de3fc8eecd4d2e519a047d4ff7abf1e3ea3767850c513f5cc800e846c071b7263da71e4dca1a299a8754660a8227a0291","ssdeep":"","tlshash":"f001c001e014dbbc9a2745ccab8d1089b5479afedf782ce190f4e12109794593a86f8e","size":729,"data":"","first_seen":"2026-02-24T14:23:51.015813Z","last_seen":"2026-02-26T17:03:57.886757Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/UnavailableMarketEvent-wtkKsClH.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"98b9533851974b6ee03f009832ec9b0e","sha1":"5218639a7552fdf2a908290dfd2e9c440ebfdeb4","sha256":"9abebbd29b2f027411a623d5b140792a129165b070e618f803c4257da6978b95","sha512":"0170e9059b93228cbb5e6b27ea363c91b851c327080a46e85a96739c2b51562f56ba0c25f7ede463ff65a12a3f5ebfc832261f11f0db5e0eeeacaeec2353dd56","ssdeep":"","tlshash":"2be0cd0aa104bbf6d5255cccce3a8f4da90307b5d7ea45d3d1f951281b34265390ee96","size":308,"data":"","first_seen":"2026-02-24T14:23:51.155949Z","last_seen":"2026-02-26T17:03:57.841108Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492206","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"609f8e6887e1889e72c4e96fbc3e3d39","sha1":"1a137f4ece5f1fcbdd412cbfe382d4d3af7b5fde","sha256":"c1fad91dd5a74216ffa996be3df2737e4d30239784d7e34b004b713b7a569dd3","sha512":"c991d488a6d36de33254d5ea509320fdebb96f9bbdbac34bfc624dda5d1cf3fa3665b1ec7f02b5d51affe3e534e03d4c75a70c9a3181effc79c4a88ffc4b35f5","ssdeep":"24576:5iHlTFInH0lTghey0pZOrBQL89IQn9AZNnHF9G+lTlsREuIA:MlJInH0lchey0bOrBQLAIQn90nHF9G+m","tlshash":"50157d9072567434c3b795b160be050db23c5b027806c698f2bc99ea1fd789662bbf7c","size":953208,"data":"","first_seen":"2026-02-24T14:18:16.990938Z","last_seen":"2026-03-02T21:59:07.354611Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77424425bd755d02077922d40a96c207","sha1":"9702eba70ac4506031d55a8c9cf6732a66853b2b","sha256":"1128f463d0038310bb65c71ee2bd50f52e40dd9dfc0489e127f3912a1aa728ce","sha512":"2ac723d6ab08dc1cf45141cc44966d9b0f01c892511f40148d785de61ac084e014799555bb3b574f6f8b78e9410df8c112fd437eafe0aa747babdc52b451d1a7","ssdeep":"96:zNC9Hqt7pEma7hY/rcKaJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYcLRIvgx43nVY","tlshash":"13b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077b39","size":5261,"data":"","first_seen":"2026-02-19T03:13:10.646706Z","last_seen":"2026-04-15T01:21:42.571941Z","times_seen":8490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f3f9f3c5e386595b1b0a767e60f0699","sha1":"3bfd60fd0aca306be454698bc4373781093f1037","sha256":"b7a437483a8bc84b7e3c4a8ac8af355d5a9016c14426b1591ade663e1dcfc428","sha512":"9ff3ab5bdc7c9442f084f8623d87fdccc8071579037c51cce68265b6352682b677ca34da4e1119f1ed1e24c260cbccaa0d151d76ab1c2d8a5f22f23b2c717fff","ssdeep":"","tlshash":"6151438e65b1b2b227ab20e48f8b3055603b9657100ee511f5dc0b44bfc224ec3279ed","size":2698,"data":"","first_seen":"2026-02-24T14:23:51.488462Z","last_seen":"2026-02-25T02:34:32.676997Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/tr/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-05-22T17:22:58.325768Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","size":108916,"data":"","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-05-22T17:22:58.310306Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/userJWE-BFPhdtVH.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"61aca6b0f0e9aa3213323f0d42cf93c3","sha1":"b8b89311099047c5593d07ded4233133a6718801","sha256":"e5a44888979239c112e0fe094fec9a2b04b32f3c381b0b0b9c96ee9a843f7ad3","sha512":"a2f5abf9458a3a50960a852fcd13144ca1e36fe5ae42445706b382ee9d39dd8b291c120f60e6a8b4c5e0fce83b3c25361dfaaf27cb5552ed9555fc94996f9bdc","ssdeep":"","tlshash":"d6c0c0db4cc411f7c5582c441005ed13c7307914a3d8d3519b0cc3fe7a5500bf90ca10","size":193,"data":"","first_seen":"2026-02-24T14:23:50.941413Z","last_seen":"2026-02-26T17:03:57.968001Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-06-06T12:24:06.769053Z","times_seen":58615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-B7VgD98L.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f3e977cdfcddfa67de40c9532207a4e9","sha1":"fd3b3e40e28ca1784c3830af9517c4964150d9e7","sha256":"ed155181d21e63fe4f536feee6db5319acce059ebcb51d535fda3eac10ee81a2","sha512":"eaf67df8e9b0cc8ea960822bf3065c8e42c3a75184e741550897ea4b7fb58390ee0b877e9e1e73aae3723aea8e9fa825e3a27a88531e74a5c15d18d931310bc5","ssdeep":"384:3Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJs:3Mci408FFnJrIjE3D/OY2E0xqpc1NKkR","tlshash":"82820ad0e2b4f7a642e86add80392074f2218c28347dd0f1b6b6edd974664cac56dd37","size":18027,"data":"","first_seen":"2026-02-24T14:23:51.416772Z","last_seen":"2026-02-26T17:03:57.901098Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Firebase-DDwvASrY.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7481cf9dd3ef4629e43999506ee69229","sha1":"ff3e5c0aa6bc24b531b4f638646d49e38d2fe486","sha256":"5dddd0ca4c525657b36e3b4310620f8e3a581c1465be6f5c21c7d32ff6f6200c","sha512":"4f04b6e31a72b4a72c9fba82a07bcb57365c400ced0fc7a49f453812edcf2a3d36da72936d9f2d5f38c08e2ef99d82c5313d827e582591f7f8ecd7f18d29cf59","ssdeep":"1536:V4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:Vs1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"3883957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","size":84095,"data":"","first_seen":"2026-02-24T14:23:51.31641Z","last_seen":"2026-02-26T17:03:57.82728Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"27be172aa56102590529acc80a004268","sha1":"fd8f63d7ec48636e76cca1afa5a1265db958254b","sha256":"d11c5a4ee39c0bcbffc77b2370c879f436488d42040d3654f907afe16df23d68","sha512":"b0f0398119cbcbb7b45bcce4f0dabc5e2a26b48fac04600802e4fdfee7d4fe74df739fab96d9d9c3c9e2cc0bfb358828044e514a9c57dcff2e2e68f2581ff9e9","ssdeep":"","tlshash":"8c81dc99e0b726750363b43b27bba1013b22a5576890f9843a1f47c41fd602971bbef7","size":4028,"data":"","first_seen":"2026-01-26T08:13:17.75387Z","last_seen":"2026-04-26T13:53:22.611209Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/firebase-messaging-sw.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b92a7d10cb0970ced5798c2eb1b8ac","sha1":"819f60615624f025d1256efc408d8e576a909c7b","sha256":"a87215bfd90d96fb55335ce2b2411f38074588149c9e896505cb10b250e17e1e","sha512":"75c55da9e8afbd96b6219292c91fb88e01c15d20bafc974028763227220aa042f4b761895d44b0394baae53c225e9b0c109d2eca333aad6b382951a60448e8fe","ssdeep":"","tlshash":"5121cb124be2f8231e4104c7679f32186e290d2507b0f1de61bf56b86b0a57b206bbc5","size":1125,"data":"","first_seen":"2025-12-24T22:39:16.149326Z","last_seen":"2026-06-03T04:20:31.962446Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/WagmiConf-DcRD12Of.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"347fde358585510327d4cbde65cdf27c","sha1":"bcc43085e2128b4b3f13b3e3cb2a5ed36de68fa9","sha256":"4cb419c9f2956a83ad68b8f5ddc2add8a7e1aad05d56254bdf8e345ce1d9c066","sha512":"4106a31be84ecfe3f80e2350266a55d60aebf4ef67f4794bac22a7ff7465ecc92da7e01db1ef5014c1c2139d8eac287ab732b72e82b25457e7cafc9f2655f36a","ssdeep":"1536:/2Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPVAV:OCaSlx5xG7NU+WEy1bPuv1K/XGd","tlshash":"15a34ad07196b46103a74ae008bf440bf239ac34200e565cf269ecde79b96e99277f7d","size":100978,"data":"","first_seen":"2026-02-24T14:23:51.189846Z","last_seen":"2026-02-26T17:03:57.755082Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/19330347/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-06-06T12:33:36.272034Z","times_seen":27877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/CasinoJackpot-DoBzeOXX.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fce9b3cfd468eed48d05649525ff5ed8","sha1":"ddc37fa9206ff7f24c93a15071c5ccaf3c4a37df","sha256":"954d2d5703bea36e3674bc3c5ff566b97db4ada799205a18ea5f83d0baa9d458","sha512":"6570def11e173fb4563ee7a075ce4a1399ffa3b9477e08c1a3102b8e78091fc7e926575fda1e152fd436cae5999b5a77d6b6484d6ed5c93084dcc6e02c63a171","ssdeep":"","tlshash":"b1110087e01bf3f4c8dc58e540a5955f0b2e2f7af72081d0545c4b385a25857f56c7c2","size":890,"data":"","first_seen":"2026-02-24T14:23:51.364102Z","last_seen":"2026-02-26T17:03:57.805473Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e7680047100844388f5ae75375a0f63","sha1":"1f0afefd0057964e682caa95b830cc75eae2864c","sha256":"bfdc66bb39eb8a8652a5f1349ce595a27b8b7176d38b34fcd081617d3ea24b8d","sha512":"7944b2cbc1d7da79398377cf2dcbd62786c0c81fdb6b5441a90047be836222ba90c2d2da992e53ea0e267c3c538ab6e6a41f8ab18edaa400f48edbbef35a1ebf","ssdeep":"","tlshash":"ace07d6d2a40bd755383935b28b3ef1c3432702cd44da8219eef8c08190ce4e4415f5b","size":324,"data":"","first_seen":"2026-02-24T14:23:51.491585Z","last_seen":"2026-02-26T17:03:58.010824Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__inject.js?v=1771942827176","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab9e78585cc4e26cf2f5610f2c57aea1","sha1":"54725b928a9d681d6ea6e5ba9c795c0d063d9b6d","sha256":"8c633ff018bc07f707d5067bef395dbe0b9f8582beb090120ab982f3cbc68f42","sha512":"6fadc20d8222955bb2ddabb96d0189aac73deb8d8ea53d2d40aa319fa9a48993e97e97b8769bc1f0235705082a6c97f5a41efa7737cb891e371c000ddc2b494f","ssdeep":"1536:oQMg8neFTFcFuFeruVTkQCwGvPjwriA0xA:oWpa+","tlshash":"2b63a6487ef262b2577ba2ae2787b240753240031006ee517fec47246fc6a6dc576bde","size":72157,"data":"","first_seen":"2026-02-24T14:23:51.303434Z","last_seen":"2026-02-25T02:34:32.621886Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/AppSettingsButton-B9Bfk5lt.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11b72d538039debad23018d55f70656a","sha1":"437b032ac4fa6f1f4a8404b53fbaeb8ef015a729","sha256":"c4f26646d48d997669963b81485af4a66a84c589c5005fa9aac7e81ce4151bd9","sha512":"a558a63166c1c05cd1f781fbe1e412559881d4e502a5768961783da4cedf90ccdb34d072f0921cc027c35bdc157f9fca17973d2e5617b1eae1ffcf1e7ec37c79","ssdeep":"","tlshash":"aae0c08b90c2d3fa03d27fd1c51fc2057e1bac78d394da4180fd90617ab4182d55e66b","size":385,"data":"","first_seen":"2026-02-24T14:23:50.9912Z","last_seen":"2026-02-26T17:03:57.902053Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/JackpotPoolDetailsItem-DOBnH8RK.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3889e481ab1adf9f96a132846c0801d3","sha1":"d2dde6ac4f88e9697531b6b3a86d0638280a16b5","sha256":"64d0d773fcd389193d64f215cd0bc6f25d7bccef8282d0fcd309aa7298595108","sha512":"b4e0162884cabb644a2fdd77844e44fecf63b090206b2739478fe152ec719ea2cbe19be56520249c097335a5951319d25dfcb62c62c23c3f400b083fd9578f0c","ssdeep":"384:xm6srKqqF3EjFOFEGOpOpeHMtGRxeG/PcyKxV6baPFFWB:xmB7CEGOpyts/UofB","tlshash":"5a524c05f012f7edbca954f7487ee0687a5e1aa9c71808acd1bd6c313d2c455760bbac","size":14339,"data":"","first_seen":"2026-02-24T14:23:51.244561Z","last_seen":"2026-02-26T17:03:57.821746Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"631be32b99c530c0e3966fc9bad4dd4d","sha1":"f9da14e9a78af1225b4e35c59a530815d7392aa7","sha256":"3e1e721e935ed06408a3fd0bca2a405ea3405ccd4bbacd0e60c0a663a8806155","sha512":"f812ad830bb5f8b047e207e62752aae9309c257210235763ba74d280dca81fd1fbf2a41e3a8219c88cba2503b0ca1365fd94c1e8355a3387baec57df9ad76dd9","ssdeep":"6144:ok5nmy7C1y2p3J5wYyv8NyI7pNH08pddlmcrESkDrh:ok/u1y2pADv8H5HrEF","tlshash":"f28429cdb3d6b46683a3a474803f018bb17a69e2b44cd894f186dcd42d70a6a4277f7d","size":382822,"data":"","first_seen":"2026-02-24T14:23:51.184885Z","last_seen":"2026-02-24T14:23:51.184885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/SystemBetCalculatorContainer-BmSNbe1d.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"690145235a675d77bd5d22c88fdecc1e","sha1":"0ba668de57532a99d49e9ab401763fe88bed3fb7","sha256":"de4489e163ab1a989441ebac43016178c8c04ab7a9915ca5bd58da750b0c8caf","sha512":"e788679931673924ed51a6cf036cf5edfce7f1c8f4d6c13f36176b4400cc89b91e51b0355acd38c7706775f1569c52f84f6f21a06bb9369eeca5ea85a3957593","ssdeep":"","tlshash":"a1119c539718ce75848a0f660945a0541db54618a918f668b6e58c3cf51408387fffbb","size":888,"data":"","first_seen":"2026-02-24T14:23:51.314888Z","last_seen":"2026-02-26T17:03:57.912547Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/LiveChatInc-OVRSkU-M.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"386e892ab3803bf0ef0d5646d2308a0e","sha1":"bbdcd6f448c82c072ec8a85aaf94bc9535b65ad5","sha256":"e552579fd260888f85f2e29cd20c8c273cc94ffca451e80d79fce5f624465b54","sha512":"ffe631aa185f8a9db4a51fccbccee3cf40be2ffa228698cefb5d720f76cd3046f3858f6495c556212e84cc1454ec249017eb94c7a452a72f67f7e6bacbe635fe","ssdeep":"","tlshash":"975134dec43cb8b092aa67d1323f7b5f711a571ad4008d31656c4b0af61e4cbc467aca","size":2920,"data":"","first_seen":"2026-02-24T14:23:50.94711Z","last_seen":"2026-02-26T17:03:57.958513Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Odometer-BX62fBgg.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"55a1a4b91300616965d78a3641eacb56","sha1":"8a97ac37cee2af994acfbfc9f2cf14e3526c7c4e","sha256":"ffaf29e279a90410cade3f3daa9ef47a21684c027c281f7d196cac20604a450e","sha512":"b61b1b1f088df62ff5ee4e38e7ab6b1820a320e3fc2c0c37415ff1d9bdfeafba35817b9b62cf4b731f95ddb43487dc610fc89c1ae16de536a04714d3062fe67b","ssdeep":"192:2FZd7KNJtQae0S09YJFF2UXxx3HjmHHXpkauLPHMBNeSYpkYxSBrC7TlzUgrPND:2cVQae099YJT3DmHHMPrFtUhGxrPx","tlshash":"de620a8a796272344393b1e015bb0609773f9d6a3808405db67caeda7e32c19d12bff5","size":15567,"data":"","first_seen":"2026-02-24T14:23:51.358719Z","last_seen":"2026-02-26T17:03:57.766878Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","size":75107,"data":"","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/walletConnect-CiycSUBb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","size":1998,"data":"","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-03T21:14:05.323244Z","times_seen":1658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19330347\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fgalabet2647.com%2Ftr%2F\u0026group_id=0\u0026channel_type=code\u0026jsonp=__nbsa4t2mabc","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0af3525d7de477967771068c4852fdae","sha1":"94a8564448285ea8b8e1f95baee86122a2a904a5","sha256":"129fba1a7b24c8a92ed1365ff4ef450bb3b8a1ad012bda049c248fa73cd19f82","sha512":"0ed1539ad887e53d2ad1f139b041064c408b6c2150557a431e7dfd1470895549b8e0888d8164e4b3c6446be06af78aaf724b6624d2abc2d930de42f68bdbf8c8","ssdeep":"","tlshash":"c3e0f8a3a0602570e6c4e3bf8000af42bc301ae7a004aafcb46f0200022f78e722040b","size":390,"data":"","first_seen":"2026-02-24T14:23:50.932434Z","last_seen":"2026-02-24T14:23:50.932434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-05-27T07:42:34.882187Z","times_seen":34008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=galabet2647.com\u0026t=1771942972836","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27dce8dadb282759f0d216d13c14956f","sha1":"51c61551f2d8593c294b71ee86f550aec18c9ba4","sha256":"7b81478c06bb30b63e2de44175f400fc699d151175485f805cbd81c99181d34f","sha512":"5eaf4c35e4f69b580bb1213fcc8b8196ce95e6dcbd5aef45bfe7e75c7e396f3bab8e7e6c7b50f5cd76d26d96937cf090e28a5cbb36db05ff2e8221fd889abf5f","ssdeep":"","tlshash":"265143cc7fb0829933a71aaf5b2a288ed333d82b2dd45b4f1564f44c9944525d7e6134","size":3144,"data":"","first_seen":"2026-02-24T14:23:50.960908Z","last_seen":"2026-02-24T14:23:50.960908Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-06T12:24:06.774592Z","times_seen":85130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/jackpot-jNbP6Duk.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","size":376,"data":"","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-06-06T10:12:11.700794Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"205fd253c40be836ca198c86ebf9528c","sha1":"1efa4ed91199a039607be80c80897986e9eff572","sha256":"e0a77de1f1d2ffc5ea5bd48a92a9f465126fdd7c87e433962f55966c002ba111","sha512":"ead0b69f1ed577c3a9f70e534539868909946b8c3b6f703c8d38d2343c274afeb52d25dd5f0029b5ae28e8682f7c153d1c22596f0a2693cf880b76f590b050ef","ssdeep":"6144:lm3CPpl2pfyCUg4ZkHWOJN8Igixk5RtrsgKnAHWbacB5EVjOo1E73mjRHuGMy8ZG:UnpK5lM8mxk5DB2bv5WdK3LyHrGYia","tlshash":"6f055ad8721679614332bcfa64a31019a33e9666c89c4c5eb5e5c6f13ff084870b6eb7","size":861770,"data":"","first_seen":"2026-02-18T03:08:10.402444Z","last_seen":"2026-05-31T07:12:12.631707Z","times_seen":12048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b057293b718ae7060a9acc593ff83f67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7785\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e06bc0eaa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-21T03:41:36.073067Z","times_seen":12668,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/usePriceChange-CQ4NeD1O.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/usePriceChange-CQ4NeD1O.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1d6-c3O9yJeUB7EHs/ybuJ1hO+/mdzE\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dZRfZjLy1hHzZg2MqVlb0dLBiouuw95cbWyk7hukMTJ6aI6UpUhwFi3U%2FZUhuCaswwnH%2FL5PBOLZLZYx15uS99bFFj3sHvQ0IAZiKrhvA%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa311806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (469)","md5":"d734f3ff02b9a46256efc81b7db6485c","sha1":"7373bdc8979407b107b3fc9bb89d613befe67731","sha256":"fcd3434c3c2ba621778d372f19f8aaf5cb131adcac607bbcd2a765cda41ff091","sha512":"321e139a46f487a92e3a04e3f4ae7c7966058360ab75507b71e10bb3cb651faf57d4e0ea49bceb28278346ac20cc9186839cf7fc1909527b910069f62b40f8ea","ssdeep":"","tlshash":"9df05cbe54901823945f0cc8c26486571fd126d56bbdc31eb230c82d375c9af0a6ee66","first_seen":"2026-02-24T14:23:50.894874Z","last_seen":"2026-02-26T17:03:57.782605Z","times_seen":4,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FeaturedGames-CmnWY5V8.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FeaturedGames-CmnWY5V8.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942971299; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1ee2-MZScdHqs3XQ2DULFve9Ti5sbHvc\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNJChc4VUgspwqJFd8ORE9Sy8OTNjau3bwRXVbrsVg2DyC3sWj5TbReTWvLdm4sUEK%2B1GS3P1PY2ovjBP9g24Yzdbh0I4abxS%2FSxWG3Eqg%3D%3D\"}]}\r\ncf-ray: 9d2f9e130a801806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7906,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7905)","md5":"e24344281a7fbd4a9713273199c71772","sha1":"31949c747aacdd74360d42c5bdef538b9b1b1ef7","sha256":"cd4bbd4ac6d8c15d2e0161bbf733762f872971bef3f330f61722203fb0709294","sha512":"55516c7b75aac53acd092be82e3812ca3ed64b29355dce7d9867795b332110debbee7d5f7a536b5d6e1df37f4ac737357bf55bc82e733d0934768b6de87b77ec","ssdeep":"192:DjWt/Fh/fNHPEwDG3Qo62p7c0mhcMO/b2wL4Ula2yjRC:vKtHP4Qozp7cjhAI2CY","tlshash":"36f1ea0ae010fa7de63b49e7753f6104f47a06d4e7150890d0be6e2919e5246733ef8b","first_seen":"2026-02-24T14:23:50.903051Z","last_seen":"2026-02-26T17:03:57.839197Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_dd37a279c43f0ccbb760be731379303b.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_dd37a279c43f0ccbb760be731379303b.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 141024\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jan 2024 11:52:54 GMT\r\npriority: u=4,i=?0\r\netag: \"65969c16-226e0\"\r\nexpires: Tue, 03 Mar 2026 14:22:51 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=b0a4gkFyVcK3hPNrTLnyo0DqepQz23XqudXENCujFkE-1771942971.4640603-1.0.1.1-TsnfBjZhICFa0pOg1bcRIUar2vwWTi3c41wbC0raQE4FoQmMlhKrgFwhLLr6gl0rQLkQcoWS16jIUIMPNP2Oevgfww.esT0vbDS8vUsIGVP122RgpD6Z0uCHE3IULLn.; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxygiCI0KkcRIwNZZHq2znUal2FhHBhCufkAj%2Bl%2FLWcoll03K%2F12UbK0AgUrcwgpQUOOGEFPO4TLc0p7Hn5kFNRSc%2F%2B1p%2BqmTE%2FvnQpxRNtBSxrhuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e13af172efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f1908ce8016950b6f3f5cee3256d491b","sha1":"80ec67cfa39f67fcd9c9ab6addbafeac07d052d6","sha256":"03cf5790335927a6e35c79f28653f6460e05145a1df56534eab746b55d13139f","sha512":"cc26ac01f7f591007f2c398c608dcf25c0ce6258bd13d202237a891a6792d4a9e2899fc44baeabfff9a4a7becbe8fc1859086852b64cfbce3e39555db2f4c5e3","ssdeep":"3072:Jue4D7v00XU3boz/OEjj7laE4webThg7TF6/+lqGQ8f:JHI7M0kr2DlPeuPF6e1f","tlshash":"acd31261ac51709522cfeec209d32b69713237d0553c29b4a49ae4625ed3ac2da33f5e","first_seen":"2026-02-24T14:23:50.909304Z","last_seen":"2026-04-29T13:47:02.841287Z","times_seen":11,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/css/fasttrack-crm-app.css?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/css/fasttrack-crm-app.css?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zbjvR4XmwNBIJlxjEvxcm_sn.IUZfztx\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IvWZ%2Fc7cWycytwtjlpq0%2FutSLXa1xZ1vOL5%2Bs%2FWo1MB8R9fswcsxdvzw%2Bu9l3ZtWGBtq5a5n%2FO6T766h3GPYxHN3sswJfrf2bSoqPppgq02d0V4GowGEIsj9I6c05Q%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3f25be8570bf62f8d4607f79984fccec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: BsTa_K1FAhoK9WJV0tljRQn8pvuSAN6GnALnIFA0V-GDO5jfzGp6gA==\r\nage: 2907\r\ncache-control: max-age=31536000\r\ncf-cache-status: REVALIDATED\r\netag: W/\"7906aada543698dba1005a917ffae2a7\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e151a43b80b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27953), with no line terminators","md5":"7906aada543698dba1005a917ffae2a7","sha1":"7f00d6655894909587fe280ebf09bf57f66b4100","sha256":"5e2a69854668603fcd556f0b8a3da306e3de6d5ad4dee7a9e9a57ca998269d76","sha512":"262f19709cde3e7abb7bb6d9724437b042fe626636083b80376e35a91d1ea9b39aec82463626711cb60a8c516a1b909d53aac644f056e77929e736fed6d1706b","ssdeep":"384:cFukqharVUf5rKbHWkAB1MG4TmpcHyH3XHZw/XNPalHfI:ckkqharVUf5rKbHWkAB1MG4Tmpc+J6aO","tlshash":"78c2442302c02288ac2b892b73d50599d93ec836651b6dedd7433955c7cb77e3a6b34e","first_seen":"2025-10-24T22:03:16.572036Z","last_seen":"2026-06-03T04:20:31.947603Z","times_seen":138,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":94,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/DataspotTracking-BGnsxVvd.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/DataspotTracking-BGnsxVvd.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970679; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1f60-o/BUZZv5OqLTw2M0TJ02rvoKaWU\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fN6u2Bgqjn3cQCI4SSNt8TE3Q460I4IuY5RgJis8dUg2aaoYhqE8Nj2iD11%2Fwo%2BiP%2FjFbz%2Fd2L94xoR9Hi3%2FEvwOu98wiOaSaBJCmh6qVg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0f198d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8032,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8031)","md5":"6eb0adb294d6e0b4be4655a714d18cf8","sha1":"a3f054659bf93aa2d3c363344c9d36aefa0a6965","sha256":"1903da0a3931978e3bf11cd481394054ee369eac77e1e9eb33dec25253c83ca9","sha512":"a704e987bddeddbfcf41a894099cab890cbc9b2499a6ba6e06f649e1f716331a64145953bc618d0da4f392ad06eb946e6679642593b509023ed2cdac75826b11","ssdeep":"192:a5xZqJXykg/uKb0n5OnB7tv1/3iYtWSsftQUs3:uZUXykg/b7ZFSXSsfDs3","tlshash":"2cf10355741e78bca033c6ac0d47616218387051e6329de476a6cf5aae3d8c28bf77cb","first_seen":"2026-02-24T14:23:50.919041Z","last_seen":"2026-02-26T17:03:57.92747Z","times_seen":4,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/InformativeWidget-BAwOKhPq.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/InformativeWidget-BAwOKhPq.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"43f-vAppp6uZ211eglVg1BBFVnEyye8\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzxjH0Il0N%2FkzxjGUBBG7%2BtHxp0msDd6gF8r%2BmNP%2FM1PSv45EjIDVxVntoDVJsQJFMY4bRJjP4XwyqWVSsrOX7gFKaRfrEpUdQMr4TYCuw%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a161806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1087,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1086)","md5":"bfe68e52383a846bcc852d13693ec99a","sha1":"bc0a69a7ab99db5d5e825560d41045567132c9ef","sha256":"ad6a0e54fb28450de78b863bf168d8664be8ae14ffd118032cc0dbb0aaf41642","sha512":"bbbe591918823d2e09b2fb24ebed7a12934e6d15f40e2f5ffedbf4eeeb766157ebf3346da3b0bc7421b552d4376106ca98b5184aa01a99e89893473d5889a48a","ssdeep":"","tlshash":"ca117947f550d5bdf0354dc44616d0946d212dd4df39d4e998f57008a83410bb6db7ad","first_seen":"2026-02-24T14:23:50.926006Z","last_seen":"2026-02-26T17:03:57.765598Z","times_seen":4,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FavoriteGamesContent-BWhyATt4.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-BWhyATt4.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942971147; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"ac3-8yWCTrNLVrF3D4CWPHctjyMyETM\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TiR7520%2BM18xomZCwQUrJPFdR6x%2ByxSmi1Gnmfa7nS2MnKNDi1Rf%2B8ndsgM%2FYuXhoV3rtd7bbEkUTiqIy52VSp1Fuwcge%2BFFXnJsFEw46A%3D%3D\"}]}\r\ncf-ray: 9d2f9e12ca631806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2755,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1704)","md5":"520492d6f1f44fba5d1f5afca843fae8","sha1":"f325824eb34b56b1770f80963c772d8f23321133","sha256":"c7d7349a97d49fe38ecb60e29f790b95bc64e28929fcaf25d26507769c95df54","sha512":"5e4491318fc800e80ae25f817e14c02f4787708539b9ef5ae96597170f432fe6a924209bbd0450631434b4c53d711a93ed68c09cca99a30f893e60eb80d54508","ssdeep":"","tlshash":"5151c51140415ff8bb9e5eda2e27c064196a438ca286c17da87c4f3e3818640713bffa","first_seen":"2026-02-24T14:23:50.928734Z","last_seen":"2026-02-26T17:03:57.788556Z","times_seen":4,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1682\r\npriority: u=4,i=?0\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7784\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=475+3 c=0+3 v=2026.2.10 l=1682 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e166e9c6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1682,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12fd7a0bbecec898caf25744ceae7549","sha1":"d4e4685c48987c850c780fd8e99de426fb5b19e8","sha256":"fdd5b72b8c65c37fd0db1c494691dc35794639a66ae8c11240def16c07d6e2ac","sha512":"08feddd7bab4b6b6135ba61fc3f12c7f4df27802d2357d1999ccf0dc17874f3d0a6b43368301389885f21a92273a41b420b729e408c2695d5becfbb8ddd5da8e","ssdeep":"","tlshash":"b8311a477584218d4283591bdbf086459953cc1b4b1c6123c11425b249a95731ee13dc","first_seen":"2025-02-27T06:37:34.817516Z","last_seen":"2026-06-06T12:48:14.009339Z","times_seen":1039,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19330347\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fgalabet2647.com%2Ftr%2F\u0026group_id=0\u0026channel_type=code\u0026jsonp=__nbsa4t2mabc","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19330347\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fgalabet2647.com%2Ftr%2F\u0026group_id=0\u0026channel_type=code\u0026jsonp=__nbsa4t2mabc HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://galabet2647.com/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://galabet2647.com/\r\ncontent-length: 390\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (390), with no line terminators","md5":"0af3525d7de477967771068c4852fdae","sha1":"94a8564448285ea8b8e1f95baee86122a2a904a5","sha256":"129fba1a7b24c8a92ed1365ff4ef450bb3b8a1ad012bda049c248fa73cd19f82","sha512":"0ed1539ad887e53d2ad1f139b041064c408b6c2150557a431e7dfd1470895549b8e0888d8164e4b3c6446be06af78aaf724b6624d2abc2d930de42f68bdbf8c8","ssdeep":"","tlshash":"c3e0f8a3a0602570e6c4e3bf8000af42bc301ae7a004aafcb46f0200022f78e722040b","first_seen":"2026-02-24T14:23:50.932434Z","last_seen":"2026-02-24T14:23:50.932434Z","times_seen":1,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"ecc9e5cf090bf5602a01763e2895acad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 303690\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e18c9ec4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10938), with no line terminators","md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-05-27T07:42:34.869974Z","times_seen":26442,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__config.js?v=1771942827176","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:48.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__config.js?v=1771942827176 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncache-control: no-cache, no-store\r\netag: W/\"169-x2mpUKtIHtZCiLq2+Zi7uuHVLMQ\"\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=in7FrHmT0vIa52F%2BM9C5ybtHLHJkPfq8KbEUNiZcPjXy%2Fl9zpVlnyxm8OjnaFN5G3q%2BOt7mBbK2eOTowdCpo873%2Bwn7b9G5n4qjBB07dTw%3D%3D\"}]}\r\ncf-ray: 9d2f9e016ff31806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"2e7261456f5abea81d7523bd45bf9c08","sha1":"c769a950ab481ed64288bab6f998bbbae1d52cc4","sha256":"5128a0dec3d3e8442b757502e33a2adc2225b1cb5e29887fca5ddc391e6b4830","sha512":"c548c96bdea284ab95c4229dcffdc54677f58cd80542f91eeeeff524dc54aef0d45c34275a89612918895cf6a5c559f23c262c2d243ec388503615af2248512c","ssdeep":"","tlshash":"58e06820ed50087203256426541a1603391ac1cf0a0dbd0632e0186c9f8527f8db39ba","first_seen":"2026-01-26T08:13:17.653624Z","last_seen":"2026-04-26T13:53:22.515958Z","times_seen":26,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/payments.json?v=02/17/2026-15:58","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /payments.json?v=02/17/2026-15:58 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyaklfX57hS6giWlM3qpJXhZ3k%2F3EiqLFOvVgaw2dCM1%2B8PipSyOLerGfMd1rQnS3%2BW1cc1dT7rK6cAdqAFuMQ4HBtFuNQIr5y8747NoNA%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"1a343-m89Sr6iRmIfp8ly88yx+UWTHJI8\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e07687a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107331,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d0893be5fabf1902ee52430c0b1ca1e7","sha1":"9bcf52afa8919887e9f25cbcf32c7e5164c7248f","sha256":"7f5f5d7aa53b3bfba57b55ce95c2b1f9854d4a583c65c4a6719a902057b6b812","sha512":"1530806660c2987ef0ac67b9fb2d9e9980e526dc94ba4f351d8968ade7004d9fe8fc323aac616a0d63fd5863358823e6b63320662c8053a780819bb00764bc7d","ssdeep":"384:dcL7txhwdn7JNdjLV/6+34n7JkYPhiEmnXJJby50FA9ztQX3zpdYSutJirXuQirn:LjB62YME6b5Dr2r/jPMe/ZLv","tlshash":"62a3e094d8690ce7198572e468bf9207766086478e2dbd4eb75cc82d0fdec0fadb426c","first_seen":"2026-02-24T14:23:50.936522Z","last_seen":"2026-02-25T02:34:32.570414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/JackpotMania.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/JackpotMania.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=PwsuFp3MfvAnp2ZhJgwg9bI3rN46Z3_jtf3A2Frlqs0-1771942970.7046702-1.0.1.1-mZeqCihyGldNrDszQM.gIe00McPHwD8AVfoe7B49d5gGtfd8.swff0fafYYmCB38diYecWuhuKQSLpOy0aq7qwVaC4AOX_3qtKYRZJ1jzE0T_F1xmt9SBqz0EQS5RaSQ; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FgzzXOJq%2BsgTjTg8hELum%2B1aJ5e525MU4T9WiP6Nm%2BWyy8pQgtSCIIgvKvhtavWUBrNkP8AvaAchHEJ2a1B2cPnq0aDhETUnyPhb9yPPssMBNM%2B5Eg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270a2-1796\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ee99a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6038,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"829680ca0f2f9d1f5faae192e8e40d75","sha1":"cb4c7ee7795a21eddbe36de36ff6c2e16e5f87cc","sha256":"05bca82b332ce5b8d3ab2c1e26331babd5f33d3ba924bf3e2b63b7fe44f8ed79","sha512":"173fad7120aeaf6cb2f7fb730a95b9af4587cb8804d09fd8a506e5eda8eeaa02d828a05e4c4e34bcc56f542e68abe6443792c891cfc8f2eebea59e21388b7a90","ssdeep":"96:NqjNrGLUu6fBaLQk9p0ZG7mi47U8/UA+5pRxq8uK/DUUt2TEojLdK7HiBe4I4erG:YprGYdqQkQE7mAQUv5p3q+DUU0Xqio3a","tlshash":"aec145fafb75a0f96ec753cadf223e3d79495d3d9e618794512e9a8907439c803018d0","first_seen":"2025-10-24T05:32:28.41634Z","last_seen":"2026-06-01T19:37:37.93777Z","times_seen":48,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":40,"connect":4,"send":0,"wait":81,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/VirtualBetting1.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/VirtualBetting1.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=sG5S2xrOInThnzO_6J3WGbS39yUQrS5KnA.UMQtHLx8-1771942970.6882954-1.0.1.1-t09kdtH_1PUtDKehdOUyYs1aI29csZsoO7NgzH4eLwGO0hXm_LW2kU2ZTj7b2kIWZwDRiMwcg6AVxzyk8QTf.P2stO7qNKrsxFfm0NYT.7yJkhIoVuVKTugqkEPjgdDs; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tiCVzy3bhoV%2Bdj32LekIWejYeeaGpaFkiUIatzCofCIScCyrwFmd4maRCe7d9F8o1uaOPZH8FXmgx37WjEUDnL6%2B4XeZ86dYH3fWTOd3ieexxZdSbA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627104-320\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ec8f476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":800,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d36eb3cba0196446e5ecd1a41eb6a1f1","sha1":"d6f113e0850fe1dcd80528c0efe40b1b9b0e38ba","sha256":"9e07f25c6032cecf5b0bb0c9fd6411af2930a1fa4be994a7c9125a9047e3db3a","sha512":"6eb0be89ad9c5f90473a271a751901c458c9dcabe6116b8fcdd95d97ed741328571fc081f4652f41f81a6a23eb7ff9e89e290b39af1799fe5d75b96ea78743b7","ssdeep":"","tlshash":"9201f1edd57025f0c4882befa76905652bff443b0552bb28ceaa0d0c3fc796d9210422","first_seen":"2025-07-08T10:50:27.844023Z","last_seen":"2026-06-06T02:17:14.52802Z","times_seen":1567,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/userJWE-BFPhdtVH.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/userJWE-BFPhdtVH.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"c1-uLiTEQmQR8VZPQfe1CMxM6ZxiAE\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QSSE3n5EcMLz1%2F3Y%2B%2BemAYGA01SjNavvXZEN5SatyQMl2Xe3h0JDmtiFUB396U9x1Q%2FajaY372yJc%2FGXy%2F5Cx1eZYphB1UMjzS4Eyp%2FwbA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ec9671806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"61aca6b0f0e9aa3213323f0d42cf93c3","sha1":"b8b89311099047c5593d07ded4233133a6718801","sha256":"e5a44888979239c112e0fe094fec9a2b04b32f3c381b0b0b9c96ee9a843f7ad3","sha512":"a2f5abf9458a3a50960a852fcd13144ca1e36fe5ae42445706b382ee9d39dd8b291c120f60e6a8b4c5e0fce83b3c25361dfaaf27cb5552ed9555fc94996f9bdc","ssdeep":"","tlshash":"d6c0c0db4cc411f7c5582c441005ed13c7307914a3d8d3519b0cc3fe7a5500bf90ca10","first_seen":"2026-02-24T14:23:50.941413Z","last_seen":"2026-02-26T17:03:57.968001Z","times_seen":4,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472725\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e1afa3a4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-06-06T12:51:01.648986Z","times_seen":34473,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/771.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/771.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1198\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Jun 2018 05:42:49 GMT\r\netag: \"1bd51686598d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=Z0HPgV7YIWPaAEw_spcoqKOSSV9A27IsS.Zs0VLwCQI-1771942972.7947104-1.0.1.1-dZNx7aHZapZXFhjbgxK5eUhMgdGZD45rYeUJ6EnSwiFq3PoKRRIDvJ4tZha1BDbu2.A55BDzGFJczG0tWeA4NcrGZgDmsadU98z5GOToCXzk1h9l0ewwe01fbOlA03BL; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwF645YSmuem0nNJaT2V2vI7htrldjNOyE3xO9kxkvdw%2FZIDi%2FQOBLiJeOwD%2FzSAF9jZwHgzochF41lsuk34iUDcOucybT0ZM3JQSXDBnFp%2FiYUHOYOVwRSo1go%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1bf8c1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1198,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"0b8e11aa2c789b85afeb3986ebb6d46f","sha1":"192fce790554c9d3e64ecdb939112a91ac2c03e3","sha256":"3c1f4e250ec0f2195ad86551450011aee7351dd0f8bd264602db65737f90f25f","sha512":"49e1a82f16a3858c206d2894c6a88e8e81d2d44f04b1c7076438214ed5814cf67028401e789c70c7dfe446eaa19422256b2f26b69e211c8cc80cfcc8965ef1d2","ssdeep":"","tlshash":"1121e7c2a89c01747b2d02e12d7d1438cfe293fd98eb645c3b5c004151a08d606f49e7","first_seen":"2023-12-19T15:28:05Z","last_seen":"2026-05-22T19:19:21.339228Z","times_seen":270,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/LiveChatInc-OVRSkU-M.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/LiveChatInc-OVRSkU-M.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b68-u9zW9EjILAcuyKhar5S8lTW2WtU\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVoT3YXf2rypvd77RsiP2PNiBzEIhbMhaxFTH2DKNUOpBLtJUwDBP65QXQwf3Eim%2FoxsXhVMCNY%2BxQN5FAZ4nsfyUEogfnu%2BceozkDxoMw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ee9821806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"386e892ab3803bf0ef0d5646d2308a0e","sha1":"bbdcd6f448c82c072ec8a85aaf94bc9535b65ad5","sha256":"e552579fd260888f85f2e29cd20c8c273cc94ffca451e80d79fce5f624465b54","sha512":"ffe631aa185f8a9db4a51fccbccee3cf40be2ffa228698cefb5d720f76cd3046f3858f6495c556212e84cc1454ec249017eb94c7a452a72f67f7e6bacbe635fe","ssdeep":"","tlshash":"975134dec43cb8b092aa67d1323f7b5f711a571ad4008d31656c4b0af61e4cbc467aca","first_seen":"2026-02-24T14:23:50.94711Z","last_seen":"2026-02-26T17:03:57.958513Z","times_seen":4,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/Tawky_16x16.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:54.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/images/Tawky_16x16.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 29 Jul 2022 11:35:20 GMT\r\netag: \"383b2c032d2e683a6e0e929ba7a9c25d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 466311\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e243b734453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16312,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"383b2c032d2e683a6e0e929ba7a9c25d","sha1":"245ba3df690e5743e3f73a0e62ae77d48c1d4c74","sha256":"982b9f89de8ddb517d81a1e199ded4cde7434a191c5ba01cd53bf7fb3822fa56","sha512":"8691ae5fc6e5d2ffe594c12543a84088743eb414acdd532de508a59d07eb39df19d9e32e1bdec69302a8f2495c653e500420e3fe6838c1434b9a9878c3d499cb","ssdeep":"384:kQ0CSXaXHFlHfLoM6x207TS13La1BEZbM9xnFKaagL:N0aTfLoMBNAjnEad","tlshash":"b772dbbb23acd1dcba1602a18d3d2ae33ae77cfb9282c548c1673d376406db4494c765","first_seen":"2023-05-08T21:15:27Z","last_seen":"2026-06-02T00:27:04.661388Z","times_seen":500,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:54.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:49 GMT","end":"Mon, 20 Apr 2026 08:39:48 GMT"},"fingerprint":{"sha1":"94:97:3B:30:EC:7A:3E:B2:6D:F2:29:2E:86:03:BB:6E:D3:C0:52:34","sha256":"F7:5C:51:D6:8E:E9:CE:0B:48:6A:85:52:EC:A2:CA:4C:12:3D:CD:F2:17:7C:AB:07:AF:87:4F:A5:24:CC:FF:00"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0 HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 24 Feb 2026 14:22:54 GMT\r\ncontent-security-policy: script-src 'nonce--Clm5nR-22QoNSJYh2vapw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92628,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47124)","md5":"2299dd816c97fbff5379cbb5d4666683","sha1":"0135e55c47d321ce4cd58c552f88dac59360a894","sha256":"e918ca5ffe6f9289e1e0f5a08826ee9d5dc1cc80c83627f333b50362637e2f60","sha512":"c76a2127baa7ebdfd8471e0fe5fb3d62e74d6f1820831a16d66d04b41e470f6eb9dc5aefe3fac65f514071ee567a79df146c323d3493849a8b6058d22cca48e2","ssdeep":"1536:y+khM22jciPkmHdjzZ0EnurYnOMlKh0LHeJlt96ei+tp4f3:y+khMK0j90hrYBKVlPP7k","tlshash":"a3939f1685033099dfa78ed123dabf78f37e9246214340e923fe06579dabc9652782dc","first_seen":"2026-02-24T14:23:50.950234Z","last_seen":"2026-02-24T14:23:50.950234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/content/images/casino/icon3/536b7cea3286ea0352ad3fa2c18a3b91_casinoGameIcon3.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:56.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /content/images/casino/icon3/536b7cea3286ea0352ad3fa2c18a3b91_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27954\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Mar 2024 11:26:01 GMT\r\npriority: u=4,i=?0\r\netag: \"65f2dec9-6d32\"\r\nexpires: Tue, 03 Mar 2026 14:22:56 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=DNCE1TiQiiHio93VeAaOrXm1V7hRH2Aouk6ixIMz5qY-1771942976.7953358-1.0.1.1-39ProDgOR7FclzD48kpp9lRdTxa5SWBTYiytTWNlrqZ29.Hto36z8CgdKo6o5Mjnfaiqf0xEkRqjPttaHFC21QNY2JVfxgZbxKcXnVuWLukq6Lk1GADjDgFyYN4uoxxZ; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nX%2FSLIXQpek1P9Givy33xbHvgkicJCe9XOly2UZgWkucIFJAJZLB5iZQ%2FVgycfs4As6FNLoKX5glBkE732qKhMHYBYIh9SRUTWANRZTKCSc0r%2F1E3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e34e81d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e376980c1324fc8d5a11c0589cb4d9e8","sha1":"f8248fc0f7ef0656544a163e7be39ba0eafc2cdb","sha256":"362762e2005b5ec8da4c5f98be076ef65fffa428365a44a7026fc924370b9dc3","sha512":"504a452738add174e580d6b1886dbfa0c3401f8cc6be06cf9f8ad8cd7dca81b2ffb9e55740608db932fece5155c653253b5a4889998ab51ada94a0d71aaa4d93","ssdeep":"768:QZUnD9GkOk47fv8568PlqS91CZckCLnWZ+Q23w4:Q+D9GkxH68MStQ23N","tlshash":"7bc2e17945ae32335ec3a20217226ce87226dc270f56a9db10c0e5de17954f73ac9d8f","first_seen":"2026-02-24T14:23:50.951828Z","last_seen":"2026-05-12T17:10:48.572757Z","times_seen":14,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/content/images/casino/icon3/4c4a0ca001587da5897edaf8b417ce5b_casinoGameIcon3.gif","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:56.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /content/images/casino/icon3/4c4a0ca001587da5897edaf8b417ce5b_casinoGameIcon3.gif HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1012077\r\nserver: cloudflare\r\nlast-modified: Wed, 28 Jan 2026 15:37:24 GMT\r\npriority: u=4,i=?0\r\netag: \"697a2d34-f716d\"\r\nexpires: Tue, 03 Mar 2026 14:22:56 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=oT1xl9hRXcEGp.qm7TY3UTM4N43ZhIE.kDqN5fakpmE-1771942976.7960162-1.0.1.1-YIrbctggVbHIhh_ndLt.eIFJeBWrapXYscVEFV26yAOOgVtKpjpSLT8sIHPIlvpadQCqmhiGxVbl85nP47caJ3a.uXxGj5QKLcvzszrqN0ZRyXw5VPQ7p637EkDHvs4c; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I52KYcutQBCNJUQC1ECeupliSmognvFeXrJHOrbWkRcXZ1Rh4SW74kyxy%2Bx4mCXCeDFBEUbOt9mAtaimyD7w5Exb6tlYL7ZWZF5TKr2JSGU1Y7wl1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e34f8342efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1012077,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 440 x 310","md5":"df58c9ef6a9fe2400b8068a206bc44c7","sha1":"aeb7477f8725269116ab2348eff848f040314c9c","sha256":"3befa99bdb44c4f4a444f29a042ece4e8b0be8713d1d6201829c01f71f15af25","sha512":"fdd04febfda3eb0ece84ab5e508e3ea2bcb839df95340ceeecdbb22667231493fe695bd1b8bf2f350d19f99d0cb133452c660871809c6f49a36b4777b5845feb","ssdeep":"24576:juvSL8fPnFliz6LiO9pkJ/mZW6OsqHGGKIP3Aem3343zcvcWgHu9pQ/:8SIftk29pMmZEuITEo3sMqQ/","tlshash":"a025339a6f88c1005711f3782e85a55efe359a809f87fdb04e333139f0cda58697a876","first_seen":"2026-02-24T14:18:16.785954Z","last_seen":"2026-06-03T04:20:31.832043Z","times_seen":23,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/menus/header_menu_751_tur.json","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /menus/header_menu_751_tur.json HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDXdQqMVUN71dbXf7CezFk2AI9C3r4UdUi%2FYWIWgSlEgJq7kCTDO0DagiqU3C7kRjqZJ5J2PyWIDYJFqy%2Bf%2BHkbuD8KwnCbG4KhwNY%2BPcQ%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"3e20-Axq+sNUh/9HRtNyMoCCJUKo54bo\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e0cd9111806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15904,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15871), with no line terminators","md5":"807930a4e5a83095316ed056cb74a9ff","sha1":"7cecdf28fcbcca6880b87db53cf2a12b132c252a","sha256":"5987a836da1b8a0fa83ffeee0b1bf2cfe4a7c817f5bd5ab7e3b5f0399207a0ae","sha512":"c991877b093733535a26e9ba10cde6bb2994e2792eca34c778bff6c23b41b81e2287752d27e779f92732c3e1d601bb434d192917620f03c80f50d65b1f02d4ff","ssdeep":"384:McwDCO9HzZmN3dpQ6evgsNnNTiAO2Ba3rqpm+x1A7TENAzgO+jKelbaP:McwDCO9HzZmN3dpQ6AgsNnoAO2Ba3rqA","tlshash":"c6621602f01e5976d3183e007cc76d5b98cd509d6c9d4940ad4e8acecbd94af8eca6eb","first_seen":"2026-02-24T14:23:50.954864Z","last_seen":"2026-03-04T19:25:33.685191Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/622.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/622.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/content/images/casino/icon3/164ad8f5eb7d9e506f4fb19575dabfc2_casinoGameIcon3.gif","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:56.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /content/images/casino/icon3/164ad8f5eb7d9e506f4fb19575dabfc2_casinoGameIcon3.gif HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2448055\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Apr 2023 14:04:22 GMT\r\npriority: u=4,i=?0\r\netag: \"64380be6-255ab7\"\r\nexpires: Tue, 03 Mar 2026 14:22:56 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=LqpGxpWRmsqmwhOGfaGTVHlcOHwlknoYGpx4sri8j60-1771942976.792983-1.0.1.1-lnG8ifjMvj0dIjpWi_XdwvtXoVMMdIeTeE19tHzCwzlYWsn0cEqRjf_58RzQo_4qkwhR1P2JzcEtcdWa.E1PZFKB6_9mmRjw9o_Ndk2OtvUNuB_ptrv3OZu4fMcUo6s0; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nzoRciNrLi8IbHBRcgrp3dGdBfGoAVLG3FD%2FWh07WofQ2wilEsInLAGi636sXURZmCJ8jUw8nCncmt8cSwmzxbptuJIrbiWZDlNkZuVftjf6VUXsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e34e8152efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2448055,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 440 x 310","md5":"84620e71035d1ac7a8b9a1f43bf60071","sha1":"047b4233e87e5cb2800e460e78c6e1662c970267","sha256":"e2ee766643a69bbb03ce8659171cbb6b7006b5a7dfd2d6a81c587d126a54ce55","sha512":"0f1a9c8402b8cbb386a1e92ffc41d0895029a317e18a0735cfc775fdf5a524db6dd461f7cca11bde5dc051941832d677ed2a73d8c977fe82b38451d59cf65074","ssdeep":"24576:yrzDgR6oyBYBNr8GcNBqYQMRyUhKa2ZCwmJ6TXu50YEE3rHBRlhN/:koQnBUxCbB3iCwm8Y+EjphN/","tlshash":"172533f44255d6e39af8f042f142259b204eed79c3a0b69b3f98d104dcecde9681af19","first_seen":"2025-12-24T22:39:16.299133Z","last_seen":"2026-05-12T17:10:48.438494Z","times_seen":28,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_255218c8ce749fe8c9dfbc0b8e8ed1ce.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_255218c8ce749fe8c9dfbc0b8e8ed1ce.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18246\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Oct 2024 12:46:00 GMT\r\npriority: u=4,i=?0\r\netag: \"66fbef08-4746\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=d0eTEG1l8BH0lFeI5zYl1m14VorJ01_0GK3F6DF1nhs-1771942972.126433-1.0.1.1-qZ.lMtHPfLKxyecFSNTrZfCCTnEhPetYPny3G22M9F_ZlCE_Um8tnTHstAMEjBf2PeOfWZOF9ENdI5A7gRi0XAAuCUe3gnvbcluJZJE.ZO7_dOyCeqPsuZuXjfM7rMn4; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DEE71czlxEy1JRBSvWO8spLuk4jcR7MKEdodwLPvzF1BjqQ84%2BK%2FUuqb4rMFAOS5jTpol0HskJOKVh9hA8VcJeMycFt5l1X9B2P2a0nEOv1J1%2FyDow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17cf1f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64a87f03ae635843aa9ddf8b795ef059","sha1":"820acaed7c185030663567efd9b9b0d820c10b2e","sha256":"eb987fab4dbb8a68ec1dac3374ab8d34c1d24e192526bfa17f415a67957094e3","sha512":"881a3d458f5189ed68310367aa0b7c4e4e51df4bb58d942b9f7c3e06a66010f735b9b0161f80028adb1c92cfc2e3df3b4760e69b0df6d84850877c60c7307373","ssdeep":"384:MTMTJfN/dyUK351WMwsPAv4eN/lz2T6zfdhXeVZA4BWDYWTsVfAEsTTQ:9Tj/NTFAeN/RG6zlIVZAkWDYWwVzgU","tlshash":"c682d037039a424351b7142fccaa7d52a4d0097b8a2be67a0d5903a54a3f7398bdf67c","first_seen":"2025-12-24T22:39:16.361229Z","last_seen":"2026-05-14T23:49:57.450785Z","times_seen":52,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"galabet2647.com/__swarm/rgs-wss/jackpot","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__swarm/rgs-wss/jackpot HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galabet2647.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 356siZzH/3c1l2yXY7l02g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: TawkConnectionTime=1771942972158; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 24 Feb 2026 14:22:53 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: QLNKYn9iZ75/8ZoOZ1zhmLr9xvs=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CuGRlQI4nTdmad%2Bp3FMy4ybyieVfGcqo%2Fn7MOK%2Fy2QXyQ%2FNiH%2FT89pWCzRrXxBX12u8FE3fewfvAVvQe%2Fm58NmKUWfEeR1%2FJ28w0ssNLgygNI6NmmWpYWtKd5Q%2FSzSwx43Y%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d2f9e187c545864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7604\u0026min_rtt=7580\u0026rtt_var=1632\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3196\u0026recv_bytes=1441\u0026delivery_rate=566805\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=ba0c4b94e782c326\u0026ts=848\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":834,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/2/4536.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/2/4536.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/442.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/442.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1524\r\nserver: cloudflare\r\nlast-modified: Tue, 08 May 2018 06:49:29 GMT\r\netag: \"579366b698e6d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=s3ZJ3ZpDGy_yLMHpnewsM8C5qvAsEpLYr8HCW9hUGNE-1771942972.8127646-1.0.1.1-47PaRJxyGuO5sp3PQYG9kegI1rOPm3HuHyyAPDsw03fnO950m1cago6P8S_FbQKBptrbZUA150FLNv7gFzWhlzM62ZnQbMwFHmjBT40KjfISK5phYTbLlsGRu9X3Vjwv; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4huctABD4bS%2BN3VRCZgaBqYL2E3joP3BwP1MbeBXJoBejJAsyuCm51NsR8IQDHkKFV%2Bbs1NnII2nq2lwh814%2B5hY%2FflKRHxaqr%2B4KVC4%2Fd2G%2BGl%2B6oBAjLrtV8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c1957c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"92e5ff15e0ad1f56af93a2b4b7de766b","sha1":"17727b5ff6b8935e19eb76a2fe9d8cce4aca5b71","sha256":"9f914bdb202f7dcea314f2d39f70aa36c4d104614adc33e61dd849498a90c17e","sha512":"08d9754b903e02adb10659d45a352f6d5fc837c1c3876ba5eaa61bafee30bbfdb0acc2f3f2e5fd35e4c30c9fb38b06eb443d5e53e78326998300648a6ee5be2a","ssdeep":"","tlshash":"4f3107e5beb93d1d4e1ebe26030a6bc0202d00f236b05754fa1dd81284bea5985c86d7","first_seen":"2023-10-14T20:01:15Z","last_seen":"2026-05-14T13:09:06.774807Z","times_seen":105,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/1756.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/1756.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1219\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Jun 2018 09:35:55 GMT\r\netag: \"65772b167a8d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 10:13:22 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 360570\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=VQ.6MyV9OvIeeIDpkyNAyKmcdLQVURDuy1Y9Byn2US0-1771942972.8240004-1.0.1.1-1bZrali26rcWtoineux50gKVIUvIhfT2aas7QNMPJ9vvoAU2kic_eui1_p5xjmkNTLYq8rZySuN1ecLjCjAqCrQVWqQaERYiq9_AB072mzte2fiyLgRI33nfG5BNLbA7; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AzI%2BOpWbWbdpEyR12Rkdjd29YRvEBcR5MBW991JCTZy%2FuzjnYbSvRVMjWb3oqg%2FbXR5lCpWEWSL2fYtiDdxXKan1MBm7EMlVVrGkZo4iKsdADdGYxcp%2FsiXCio%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29b0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"e70724b5277a3218f6ad4502cc81b928","sha1":"06ccef8f401d1a6c6aea83da78019eba6ea718b9","sha256":"e3ca6322562a7a6454b50eb6713d376a76787be1af3e73c2ffeb8c42dc0ccd8c","sha512":"11b953e00c4c5ac1a6979b80391215565b3352043668824e4cb33d6c5520e4605120c4f9b5021c9a2ea97bf94dc07e486568f01bf2d2d81f362d5eb8b4f033c6","ssdeep":"","tlshash":"1921e78f59b44bde9817d214bee6de7208f20aae9d2043df56058126913108a8ae20e1","first_seen":"2025-03-03T03:14:57.923302Z","last_seen":"2026-05-16T17:21:18.352894Z","times_seen":209,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=galabet2647.com\u0026t=1771942972836","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-02-24T14:22:53.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=galabet2647.com\u0026t=1771942972836 HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meI3HMVdh98KYePoC2mYMRQo3J4dSdleC9fnaHrZ%2BQnRooI%2BYUlMpktB8nB0f4DqbF0g6ONaglUaODqGas%2BgXgzKGXunvPq4Pmo5jBomZP08szrfH7M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d2f9e1e1a401382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3144,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3144), with no line terminators","md5":"27dce8dadb282759f0d216d13c14956f","sha1":"51c61551f2d8593c294b71ee86f550aec18c9ba4","sha256":"7b81478c06bb30b63e2de44175f400fc699d151175485f805cbd81c99181d34f","sha512":"5eaf4c35e4f69b580bb1213fcc8b8196ce95e6dcbd5aef45bfe7e75c7e396f3bab8e7e6c7b50f5cd76d26d96937cf090e28a5cbb36db05ff2e8221fd889abf5f","ssdeep":"","tlshash":"265143cc7fb0829933a71aaf5b2a288ed333d82b2dd45b4f1564f44c9944525d7e6134","first_seen":"2026-02-24T14:23:50.960908Z","last_seen":"2026-02-24T14:23:50.960908Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","date":"2026-02-24T14:22:55.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42574\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 13:38:50 GMT\r\nexpires: Wed, 24 Feb 2027 13:38:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 17 Feb 2026 04:59:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 2645\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"35052059f0efe489ccbc4fe2d8d059ac","sha1":"0a390c4c9737a0afa1f1c1dc2aad8a223f4f0504","sha256":"e4dfebbb85c1fc4aa494e5ecf5f8d5ccb9a16393b9a4c823f163d35567eddb22","sha512":"5e96841e7b6ef6faf38ae0105748fe75df1eb236a62d3d00ed1ff259839e15d738e4fe2d708fbd43ca7381ecec1d1d9650468c7b446e5508e6fbd5bebc6f606d","ssdeep":"1536:d7Rpgh9C9ToL9gTNfWNfK4Rx3DldthXwW5l1Dx7:d7ArC9ULiTYNC4RxLX1","tlshash":"77838e7338913a1afc2b8b616196bdfdf11cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-02-18T03:08:55.586689Z","last_seen":"2026-05-31T07:12:12.845852Z","times_seen":10525,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T14:22:48.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dc%2BsJxtXyPUUoVJDo%2BBEYIAMPXqYBDEnH13QZvKLbNfpHMjpMjD3hTj88TQbM2uTbd%2BCmvLdH237lklzNrd%2BfZk4gC2%2B%2BlkP4QLE5Kbcxg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e005ca32382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11923,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (371)","md5":"971ff3a9ced02fe53523761f3956e474","sha1":"885c634481725dc3ece321261c72f330f261e447","sha256":"420ea4fb597e49fdc01cdb476d221c5b27ef2943dbe9ecc798a8c665acb1b0df","sha512":"cbe8b326ff9311e625215d18fb4e2f4ff67985a4700ac458c77e76842f2fd5bfb09fe21f38b1fcb3ce84873265a077645336704c0c88a8ad6c9632b7e08ea274","ssdeep":"192:EAFaDNTFx46K0ChiQ/BIRws5JLyVZnrJEpO2rKqmx0OPSE0g1QECNzieRpL:EhBTFx470mIRx5+rOrdxU1QxL","tlshash":"4a32924ba5a2b4351313607a6bd7f0083b22a1079904fc947d9e47d81fc539992bbefb","first_seen":"2026-02-24T14:23:50.963011Z","last_seen":"2026-02-24T14:23:50.963011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":59,"dns":29,"connect":8,"send":0,"wait":48,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/___vite-browser-external_commonjs-proxy-A4ecGj_W.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-A4ecGj_W.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b2-QM+wmhU62+2MgqFzZ/0RSwzshfU\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJKACLevV7lSFewhKIL2bgYci5%2FzZJmD1yVC1WuJWZI%2FO8amVm1AC0g1PjzcOoLR4FJIuN2%2FqUzVGMDOycufis%2B%2B7DrhnI3y1s27drYu0g%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ac8cc1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":178,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"b0079630f69a9e2cdbe4b40abd97bff7","sha1":"40cfb09a153adbed8c82a17367fd114b0cec85f5","sha256":"63d661545d56e99771af0791fb8d64df0442fa66bf15c3cd130a4b9554809a5b","sha512":"df1a0c04bb298ac8e6b2bbe3f4b791a1d97597cebd1dfe507bebb9c6024dc97086dc2dc32eb2eb4add9184364d7c1ab3ba24eb3a6024a0c522b3963e0735fe78","ssdeep":"","tlshash":"63c080451a54ecb052871d828a159402d94c8d6d73f4f9d1bb4d8d55060258b627cf57","first_seen":"2026-02-24T14:23:50.964464Z","last_seen":"2026-02-26T17:03:57.910946Z","times_seen":4,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/Promotion2.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/Promotion2.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:14:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=9GD07KAwqRnCMQk_C1cHGShnP4eU0ynINnVRChWTGRg-1771942970.686527-1.0.1.1-HC0t9Z2FwKbR7WdORpCX4EOAc8zFJpejIJbKWLD6xghduy5xYRsQ9liiPfJ3VfOORqBnMAs5_yzxVhFZnp26LAzPHVTMKkUiNC1UB1EOxuSur3hVafRITZ1AiL2TgvfN; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vSdTHhGkZuaYWgdMOxrDNR4ImjIQO22mV0zeRcvqhDO8P9xYoMr7HnaEc7bitTyiOmhSmfNEdgNYFUO4bYHuoJQiF1VUlCB0dFEU1F5DHgXLuTRu8w%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627184-382\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ec8dc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31cbecb2c7e793078b4a8e43100c2e33","sha1":"e073b0e09fcd4244f6c86b8f22206a46c4af9f3c","sha256":"a7ec0feda0f0f44aecb09628876438cf31a3d33de7393d25fc1b39d6251bf104","sha512":"6762313ddd6985ca71ea5e90b3a05664d0d1a3cebfafa6da07ebff76f62a3c9634d17ac226a4fabdc606ddc5c7c7adbb4628f3e0c8a30d5e5f96e574266d2242","ssdeep":"","tlshash":"7a11cce88739e7b438cd1f4f9a3d4dcf3614261a683de034e73eb9c4a61391c652119a","first_seen":"2025-07-08T23:44:04.701479Z","last_seen":"2026-06-04T03:51:32.489182Z","times_seen":177,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":114,"dns":48,"connect":2,"send":0,"wait":56,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FastTrackTracking-BNZErIta.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FastTrackTracking-BNZErIta.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"52a-ID+LSbOKIKNMAl7iu1W5dkk6c+8\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i15yyBcs0kMYscxgwEeMXxlcpkZvkSkoREUSCZ2BKrzjObCqm1drHX2jDWoqpjgFe9GB9XEq3UJhYYJeww7EPrMsw%2FW7towCx6sESDZRMg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ec9681806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1321)","md5":"1861326333be5ba0826cb14fc624519d","sha1":"203f8b49b38a20a34c025ee2bb55b976493a73ef","sha256":"51bf4e13eb7ae22577f81b7802fe6f66aba230e326f393a6593af81d306e496c","sha512":"8b7e06061c38400895b375cbece5a404410a986df6ad8dab6b4625d6bee1d6de78743cf69dc89fef75ca29971ab2b267bbefcfb468156737f1cd3b6e4fac0edb","ssdeep":"","tlshash":"1721530f80d443b478804d8da3dba261993e9975711ec4e1f07a0bad3f0ca66839ac97","first_seen":"2026-02-24T14:23:50.96774Z","last_seen":"2026-02-26T17:03:57.835165Z","times_seen":4,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FeaturedGames.BqGfbibX.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FeaturedGames.BqGfbibX.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1baa-UnbJe3DzrIMb4Ue9nTGE64Uyotw\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPHmEIfRIgemMgTSTNAOnIt%2B%2B%2FtS5sZb7hjNhRBKG3ldu3RQinofwBR%2F2iFYuWiYbAC4Ki1texYc2Ccovu11A3Puxek7ULq3%2BvZ57IGNFw%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a231806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7082,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7081)","md5":"b9d344659eda7f84d59b2ca785922590","sha1":"5276c97b70f3ac831be147bd9d3184eb8532a2dc","sha256":"e89b502316316e94643e2b764cf5688400f9359a0dce35ddb32f4d1b6025e20c","sha512":"56e9d6058b85b8fd878993b2ee6e6ed7f5acfe624e013631471f889e36f34543c3ec77987f452bd46ec2e5c5d93266f4e01a5f80662867760c46463fe4c7235d","ssdeep":"192:TYFnOFceEDvCElpcFpgZFcV3r90CCkPaifKLwp2xA:sFnOFceGrcFp+FcVRWg","tlshash":"cee13115710e3a387a23a1ff26905b8ef4dac0f1de2a2d3ea490272bcad63560535d58","first_seen":"2026-01-23T19:25:36.430155Z","last_seen":"2026-06-06T10:12:11.753457Z","times_seen":529,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/useJackpot-DIZu1EfL.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/useJackpot-DIZu1EfL.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"529-bFoXraFaLuEIo1H06Ma3rbmpYPg\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlWLcZ0W%2F2VNL0epVt%2FNYb0rjnLwz3f%2BhzNDB6xFvbTB6mJgXFCIbipDaaDnEWggnMmiby2%2Fch3mGhmsK%2BTNl4EV9iX79LSz4WndvUXxXQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa2a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1320)","md5":"f51e23fa741958fcc0acdce4b55fa46c","sha1":"6c5a17ada15a2ee108a351f4e8c6b7adb9a960f8","sha256":"7f255dbd2ebc95805077d7472e6cd99de2b6a488a4b6de2e3a50d6fa20a29d52","sha512":"2208a19286c5e3159732a8e30c75655fbd4bbd9fbaca53ea603e91996901533b4fefb57d23a5e7a859edacce3dfb03b856226dbdf2ac6d159600f466a254d577","ssdeep":"","tlshash":"8621264e5049e2f8f48988f20022537b7b3c3f29b590e0b094ed5d6da269d96fa30a46","first_seen":"2026-02-24T14:23:50.971725Z","last_seen":"2026-02-26T17:03:57.940737Z","times_seen":4,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=Z.EHUNEECfTAeme1ijgsr3QKZfClQAMjyp1ufjPrQ_A-1771942971-1.0.1.1-DyYJBERnJs98qBnEOCzKhXQex_cvvF9DcssJDz7jfdsKNBGzeVDWgNB6QGUIiFM5drcZmLgfWZBvT05VhS_xC_fkfpwjHq5SpnTpxUH69pQ; path=/; expires=Tue, 24-Feb-26 14:52:51 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UsF4iqyk473c2WhT0AoNeQW7DAtM%2FV9NUoJ9sxGWxlmRRPuFUzuwE0vGMhwt2wLtm%2BEkhjt7J09oIdReCdsjXs6DojI5s9%2FOtXnEoqnbg%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e14caca1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":442,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9eb5f255b72886f8441939dbc68b8d7d","sha1":"9d4429895d34b8ac2db4d739de24e77852453621","sha256":"9370727fc5b134e0ad6f74ea75b79a60549dab056f7d5e4b14f56f63fc0b1142","sha512":"a0c3c62794853560ad376ef7a5e374dcc7e20321231ab1b094c26337a4eba781d4f2e69eb85fab0591cb2a15d1423e9076cac0a2c0f8130c592caef5cc826204","ssdeep":"","tlshash":"f4f0dc37972ec921675042d0c04f353a185e028cde00ee6c999dc37444e8379a1220a9","first_seen":"2026-02-24T14:23:50.97383Z","last_seen":"2026-02-25T02:34:32.57258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:57.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 21 Jan 2026 08:14:20 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: J8ajF9t6IlT2U7tuuuuEWLpJqziHNggp\r\ncontent-encoding: gzip\r\ndate: Tue, 24 Feb 2026 14:22:44 GMT\r\ncache-control: public, max-age=120\r\netag: W/\"26d5c6e9eb5b8acc5d7f0a4acb0bb17d\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1b7f8001b2b06f9624559a35b6822156.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: rCBNbQYy2PJXN_hdjlU_h7tyVuvel5Fk1UJl20fKFVE4CHvF_Tc7GA==\r\nage: 13\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":108916,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-05-22T17:22:58.310306Z","times_seen":50,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":88,"dns":73,"connect":1,"send":0,"wait":25,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/___vite-browser-external_commonjs-proxy-A4ecGj_W.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-A4ecGj_W.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/WagmiConf-DcRD12Of.js\r\nCookie: TawkConnectionTime=1771942970238; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b2-QM+wmhU62+2MgqFzZ/0RSwzshfU\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OrsfFigAhL7%2BsgUmc7x41s6iCTKY%2FurvhF5zyKgpUfN6X%2BefoMg0td7odwDHHhRFOUSgfKNA9Rt3F1szLAoU5PN40sHhesyNvd5oDJZAQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e0c29001806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":178,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"b0079630f69a9e2cdbe4b40abd97bff7","sha1":"40cfb09a153adbed8c82a17367fd114b0cec85f5","sha256":"63d661545d56e99771af0791fb8d64df0442fa66bf15c3cd130a4b9554809a5b","sha512":"df1a0c04bb298ac8e6b2bbe3f4b791a1d97597cebd1dfe507bebb9c6024dc97086dc2dc32eb2eb4add9184364d7c1ab3ba24eb3a6024a0c522b3963e0735fe78","ssdeep":"","tlshash":"63c080451a54ecb052871d828a159402d94c8d6d73f4f9d1bb4d8d55060258b627cf57","first_seen":"2026-02-24T14:23:50.964464Z","last_seen":"2026-02-26T17:03:57.910946Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/withPanelButton-h06qeZmb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/withPanelButton-h06qeZmb.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/NotificationsButton-pLBpik3l.js\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"441-LWBOtd77nT3oKQgrlf/bFPUt0tI\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8MVq9moFVVhFAPCUxoBVRTiBgaYrU9L2nuglRJsEuF3LdF8t9w1zqaApajrNyMLsRDQSuvykF8y4PFJMVM839oU12vsZ%2BjQ%2BEzvO6Lp4Q%3D%3D\"}]}\r\ncf-ray: 9d2f9e118a121806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"dc9a073bc116168bb1ccb3db6362b167","sha1":"2d604eb5defb9d3de829082b95ffdb14f52dd2d2","sha256":"b2a956b6195a69a32dceb99f54f6ed7835b54ec4a5c855ca7bdedd26536e97b1","sha512":"05c7a6f302c209e94029ef151d80b3ee05d9d20e6398ec5a3515584fe9bdab6cc7a305803e23110d3233ef57f2925ace9d82d67f74be4b530563b2f9a809fa8b","ssdeep":"","tlshash":"5311fce5f584a9b2e0c41188577b2cb6759a32c9dce114d031b6c8ea5fa80489a1e9ae","first_seen":"2026-02-24T14:23:50.979064Z","last_seen":"2026-02-26T17:03:57.873198Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"87f83aeea14051d9edd97ec3dd41fa0e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 337548\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e18c9ee4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"87f83aeea14051d9edd97ec3dd41fa0e","sha1":"8649c359a630d1c55eb268ff051d5a284ef7587e","sha256":"38a072ee28e39fadd2153244a3f0a48df473ce7d8dfe16e2f2fcbe5d9cd0bc6f","sha512":"c56e03220951ba738fa2f29bec6d02b1de5ca769f1f41c39ff3f12334b16d0a82db78487c4e4cfcd8fdfaddf4af6b923c725af335346028224efa849bc140eca","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DZSLi8","tlshash":"37822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-02-19T03:13:10.613764Z","last_seen":"2026-04-15T01:21:42.807167Z","times_seen":8478,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 316815\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e1afa374453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-06-06T12:51:01.642393Z","times_seen":43340,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/411.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/411.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1531\r\nserver: cloudflare\r\nlast-modified: Tue, 08 May 2018 05:56:05 GMT\r\netag: \"298db4191e6d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=UaegEbvVcr2D0miGdB0uRczCE1QvLgxKf.Y727Y1U_A-1771942972.8268409-1.0.1.1-X8pkmcvCZmpWmM7Yn5KlY3blQU6BNQIlNn2z2Bjwx7r0xPgwH0PJ2iz9pVmZ0QmqeevoWL5IpubGl9u8frrmVfB3o4P9XTikmwFviOKpBsFFJOq16IZKfBhEoFeLR9fl; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3MvmRayPUyALSHm4p4i8u%2BCJ7odjIkRFlkbjRufCeDrKMSxyee%2BZVtQGQHuPEq9x7I3W2wEh4hlrNvjiP6eFdETdag1hug48HVY40UF9h9XVNISUeUcEK6g5LQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29c8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"0645b77a5ed9a3fd5cc7a30f123de5aa","sha1":"1c4cacbc335f1c5150954d69ca009f3d11d2230a","sha256":"a54a39160f5e9cf34ec35825a936fb1e2201995b75a8fecd572ba3362ec24942","sha512":"d801545bd861c3cdeba43bb695daff723f98796224c367c73f6a01d8af022ba6f2eba25737d0dac3c3b7acb87f5947a92ae444eb1831e3ef62482078fac164e2","ssdeep":"","tlshash":"3e310743371a4c042c32441c1ca39822d04a0adbb637aaea3464f8763a31af3ea05977","first_seen":"2024-09-20T20:07:53.503023Z","last_seen":"2026-05-14T13:09:06.821174Z","times_seen":215,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:54.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 367288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 23:24:14 GMT\r\nexpires: Mon, 22 Feb 2027 23:24:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 17 Feb 2026 04:59:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 140320\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":861770,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (581)","md5":"205fd253c40be836ca198c86ebf9528c","sha1":"1efa4ed91199a039607be80c80897986e9eff572","sha256":"e0a77de1f1d2ffc5ea5bd48a92a9f465126fdd7c87e433962f55966c002ba111","sha512":"ead0b69f1ed577c3a9f70e534539868909946b8c3b6f703c8d38d2343c274afeb52d25dd5f0029b5ae28e8682f7c153d1c22596f0a2693cf880b76f590b050ef","ssdeep":"6144:lm3CPpl2pfyCUg4ZkHWOJN8Igixk5RtrsgKnAHWbacB5EVjOo1E73mjRHuGMy8ZG:UnpK5lM8mxk5DB2bv5WdK3LyHrGYia","tlshash":"6f055ad8721679614332bcfa64a31019a33e9666c89c4c5eb5e5c6f13ff084870b6eb7","first_seen":"2026-02-18T03:08:10.402444Z","last_seen":"2026-05-31T07:12:12.631707Z","times_seen":12048,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":83,"dns":4,"connect":9,"send":0,"wait":10,"receive":37,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-02-24T14:22:55.900Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":151,"dns":0,"connect":1,"send":0,"wait":0,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/fonts/default/Roboto.woff2?v=63","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:48.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=63 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index.BJU6hB4z.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"faf8-1a8G5XndX0APgDtOJLwQIHQLC4o\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sqo7BpUh5OVrwmfAc6Jy6oRNEhgtX4KC0T4ty651r8YLxz%2BmAZWwsksMbqCXWWxV6RAEGzVMO6c5X8wL%2FxlngUitk%2BHZ6MKirVM%2B0CHd9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e03a8261806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-06-06T03:01:40.602831Z","times_seen":2785,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/Popular.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/Popular.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=OctF6FOq9rAsaFk.EvJaDiTIWwNF.LRtW8WIBO06An4-1771942970.6878026-1.0.1.1-vRf3vHw9C2Ysxh8TT6lC4F7JYrJgvc3pVLh0h167zo4oswIgSjAoN5CpVXYL_0PKrPtDhC__w6DHI_sov.hHbsAbpPFPB8JuWZRCAnZtJUcjQ0S97mEyhTuqX0MZo44B; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KbflIfGPrcFd3mkT42kf9V%2Fkx6u2JQ%2B0dGJ8V34HhEde3Oh80Bw%2Bn9oWtP4tYmDzoRM7e64pVOhwex3gNyZsPuePHNdqGoE3kPqg2sZftJi8u1AV1Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"6862713b-6b3\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ec8eb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c5f467071e8144988f2ffda2539a7fc1","sha1":"8a2e6953f7f16e38d2c4fa1273ddc217cd623d5f","sha256":"c8979e47d3d8b0c74956b41914c9b7628b362e6013d9f040fce1ea2219e64857","sha512":"1e58d1f9a594b6d9b0e3968c137216904a37abef225ebf00b88d6764df8c8ff0226f5f6307a23e48944071bdc36ed786297968db893be66cf7ddca778015e6c3","ssdeep":"","tlshash":"463110e8da56ebf43c54a30ef7386cf13157085b78d38224052f1e8a23dd519afa8862","first_seen":"2025-10-26T18:38:27.855792Z","last_seen":"2026-05-14T23:49:57.482171Z","times_seen":63,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_994c5cc67d8111f923a41e1929fb1499.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_994c5cc67d8111f923a41e1929fb1499.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41136\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Feb 2026 10:48:50 GMT\r\npriority: u=4,i=?0\r\netag: \"699adf12-a0b0\"\r\nexpires: Tue, 03 Mar 2026 14:22:51 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=GH8Hd6RIq._S.zZr2h8P4wYTy4yehNKxZIOo7dwdSSU-1771942971.6339378-1.0.1.1-L2UoYcOVnAogYAtEUzLxZvYjFxHJQrIiETdwSmEMpiGa9xVh.t5TShD.F4JFvv19ceJ_Qg.1hbHGFE8v3gCG_mVYV6hl5BaBhjIoYdphHvgpoHfB0iXpxCil.SbQ2wfP; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wHysIMBUt7OhagndYjRpoWDetg%2BDzvoR7d3kUBaDVaX5TkG1Q3Z2Bq1rOkzJEMJ6no1O5SiYdHI5Tkdh4IhlH8ZmU1JmSHHo29p1EuK2Udvelrc8XQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e14ac9d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":41136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"31e72ca22eba30079b5f911e004053f1","sha1":"f3840a381ce10bb5a65ea19decd58f45a93f926a","sha256":"b469ab3dfceace1cd23706528192d06039d90ff4bd8916646614ec2c46847ad7","sha512":"7186f1ae6da8962cb1b2bc5212b705f5a30d274f9ba9a99b96ebe9a8d50fef6c98de0a258d0c0152f421e21fe939d3307e371660a1e5523cd099d418b63cc7be","ssdeep":"768:5/yBq1YIf3+Y9/xiUKezppPMHv8zPJiVNyk8RTFQHvcm56+TGI5:5h/+Y+Be1pMH9nP+FapDGI5","tlshash":"db03f288d068fcf689b941b1f39b1b389bd20b2d0d94b9708402e85afff3275d265d19","first_seen":"2026-02-24T14:23:50.987981Z","last_seen":"2026-02-25T02:34:32.517771Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/default-profile.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:54.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/images/default-profile.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:18 GMT\r\netag: \"eacd4642ddb798db835cf8f285bbbb19\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 640206\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e242b714453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4153,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eacd4642ddb798db835cf8f285bbbb19","sha1":"a2a781dfa78e4c6dfc46dce8c4ba794153769dcd","sha256":"d30ef5a13391aefdea0738a1e15d88c19e986f865409f9457e5c7d8468e15817","sha512":"7a0c8d76e514600948e2476762204bd1623e80557935953b2030e089a9a261172e2118d4b8c772f1f0f48930ec0370de302f1a110d453289f8e253c01cdb290d","ssdeep":"96:669HR7ixPzTDJs19oeU0vEbPo2U0vEZv8JLJA5tBLJyl5a:BR7g3DJsfzUdPFUzkp6PReo","tlshash":"93813068c358e3799dd287fcef7aa4f0a0aa50ced1f783544168865032a29dcf34e8d5","first_seen":"2023-05-02T11:30:58Z","last_seen":"2026-06-04T21:03:57.742303Z","times_seen":537,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","date":"2026-02-24T14:22:55.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 367288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 23:24:14 GMT\r\nexpires: Mon, 22 Feb 2027 23:24:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 17 Feb 2026 04:59:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 140321\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":861770,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (581)","md5":"205fd253c40be836ca198c86ebf9528c","sha1":"1efa4ed91199a039607be80c80897986e9eff572","sha256":"e0a77de1f1d2ffc5ea5bd48a92a9f465126fdd7c87e433962f55966c002ba111","sha512":"ead0b69f1ed577c3a9f70e534539868909946b8c3b6f703c8d38d2343c274afeb52d25dd5f0029b5ae28e8682f7c153d1c22596f0a2693cf880b76f590b050ef","ssdeep":"6144:lm3CPpl2pfyCUg4ZkHWOJN8Igixk5RtrsgKnAHWbacB5EVjOo1E73mjRHuGMy8ZG:UnpK5lM8mxk5DB2bv5WdK3LyHrGYia","tlshash":"6f055ad8721679614332bcfa64a31019a33e9666c89c4c5eb5e5c6f13ff084870b6eb7","first_seen":"2026-02-18T03:08:10.402444Z","last_seen":"2026-05-31T07:12:12.631707Z","times_seen":12048,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/AppSettingsButton-B9Bfk5lt.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/AppSettingsButton-B9Bfk5lt.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"181-Q3sDKsT6bx9KhAS1P7rrjvAVpyk\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21Z%2FOFCbDEaoOwr4GWw%2Bas9j8J1aqjb9Gm5hT7QiBWBNQUMDIWcV%2BQ7idx0%2BR5cTxEuspTvvl97g3hWD8jaMwnOGJuIIrv3B9e%2FAm3IvMA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ea95a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"11b72d538039debad23018d55f70656a","sha1":"437b032ac4fa6f1f4a8404b53fbaeb8ef015a729","sha256":"c4f26646d48d997669963b81485af4a66a84c589c5005fa9aac7e81ce4151bd9","sha512":"a558a63166c1c05cd1f781fbe1e412559881d4e502a5768961783da4cedf90ccdb34d072f0921cc027c35bdc157f9fca17973d2e5617b1eae1ffcf1e7ec37c79","ssdeep":"","tlshash":"aae0c08b90c2d3fa03d27fd1c51fc2057e1bac78d394da4180fd90617ab4182d55e66b","first_seen":"2026-02-24T14:23:50.9912Z","last_seen":"2026-02-26T17:03:57.902053Z","times_seen":4,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/PromotedProductsWidget-DSoPzSu9.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-DSoPzSu9.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7a0-RzNYavmAQgZgwaYozgIKNiEGsW4\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMZ2W1eaRxmGzODRIhGNiS5xF7YKBQ%2FZREwkqa7b2tlVJNX59ggkzqFq6ox%2BdUlwpH6FFBZqdNcIcFrHFnHeLCW79gIHsanSXgMHn95buw%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa2e1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1951)","md5":"d25f49c76bf72dfb92284c6c8f2dc43a","sha1":"4733586af980420660c1a628ce020a362106b16e","sha256":"2ac7c3f2e2427cdc73697125a1738aa01a5fe580bbef638ef5212dd8a5294adc","sha512":"d86d81adbadb6bf8b8413a53dd5a04b75efebeca14413a687d0bcff91e54809a670e26d12566633c3048257c0e7577073444220d4b0890e9ffbdf6464d43f84f","ssdeep":"","tlshash":"d2415443d535a2b9f23a5dec264210c43c167d34d5b148a5a0b7bd1e9039826fb92ffc","first_seen":"2026-02-24T14:23:50.993184Z","last_seen":"2026-02-26T17:03:57.830859Z","times_seen":4,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato|Lilita+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Lato|Lilita+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Feb 2026 14:22:52 GMT\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2f31f582a62929942285136edb852eb4","sha1":"ade05009e3f52242452d23f325d0d60eb2f4945d","sha256":"86d1d33f6f9e190954cb9cf8f930c7ce03e60bb102b64f2ce0baab352285acab","sha512":"2e4b5ff5cb64ede4c3e63e2477f156c55597e1c3ddd83d888fd96c66bf7cc6716dcf522fad19cdde2a4a564f530022feaff488500797d01f3673e52e295ddabd","ssdeep":"","tlshash":"6e31bf92097ba80497930dc212ce7d32ef1e62406845a825afff18dcfc67c699362b0d","first_seen":"2025-09-20T10:36:49.753015Z","last_seen":"2026-06-03T04:20:31.930972Z","times_seen":143,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":117,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/lodash-BtsIEKKa.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/lodash-BtsIEKKa.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"28638-levksTw/7ZT3AoNV3Eni1s4AOI4\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0I2XyzQZvFbX0gJhUv2RdS3WPzLHX69DXnJCdQ9Rvg2ICoCNBSMU9G4MGdf%2BRz89q7nfAbtp1K%2FKUFFQozlpIZSfLFQptxjWbf2oHSFu0A%3D%3D\"}]}\r\ncf-ray: 9d2f9e06085b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165432,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35494)","md5":"5bc7777b8892642f23cd66c6e8d340d5","sha1":"95ebe4b13c3fed94f7028355dc49e2d6ce00388e","sha256":"b63e578e7a1623b8704017a97c4c4a2fc9893e75cacb4036d7a44e0c4130d890","sha512":"7055ad31472662e8b5c146095854ace0e9c9ba9da557bc6fdb31cf77082a158465dd5eb9144c3c16209bf8feb546b15556aaa0449a60365430434c01913f7031","ssdeep":"1536:KR0fO7acP1TyOF/Lkj1hvbm5889266e0YRbIfY47ePu3nVd7oa+i5DnIp6EvIjLv:KScPuV/87IQ4Xn6sjLeN551tQr9M/q","tlshash":"74f3a0c835d3f4a283a7287440bf084bf23dad65a84cc554e1aae0dd7db8919c277e6d","first_seen":"2026-02-24T14:23:50.996294Z","last_seen":"2026-02-26T17:03:57.824337Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.btcoservice27.com/?type=json","fqdn":"geoapi.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9jSxnGfPs9UkGi1LP3kYD21I8KWuUIog1VB0NbRzw0OT0KANga8d2htA6NoSE%2BpZFkcufn5f1TR4pqQUfQr8vT9l13XAEJgYDrxhv1PZ3cWYvq9u%2B6DGw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=AtQ_xK4vl5DggJLcdyOCu86pMhJun5LrlbPwKKlLktw-1771942969.6560395-1.0.1.1-mZckVtOzTtHrzidDHFgfITEgLsr28AA1ByuW2ihYLPfbRu1NyCcLbPR_waNbkEwhE8mwno7USmClGsX7djouPxoDvSEcmC7AaA8bpxZb4DEsSHzyChrrrB7CvJ6sWAYj; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:49 GMT\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e085f7e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":63,"dns":33,"connect":1,"send":0,"wait":91,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Tooltip-CV9gl-ox.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/Tooltip-CV9gl-ox.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/JackpotPoolsWidgetContainer-CG5gkeJb.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"334-Ak77TyGB79Nf97CZbjUX2xIDkdY\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YK6oXbPBRuOUaOBFoOJGblWmT5ogOnhJ3cxCqf0rZzCEgy6p%2B2Fk6PpGKikGSAF2P4ukHf3yVYfdgDbwWSLhX1soLVHztQ9%2B09XSshzJOQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e14aab51806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":820,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (819)","md5":"c664a5ff794ec2d4923355276efa0494","sha1":"024efb4f2181efd35ff7b0996e3517db120391d6","sha256":"0544e8134a6142b6b1562ae0ed7f436c4432371c51bd27b2d4ef7787dded9749","sha512":"7e3e1f83336d26f2e7024b35825c268d4ada8b770e4a4bbfab2b2d7d160dcea410b775fcab5f563b66fb1767aca1fa53e891581c14e489fc1529c703f82cf51a","ssdeep":"","tlshash":"1201f646e032fbf4e17754db142d966d7253266cbe2f58f0a038058f0ae4984d317b8a","first_seen":"2026-02-24T14:23:51.012578Z","last_seen":"2026-02-26T17:03:57.835687Z","times_seen":4,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/usePriceChange-CQ4NeD1O.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/usePriceChange-CQ4NeD1O.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FeaturedGames-CmnWY5V8.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1d6-c3O9yJeUB7EHs/ybuJ1hO+/mdzE\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bftDGmkXxrHUhNhBlVLKa1gRaWsc%2Fi0499Db0JgYXhnVLxBMMb23mdwgsOu%2BPI%2BOg0OL7XO%2B9jIipqYbHhh%2FhD5FhJkEGHppJa5M0otSfg%3D%3D\"}]}\r\ncf-ray: 9d2f9e14cac71806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (469)","md5":"d734f3ff02b9a46256efc81b7db6485c","sha1":"7373bdc8979407b107b3fc9bb89d613befe67731","sha256":"fcd3434c3c2ba621778d372f19f8aaf5cb131adcac607bbcd2a765cda41ff091","sha512":"321e139a46f487a92e3a04e3f4ae7c7966058360ab75507b71e10bb3cb651faf57d4e0ea49bceb28278346ac20cc9186839cf7fc1909527b910069f62b40f8ea","ssdeep":"","tlshash":"9df05cbe54901823945f0cc8c26486571fd126d56bbdc31eb230c82d375c9af0a6ee66","first_seen":"2026-02-24T14:23:50.894874Z","last_seen":"2026-02-26T17:03:57.782605Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/HorizontalNavigationListItem-D8usqGBs.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/HorizontalNavigationListItem-D8usqGBs.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FeaturedGames-CmnWY5V8.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2d9-WwdKMm2CY+BSr3kyBQxN1pb5XdY\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgVDrFMD0QlkTdBpcyKAZ5M1yKrRu%2FNireizlrW7RzwSaiPSJWzwV5NU9cuNOYU4gLkgYHorQaqawccZ24CKu8lKeyCySVuI0kBns7fYhQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e14cac81806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":729,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (728)","md5":"2ee91c2a746e670fa0395e2402ebb652","sha1":"5b074a326d8263e052af7932050c4dd696f95dd6","sha256":"6bed6f8c738e862641eb57d60efd2be604d705024d3576fb68a1f6cc491e62f0","sha512":"15a2d3022a25b216582a549dda022b4de3fc8eecd4d2e519a047d4ff7abf1e3ea3767850c513f5cc800e846c071b7263da71e4dca1a299a8754660a8227a0291","ssdeep":"","tlshash":"f001c001e014dbbc9a2745ccab8d1089b5479afedf782ce190f4e12109794593a86f8e","first_seen":"2026-02-24T14:23:51.015813Z","last_seen":"2026-02-26T17:03:57.886757Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/4/9486.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/4/9486.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/5/10072.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/5/10072.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1402\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Jun 2018 12:04:46 GMT\r\netag: \"4e99ae18e8d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 25 Mar 2026 07:29:34 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 111198\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=7W_y1nTvYkGXlD5xywPRlRhr4i_XHh2xF.s4HSBN7aY-1771942972.8073514-1.0.1.1-q.bNxUk4S7Un3DpBwXVVGHLv3ZkKEv6OBKCmKzdJFz21YkcYuo4FPRHD86Y4Ag9mJfJXhkabyaPZfe_2uNji3wuo2KIVHCaAt7dAuJP7hLqoVtuY09ZU_jx3nzBaOj.v; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dS0QJqVMsCZPW9h5Xqq0UpNSxTcPCBihszkMRveVx%2Bpz8wg%2FBZUb2zgyd00oOovOY3l7N7PJiK%2FY139B7HSlumAEFy3SbTdHMrmIGuprQpV1GR2MRf9bs%2FFGGwk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c0938c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"7b160e50f9a06384b5467041d979d82a","sha1":"0bb19d3e0700d292c44740e1f18c1e56a7b5c279","sha256":"0aa62cebd010747a6012816c23d8ace9cc5e4408872235462275d9d7d157403a","sha512":"5363e4672e393723078f3dfa4630654a79b3b23041ed43d6d691a86b8377fdb37d6e8cfdf30c616f5acb128fb1adb0159f1ed2eb2a81b7be18f1c48180671aa0","ssdeep":"","tlshash":"d1210bc399c0515c3eead12a3fef0861d71667775184c65210a2d6e3513c15c5bfcf41","first_seen":"2025-08-15T09:11:18.021094Z","last_seen":"2026-05-16T13:14:11.607607Z","times_seen":187,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/fonts/default/RobotoBold.woff2?v=63","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=63 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index.BJU6hB4z.css\r\nCookie: TawkConnectionTime=1771942970679; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"f250-sdZeMF6FDN01JzT3hCzd/TDwjQs\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hO1igm43aM2RJV4Svz4P21QYoe0YxnH0Lyh4l51VG35I94i1c8fJW2eTiThvfZtBY4p8V2URe3fHfQeW25zywAz6zvrrNAbAPOYzSwuhIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e0f19891806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-06-06T03:01:40.649428Z","times_seen":2659,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/CasinoGame-9WoCdzkb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/CasinoGame-9WoCdzkb.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/AiPromotedGamesWidget-DayfNQl4.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1711-3g/7tiv5gKanaT0XABGV8MoCUA0\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyhxbYiCwJIyH25Cff%2BA2UP%2Bn%2FNcLfnwizpvnsXDpPdCNmde7JjMYbBvphdObQkB%2Bq2x%2FhU%2F5CytfYbAkKoaf%2FDW6%2F5LOmiYOAW5hcZaMw%3D%3D\"}]}\r\ncf-ray: 9d2f9e14aab61806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5905,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5630)","md5":"9394597a4dd6f86f5e43d734a073d194","sha1":"de0ffbb62bf980a6a7693d17001195f0ca02500d","sha256":"3d3c7b4dbc38c7c892cd346771c606bfbcc9ccf8d621bc8f4396ac7eb76a7227","sha512":"9c17ba1fbc81d094106907fd547a69faf5febd87bc4c795dad206094a9d355c27d89cdba231a68f340c25d1bd1821343fedce2a70308c9ceb3aa63883383a323","ssdeep":"96:jx1BM8Xcl/jL5p8u+m+9Z87/ORx2CZZ9Lm7nxT+xmZ97vaycesDa+e:V1BMJl/jPIm+k7jKq7nxKx005e","tlshash":"f7c18504e014efbdb8360cca986f202978191fa2de198565f47da839367c11db627bdf","first_seen":"2026-02-24T14:23:51.033613Z","last_seen":"2026-02-26T17:03:57.889854Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/walletConnect-CiycSUBb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7ce-4NL9XQUE1X1LJPUYsilS0smIp/4\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMON4Tx3pUSXK97EuSgMjPM8rVmAwrOg4IWdmF2FiOXvUhLn4vuEpTwf8qIoR%2FwytR%2FzYkg8irqAsH4yxA4ufrzU6W7O5zhk6L%2BBbWsBsg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ad8d01806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-03T21:14:05.323244Z","times_seen":1658,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/GoogleTagManagerTracking-D0YNYPoP.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-D0YNYPoP.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3dae-TqkZmkmHKEAfsC/Hqfm1cF1+lvs\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JP4%2FIUqu2ErsSZikjQ5PkG4hBiUO6%2FNdsTmVX1RvKExK3EEAo%2FHzNIeyCnitUppfYhn9xqrBuphQG6QXPXSaMIC90gk1%2FekLqIjfkhkp1w%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ee97e1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15790,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14494)","md5":"7ba959810d4a9f7754c1811a32e116a2","sha1":"4ea9199a498728401fb02fc7a9f9b5705d7e96fb","sha256":"e3cd4a119c74e94648e229b1ccf657d25f63b948059b222f30a4adf5187c091d","sha512":"2ab8952eb3f12b16f8c4ea3d244d4da7d41281c83bf2a36a1a7b2a741c6ef5ad977478d3ca25cc1fbdbd8b60c91df2ab09096f4788a82d5af08b5ee30f5cf545","ssdeep":"384:oT5rzmJK7O+CQsGPsR9W+/kyMVVrkfknk/k9ktg7riGw7DUe:WrQiO+FQR97/kyMniKCuJ3SYe","tlshash":"f36295d7faa558a0b0bd4de81f9281c23ab1b56af58144707c7e3c0c6378e0af19596d","first_seen":"2026-02-24T14:23:51.041512Z","last_seen":"2026-02-26T17:03:57.813524Z","times_seen":4,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/useNotificationsProvider-BxGEeL4T.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/useNotificationsProvider-BxGEeL4T.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FeaturedGames-CmnWY5V8.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"5c-rUe/qyjmXYNkrRlPutI65eeaFt4\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZNFGB6b%2FcWvRbILlMbkpeWjrFX4Ekt4wWr8sOFSYX8tFpZUiVYwZ6ZK47F08UUx8xWrC2FqWnJLw18%2F6b%2Bk2iO14LMGiLNpUM%2BBOFxAQA%3D%3D\"}]}\r\ncf-ray: 9d2f9e14bac31806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"2d9d5bd0509144a8bc2d18c111af42af","sha1":"ad47bfab28e65d8364ad194fbad23ae5e79a16de","sha256":"2546dc615d6b471b0a8c83a0f9b156a345134b4484caf6574eb58c5954ba9100","sha512":"b5cde42dac7ae4b2a865530dfc69039ee3efe535764378d517e156747a03a735449ca23f15fe699894692ffcdeba8bd13ef0f84fb297d1605496ddb7f0a13144","ssdeep":"","tlshash":"c3b01213884013f061010cdc11149c294f31483c3381cbb05034811c11e80858b0e901","first_seen":"2026-02-24T14:23:51.043147Z","last_seen":"2026-02-26T17:03:57.849061Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/1/3873.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/1/3873.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1280\r\nserver: cloudflare\r\nlast-modified: Sun, 12 Jun 2022 11:58:56 GMT\r\netag: \"c6c96ecb537ed81:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 07:32:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 24600\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=39POfGTR6HVBFj_WbxGgKeqSu51kmoSVi9iba.UM9no-1771942972.8114703-1.0.1.1-b0Y2ceea4a2rjW3JYld2Neqdd7CO0X.BMBxAU_lqCV6490mqltS5rPEZ0DrTEsOetvbdIOyAsYS9PB49leEz6eXHLaig4WzMryVhxWGntXL3Gm5PHStBmEJrg83GlWoP; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FfSkzZn3qxLeUhCiVkk1uxcGYo9KJNVFrpX7raSZyvyDfaQkJVxh2%2Bt0YK3CWRfqQlC4xXIywiLv69chAiH5CqRU5hntRVITKrn7IVoq%2FOAPIfuvLxNwAMJuhy0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c0950c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"dce7b620e916fae2164e5ebde676c96d","sha1":"e89b69c6a24faf8205d18d73175e23f1fd18cda8","sha256":"2e9854bb685503192e359db49ad05104caac42a9e184fd788ed8eb12b18fd89b","sha512":"d8809ad8ba2b68471c707dc3893f89119f7844ba68f73a0e26eb89510a16137b08439bc5ba067e5a3468803ae5ccefcae5d8203a7c0b5cd0ea6a646c8e571e94","ssdeep":"","tlshash":"1021eae57d0981dc7c870dab19fa1d7130ee6a303350b5439e101af0621cb5ee627549","first_seen":"2024-09-01T04:32:16Z","last_seen":"2026-05-23T15:21:21.664806Z","times_seen":248,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/events-Bn7gRKKo.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/events-Bn7gRKKo.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"17fd-tS/3I7ybaX1JRyB4J25+x9y/+PQ\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mu9KVxvmPbtEPu1sy%2BxMVtfGgQYoBexr051ACICqsnRvLDvrTU7avLHoOXXZ6DDFr6m2iPgd%2BGi7VzEGRxlf4EHv6vEBBLuQNwKi3RlnmA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0cc90f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"090be51e82542a30e21e332ca13babfc","sha1":"b52ff723bc9b697d49472078276e7ec7dcbff8f4","sha256":"75312eb0c62a763d09fc4297b47a9432ff15df3e82e2398247716855e7d21583","sha512":"b8b9804b08e0ca7f898643e26e9277b1273e6a53b8a6dfc29f97ca560c5d4f91e23527d7120989911d65fdb3cfa467ddb2ae4986cd90f6adeff0cb8e406d66a1","ssdeep":"96:Pd9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:P3IM2sWMtBq6n3PzH","tlshash":"27c143ccb38578b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126b78","first_seen":"2026-02-24T14:23:51.051447Z","last_seen":"2026-02-26T17:03:57.746676Z","times_seen":4,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/loader.png?v=1767600520","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /loader.png?v=1767600520 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nCookie: TawkConnectionTime=1771942969573; twk_idm_key=t9C874Dq41eGy2C191AQv\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 456\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1c8-ia8wVKtM84nn6QXS7HVglYAWgM0\"\r\naccept-ranges: bytes\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnRZXMj1WA4hZm4PqS%2BbnnFhfYRsrta1FtmxC3vPASTDPCns29KoCgCIRjl%2BXRKwEtYDqGp8olh%2BB58VCXUgkCfcfiriCDaDP76Fj0LYxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e07e8851806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced","md5":"ce13d4aab7656181924146d7eefb42a7","sha1":"89af3054ab4cf389e7e905d2ec756095801680cd","sha256":"393b5575ab9863a7702eb2a6bd7405f3118d0da53ff1a3257d1d7353a056a59c","sha512":"4153a0d45eb10ca02aa1bca3f3dc78529b3d1a23d582ab9f5831ba71b9a5de126253d469d28276160f1ed27de41049491125726144c40e17a5fe2c26a77406b2","ssdeep":"","tlshash":"14f023d69fe31ffaccc05a9a7437c3710c22824a829936149107009c645ad2f8dc4e1d","first_seen":"2025-12-24T22:39:16.322656Z","last_seen":"2026-06-03T04:20:31.988411Z","times_seen":59,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/Sports.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/Sports.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=T3K0j2_ZfiRYxjQVF6pw.3dpk4h7emh2XT2y2EIe.sE-1771942970.7045143-1.0.1.1-u9Ep_cUQbZ3ZBlCvG3TSHZ5R.KVtVB_i0XnGHIrSKguNJ3p2RB2UgpxaD7UjUcOb8U4zgpeulTRQd_jcpuXI1JNrQpQUuPus2tr6MWzCheeWDs2PSHQni9dECyXFf_M0; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1hFsiQm5%2Bri6e7NKlw%2Fy6Q8X%2Bf0lamjgpfOC8usV677gJk%2Fux5%2BmLfmDGePNSOM3Hacg7daXvZcFEWNBBmMTjnWT%2Fw53K2xrANMvIB5hm9LaSvEdQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686657a7-82e\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ee99d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2094,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e98bc5be7f5882a72abf78d11dda926a","sha1":"d835544d895a4817c210e575a6a99e08c1e2f095","sha256":"bc7880489b92bad21b9475577a93515e928dbc3fe62bf09e014e973e124ed223","sha512":"966b29438ae513d771a33e04b1f0566a70d205ee6698d6b2c7f1b00c7e263311652d392fc3f4251256866bbc2b0abf0dfa35698aaef8bc160847938a33a8a184","ssdeep":"","tlshash":"3d410018c3b983facc45823c5035a5b83a4e10ffa8a0f3b4996e95a47a420dc95cd6ed","first_seen":"2025-10-24T05:32:28.392126Z","last_seen":"2026-05-17T19:23:31.955994Z","times_seen":54,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":127,"dns":42,"connect":5,"send":0,"wait":84,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/ButtonWithAction-CMXROGdJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/ButtonWithAction-CMXROGdJ.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"10b-eXiXj8eKnnTH7LYARpecfsMqjug\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxNfeFOS58gd8zfHPY%2F7STDIae5%2ByqeIJFiWaPliovyzAsdYGqCgUegUirrc28vAwHMVuxOkzCvRcYUhzsxZ3XS%2BDAfSRE%2Fk6kJd7cDr9A%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ed9781806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"bf13c23ae777d4ece9a23dfcef5f8289","sha1":"7978978fc78a9e74c7ecb60046979c7ec32a8ee8","sha256":"19d6a58feecc49b55a1436e210bd8ca17e7780ef68dc2a3ca293af206cf4e296","sha512":"4c2c9eb3a48494f7983f30743d92ed973b84bffe515172c826831ebfa850de894088e30b0a294a845ba0ffb278d2853b40a5035198d4925c83482e2a33a3dc11","ssdeep":"","tlshash":"67d0950f98c1d2f503c1ff90512bc1112e16ada0f7e4c551c08d54543e3165ac42e637","first_seen":"2026-02-24T14:23:51.062944Z","last_seen":"2026-02-26T17:03:57.797516Z","times_seen":4,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/useOpenLiveChat-DW9DTPvg.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/useOpenLiveChat-DW9DTPvg.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/LiveChatInc-OVRSkU-M.js\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"247-rmFrwy1jZK2IkzLjPuIguAtMyFQ\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVMYpMzLu8owPzvPml9mtwXQUt1kyD9K10azew3Zznk4TRCZIb7MbaG9aA5d4ZTfv3D7K7B584HcgvSgr5TJf%2BHhZePfrZskWgIfuU6FbQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e11ba411806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":583,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"e9ab582a29b68015b7e4ddf4398ef218","sha1":"ae616bc32d6364ad889332e33ee220b80b4cc854","sha256":"0f2ee7cc918524f36e5698ff96bf1d9a671b9cef7dbebc73cd1434e9e8cbd7cd","sha512":"ea403228177e00db134af06a47eced70c0a176ba505a98d37d158056b49443531257168c5aaff6e57543baad9cad1e990f2a9c29188801d9bae9ac5eaff1b3de","ssdeep":"","tlshash":"57f041da86804fbc81c0cec1405be5f45b2c0ae4700dc480a43fac985824c00467ac53","first_seen":"2026-02-24T14:23:51.066851Z","last_seen":"2026-02-26T17:03:57.79217Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/GoogleAnalyticsTracking-DmBvxHyZ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-DmBvxHyZ.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3588-+3Qi3GVO+LuMi8G1QnpVfRZLfw8\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WuNX5lv4bJnq9h3%2FJ3kN0fXQfjT0PQr73bCx5T7MduO2%2BQ5JZvaZjAG%2F18IJbDNK%2BkPw3E23T%2BVQG0XvqzaUFr9J%2B3dW7A%2FD8GsUiGC0uA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ec96a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13704,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10208)","md5":"8cd4ae15064f7954689f3a7849a73b53","sha1":"fb7422dc654ef8bb8c8bc1b5427a557d164b7f0f","sha256":"243564d221706adbe127ee98e3bceb0859347bb88ebafd4c342e67e1d1609b6b","sha512":"546ce01ea7b40447f0a0ae6bc1b4eebcb7d349bde18015cbc22a079eaa3d219a0f4585413a77ddd79127711a864164951fa124040f10b930ca774a14f9b368d5","ssdeep":"192:bfWWYceR0SE+m/CTb3bHXCT76hoxGE0VK7D6L7kBNrnPWh52Lz2PM7mBE:jLYcoE/CzCIEP3Byy2PdBE","tlshash":"1152b55c32adb0b682df6054487f720bf1755910a458f480a265edf46ef8caf026bf36","first_seen":"2026-02-24T14:23:51.075102Z","last_seen":"2026-02-26T17:03:57.730432Z","times_seen":4,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://galabet2647.com/\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-dhcz\r\naccess-control-allow-origin: https://galabet2647.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Feb 2026 14:22:53 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e1e3aab4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 94\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":94,"data":"{\"logData\":\"{\\\"socket\\\":844,\\\"register\\\":0,\\\"widget\\\":4241,\\\"script\\\":3621,\\\"download\\\":620}\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-q0l6\r\naccess-control-allow-origin: https://galabet2647.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Feb 2026 14:22:53 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e1f3acf4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fda44910deb1a460be4ac5d56d61d837","sha1":"f6d0c643351580307b2eaa6a7560e76965496bc7","sha256":"933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9","sha512":"57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1","ssdeep":"","tlshash":"0e3000000000000000000000000000000000000000000000300000000000000000000c","first_seen":"2023-04-06T02:18:46Z","last_seen":"2026-05-10T02:19:39.188302Z","times_seen":38514,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/eSportsLogoSportbook.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/eSportsLogoSportbook.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=OqTZIGjfSe9CpSX4.H0bXTj7dAvtYqSnnQxsVSfSv_k-1771942970.6884778-1.0.1.1-PXozANh6iyaVC01dUr7yk5fTDHwDQHbKa57PPJr9O51sCKOfcRaFRE_7e72hvhIZTez66Sfnl_C0Rq6lgnN5rKUsnqeU1J4IYy.arEx3_P5_ss54cz.qfjNwB5AbonJv; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRW8%2BBI8eZghYNHZy7q6yNGkfwH6V7WUU50Oj3gdm%2BmC2gU2mfLrTjl0SXuze2GG%2F9Qm0x3iAN8%2BmAwy5tnDBv4CQ3e6PAGX5mMyiMBADoQtN3motg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627053-43a\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ec8f976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7947853d1ed29dd8dcd4f9f507e49866","sha1":"cb30cb5a0f55083522666ec3424780ddf247b264","sha256":"676e17bd005b7d157e248a40b8b8d0e1009615e5b426510dd0f5d8a158fedf9b","sha512":"0c46971a79be56e827f5df0f1f3bfa7583bf8a9b273075894c07378b3dd0ecf6800426cc7a9d5833626655d9f0958aa57eaf50ec7bcdd726fd78f3176efd9290","ssdeep":"","tlshash":"7c11d82cd3d8847cec39e3bc51356ca4704a48daedf6d275e25b89b05713758065cde1","first_seen":"2025-07-08T19:55:59.718474Z","last_seen":"2026-06-03T05:40:43.846079Z","times_seen":335,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/TabItem-zqZt7Nh0.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/TabItem-zqZt7Nh0.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FavoriteGamesContent-BWhyATt4.js\r\nCookie: TawkConnectionTime=1771942971299; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"19d-L0tIOzDq25CRCzGLQ8i2iurkajU\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPxO1M6CsH58xahGz7Kp8CTZqd4fBf%2Bow8aVYlPPoS44bqY2%2BEYSHpEsdT2WPYKLX9OIYd5K2VHJXrqksu5jIcdpJEToqP1SffUUtVVXng%3D%3D\"}]}\r\ncf-ray: 9d2f9e13aa891806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":413,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (412)","md5":"7399832e6d7898196fe5a4b445f58dea","sha1":"2f4b483b30eadb90910b318b43c8b68aeae46a35","sha256":"4d9195a229d1433eb80aa41cb3d5a1d41e315d57081e871c6ba0d6069b42159f","sha512":"103e8255fb328e1f8ad8edd4ec6dd2a1c36b1533e03b5286272b5f2f6c53ced739ea46c254fbd7e5008e6475b3e81ac6ce268df769c0c60c8593546176533ee0","ssdeep":"","tlshash":"25e02b42e020f3f5982b84d6d26ed4c7761249dcda9588e6e0a22054072e521fb4ff8e","first_seen":"2026-02-24T14:23:51.086077Z","last_seen":"2026-02-26T17:03:57.833559Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/fonts/default/Roboto.woff2?v=63","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=63 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index.BJU6hB4z.css\r\nCookie: TawkConnectionTime=1771942972158; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"faf8-1a8G5XndX0APgDtOJLwQIHQLC4o\"\r\nage: 3\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHhDY8MBx5c9%2FIr8KcJamdXev8W15iSMICT1HAgFiHWl%2B1bp2TFL7QjrEmri39%2BgmWog3GBO5mPg87WuyQGOZ15KHriwbxEQdYUcWw330w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e183ba61806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-06-06T03:01:40.602831Z","times_seen":2785,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/975.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/975.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/975.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/975.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1673\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Apr 2018 11:03:05 GMT\r\netag: \"f6c9e7060ced31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 08:04:25 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 368307\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=NbWEvDLQ3yyBI8f7ReQTt..KyYPFEABA.IsqsCoOlM0-1771942972.8032334-1.0.1.1-yhdCR6n4SrXZFYMaTKcKQWmqzZoyrgTHwB7U_DVJqtTb2cepcifc8CqrHF.9WwGF47nOgiH5NtboCCWSaKpmWzrXIgUFh72prd9k1xH447bJjZxF_1Xz_B0hNdKeH2Un; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w2vNZWew7fgfgrud%2Bcv4rr2QVpVn9jvVBnTcOpqpqr0FcBbZ9Pos3y8%2Fw84F%2FvMB28J5Ts54aMVyhTIOBcXM6ep4cdT2rH9vLfv%2FZPL45%2BDArIEhvaK6OF0n%2Bvk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c0913c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c6e79c6965ae1b5b388d94416bfae235","sha1":"9ed77e6adf0b24d0b7f38cb4de152b897282b2e0","sha256":"a2760033d7cefc2b67f3b8cd9dfcb07c655dbcf25647e72ea93eed934de4ecd7","sha512":"1718e6b814b6443cda8d1feef4456b64b87dbe1aec02245d56044f0d27e421886200db3d4ab3a3dc5db400fcb1d177358a3e954e3d473d59d82958e295ad8e19","ssdeep":"","tlshash":"d1311a620e9418175699181b4caae72bc37053f4e980380626fc7f8a7493c09024edd2","first_seen":"2023-11-04T19:13:31Z","last_seen":"2026-05-23T15:21:21.420516Z","times_seen":223,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_c2798e3c84b9cdb7f38468addd0d2cf3.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:56.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_c2798e3c84b9cdb7f38468addd0d2cf3.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41468\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Sep 2025 10:15:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68dbadc7-a1fc\"\r\nexpires: Tue, 03 Mar 2026 14:22:56 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=tSp7GxPowwDZKV22VCyJQud_gqnMPIUjhlVP6JT8ayg-1771942976.9178996-1.0.1.1-4l8pm96GdbO3CUUfAnnWVpmVI.6Ki63CqaBV9FXFdhQbS5.qrh68pDOVMF0tQHo4PNlSLj5mphhDb8ggGotFmghjVFQLPzPrITKd0V3G5OZHbxjG.aWKP6MqFIaaFCJt; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUk7NbKDYiG7FEfi0ztTLlhhzRHudZ6%2BdnZDmT%2FrzU50rY9UPSe9Bk%2FLuIHnqSho0Km5GH6wFzuQILYG9WHb7S6xo8%2FjK2fTbsuo%2B9YmdAW9C9jiLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e35bca02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"73cc0bbb436e26b9b598c9e48ec14826","sha1":"9fa3cc5ab9ac1a70c8c28e384ce695bd2904fada","sha256":"fa1c9533908deb22f89990a240a1c0ac2aa61a5a33e8faffc1dc0475e33c639e","sha512":"195f91ab33d65511b31e95308c95b79a5c097f78a0bbe4a99e081a5704085fe8fcc601ae0d0adcb0a439b0a9bc326f597d62e31c26eb359a610f474a41aaf2f8","ssdeep":"768:EeFn2FhdX/7CJjYdDHjp/VvUlF9791MUC2Fon7y+sHuwQn2iCP2TqbyTu:i/ajqTv8lF95+fTou7CEWF","tlshash":"5013011dde495ba80772339c878fee86d0924aaede24852b18ff112997047ec43af594","first_seen":"2026-02-24T14:23:51.089025Z","last_seen":"2026-05-14T23:49:57.517395Z","times_seen":50,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7785\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e06ac08aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-06T12:24:06.758034Z","times_seen":85090,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-yvd_ZnLz.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-yvd_ZnLz.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-B7VgD98L.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"26774-4VQ3rXaF5h+HKJ0UpMi2xQnnN+Y\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LyLcF2DhHdVvXKB3VtJkENrZKWq6L1nGBxgMJIACFFAvZb8Y7SlDOwhSe7UYUxsBDkppc%2BTLiOWQlkqckSZf6KpkUSJxljEAkKgTRH%2FYjQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ce9161806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1fba2e1c245c140f4c56b555946eb95d","sha1":"e15437ad7685e61f87289d14a4c8b6c509e737e6","sha256":"e2fc3b5224d0d5e9cf9b6055ec32b340db14dac24312e4652c31eea4484784f8","sha512":"1c97606c460c23d83456ecc27d5ea0e862e10ca933a194daefa3f4c75c665b128639821faccceed7bcec42921a1ec987579acd0f0894019b9ec4dcba59eba281","ssdeep":"3072:m1waIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:MwhFHU4HNwFH7MoOWexZFHV","tlshash":"bff34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-02-24T14:23:51.093868Z","last_seen":"2026-02-26T17:03:57.73553Z","times_seen":4,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/live.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/live.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:11:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=1k4nDEsuEcnrUYbv53uXvYCZRWY5JfEHkDi2faDZfhM-1771942970.7035074-1.0.1.1-k13ot_RT5Dk8zwJqKlsn6i9pCT5JP0hoZ2v5zC6_Gc_UoJ4ImseIBq2SW6v7eEt9.7VU9Dgg3S3HeFe4f99u.MDNjgr2urpXPmr7q4ktR7KbH6tkG4xOvHXh9RjmeXxg; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ga3TQVFahot%2BquV%2FCAk4l8ONnNJwRW6T3Th9cabcynwmEyrFfFkj6kcX7GkRCaT%2Bb0P5WkFZQt3vfcX8UlfNn%2FMOpOL0sO02D%2BKnbuCE6LWzgCMXgg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270d7-223\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ee99176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":547,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"177a1ecefa857471d64fb388cf5125d1","sha1":"726ab602ef7c82c9db251ac2a8dbdd142a28cedd","sha256":"e9bbd35f8b3d2bd962d3811c39e4cf82d2448f40576bf0e2fc495f5231b2cd1b","sha512":"b17c2fbeb47ae4e82b2e4b65e0874d54bfe07636406d4d56c25df1af1ee331f298538b63766cb21fa96cad217f86c61c2a1a3baee117ceb992c194d80ee87513","ssdeep":"","tlshash":"10f0e9e8e0b48a583948712c1b1c28952e3b32330dd18a39306be32e1f1254673cb659","first_seen":"2025-07-08T10:50:27.692829Z","last_seen":"2026-06-06T02:17:14.613745Z","times_seen":1686,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":129,"dns":49,"connect":5,"send":0,"wait":81,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/api/public/v1/tur/partners/751/popups?type=per_page\u0026platform=0\u0026country=NO","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/popups?type=per_page\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cC7Ib4Sm9Uo8ffApZMP6fXbW4oEdHQQ0aL2CDzSfYLhxd3bcmF36S3D9YW7c2iBwJCA6ClJepopgotaLE9Ljq3PCf%2FRBGa2EysYInEFFjA%3D%3D\"}]}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=16d6_3x5xTeF09IiTCblD.AEjZyqcwrTUq2ABlpeyFY-1771942970-1.0.1.1-aYqpzPZ_7E6vCuFxDnbUqaKmlPIXFqzjE4597rxdkRJ3OQ7cmMuz.8KG9d.j2pj0cMVwodyLQ0IgFSsJz0k9O.LwuOvR7Wo1ZAPgTeIoVao; path=/; expires=Tue, 24-Feb-26 14:52:50 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: max-age=600\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e0e89521806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0574eaff1e45adea018a5aa1e9177f41","sha1":"a1bb710af34c53bcfec01a4ab8773c2ae5877b28","sha256":"2eae6bca13b339eb6ecdf941c29ee842a5788b210f695a10907dccf0435bdc8c","sha512":"38b7154aca04a476a5f13f581f842c1f7c28a078381e6d1483e28c559b5742c48c423b193c7cad9d64ea2a4d2d7e8ab04637dfe4d27f71284d39fceeda34a263","ssdeep":"","tlshash":"569002011e059471b4022145412e9d4125b871125110402099dd57248b10121688382a","first_seen":"2023-06-07T21:20:12Z","last_seen":"2026-06-06T11:08:41.159139Z","times_seen":1905,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-media/storage/medias/galabet10/media_751_d95c491056861c55d9808002ec3083fb.png","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-media/storage/medias/galabet10/media_751_d95c491056861c55d9808002ec3083fb.png HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2125\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=315360000\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 14 Dec 2023 08:21:59 GMT\r\netag: \"657abb27-84d\"\r\nexpires: Fri, 22 Feb 2036 14:22:51 GMT\r\ncf-cache-status: BYPASS\r\nage: 3078904\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=S_Nhr2QmWCwZs5ozLPR61sRIGDCoS0s.p_I7uCPshII-1771942971-1.0.1.1-EMQ12BcskADh4eaT2kGtetM7fcrJ7ZdwlkwDrWO5qXRs0NfsMiYgjqpMgGHZnPF6Kq9TMn87991Z0JGSK1gBir4RjpYyaxSXkjT9RE36KBU; path=/; expires=Tue, 24-Feb-26 14:52:51 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oLfJAy5CWvzVZLgm2cyZdCQRrVnISi3qLo9x5H7pLXu5%2BqhncVIPyYtScof6byJT4tZvFpePPNLCjqBFU%2FygBMVoJHjun3tzlAPCqK1tLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e117a0b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d0a6f672bc6bd2e097de029109a7577c","sha1":"228e47b53bf80adec61493761d90165771a81012","sha256":"35dc3f8b307cacbf717f898b6a669c2eb188cc425a1f356b94132ebc7e8441c2","sha512":"7a700fc3f2a2cced35def804efb78f631ae965591bca74fe55eb23a593f5cd77cdb31f9f947e8614f0ed1d67cd29c3b25797fc46d9d22f6788bedf34d84bd8a2","ssdeep":"","tlshash":"7741eaf57111586cd591a232475cbdd2589db408d035d507fea3ba2c7c3f17814c32ae","first_seen":"2025-12-24T22:39:16.220215Z","last_seen":"2026-05-14T23:49:57.43643Z","times_seen":51,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-E_Qw-LwW.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-E_Qw-LwW.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/DataspotTracking-BGnsxVvd.js\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"173c-gZvawifXu22PBlRooPZe1ml9MTI\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNS8n3p%2FNBXoehqpwBN%2FFn9vkA6wrD3Z6s0AQKcX3WYU4fe6qmznlGL%2BtsJQl0YKErku0Aj%2Bmomn3jwKk4dmzqYFoDiwRhCMtDhx5vBJeA%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a191806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5948,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3085)","md5":"9a5934fdbf3896c23908942c6ec28e8c","sha1":"819bdac227d7bb6d8f065468a0f65ed6697d3132","sha256":"83fa3f48a7e001a7d28471b096a8806e83653854e7aeeb15c4dd979cf31ef3a4","sha512":"5cc79da26050a6c76f22fedbe2e38373849eb51337ed406c5d035935c348268dbd172717a209a97b8388223f9c8dce07018b7ccdfa043716b518ebe1fc61663e","ssdeep":"96:q1SCtCFV0h7FhpokS73sjlsv2InwLRiTvHUgAaQKFJ0FdWpA6u6PEDdxrOq+IHWE:J0ljijHvN0FdIuSEDdxP+Vj8Eu","tlshash":"ebc1a65631907534c6d204a6914f82aeef3e7638f00f50a0b23f9c6d3ba1115daa3ebd","first_seen":"2026-02-24T14:23:51.109809Z","last_seen":"2026-02-26T17:03:57.724952Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/987.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/987.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1199\r\nserver: cloudflare\r\nlast-modified: Mon, 11 Apr 2022 10:05:06 GMT\r\netag: \"10fd889e8b4dd81:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=t_d8eRRwa0YAgua3tS8wJJAv1z54K0f3Dws9SRKTZQA-1771942972.822991-1.0.1.1-KrZBP8q7aBkaqe8OW1Qg5QkBEijTwkdf_9pb6BvbIaGnaMYzxFKyM9dRnLispYWltT4zm77CNZqfP0FvkI37S2oNpqb2qGZzJSDTqOKFX65y.8CcmM_PdcmB7WUlalXX; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7QGaDezo%2B7048FMrMA6RKozOje%2BALnxpMQu%2FTdCc1nDE9MFyLi0NlYh5%2FpecpxbvfAoFxYB83q7zZtX1ikGD1TdFF0TranulmPopc5xtahzGs90jdLfO2MEY84%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29a5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1199,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"91c7ef38ced4c17bc553a79a94097ff7","sha1":"407415d9e66a8b2e5e8cf97a98b52033080b9549","sha256":"f7f27f1087ae9e1c3ab22ade8a32e632e583a194ccec443792608afa9c1b7a26","sha512":"3183797be2ccaa914e3b06a445af65f1c2903c5a1407d95093a7e1962cd0b181f54bdbf6d37b990afc4f1aa39c1446b9a1c841e313ae53c4f317bd1b282881e7","ssdeep":"","tlshash":"2121bacb509659994b0eb369fa551980e88d7764371e360595339c66031997cf0d1182","first_seen":"2023-09-23T15:54:58Z","last_seen":"2026-05-23T15:21:21.468969Z","times_seen":223,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/dynamicallyStructuredPages.json?v=1771942800000","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /dynamicallyStructuredPages.json?v=1771942800000 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WFSXEYXrXRKavw9bLek1YEG1kxVVnM4QjbaMyU22M31vThE1yrJWFEIi0tcr5jnBkbeqRWxQovXz3VcYrmwvRCpvOs%2BaqBNYQuwVFU4cg%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"2fc-kUiJY6kVdVRjg3WtqCHEu0SxLdI\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e06a8671806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":764,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"61ff5ed77b867ea7b436a21eb8e5ab4e","sha1":"91488963a9157554638375ada821c4bb44b12dd2","sha256":"8329002355bc98821e6757dc86bd87104c3f79ab3fa48db2435c5d3baf0ec870","sha512":"e93a660a89166b2b4f17735c7ed67f95b3b333006596634a735da5159f605181c8a74bffe6924a82feef888aea5bab127c2aaf77685cd27efbd0d71b9d888456","ssdeep":"","tlshash":"2001493d3c10ceb4f7a08862d58167809992e576c7880c5c2cdeeb19c3ad24e1441b7b","first_seen":"2025-05-24T17:16:20.011585Z","last_seen":"2026-06-06T11:08:41.268093Z","times_seen":2730,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"d9deabdd1848c34f3ab46722f446c153\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7785\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e06bc0faa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-04-15T01:21:42.632515Z","times_seen":11130,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 392510\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e18e9f44453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-05-27T07:42:34.882187Z","times_seen":34008,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/1530.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/1530.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1761\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Jun 2018 07:36:24 GMT\r\netag: \"e13f4464698d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 10:13:21 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 360571\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=JO69_PShNMP6W7cbTNieUwkTUxmHtKX23VnFT5XsB1s-1771942972.7982976-1.0.1.1-atjaduM9J0LGF_wLzgB8T1X_7c6H6KNvY4Un6NkvjUMmUlDbbfk33VdU07LHSO9Cnzk0dws8XPXtr._EKt_apNWnpu5ryrRHaJ8rWsbMPKaiL0LpPoqM7zbIKG279l64; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SVmrCdkRcERVYE9WwOAeFpcq9zJLilVR28Ov0AzvLHiO6c%2FsJZUrIjeNnZ5iXa3CuFvKe301XU50BXVuuFhkR5b5gIo7fmnmoUdDbOM9tvIlPFE1LCk7Ifphrw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1bf8e2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1761,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c242315271283f3cf8bd6afdea8810e8","sha1":"92fc09de07375d7515fb849d50e7e4770af603ac","sha256":"2f4ea633682ac2ea1372542a5df8183a945ef203d85cd85820dec958fa460bda","sha512":"ca094551dad0924d33901aaac0c6b6f3db232f1412eee744d24c73f2640a5abad5527a3bbcf6014935ca28a2714ce276daf8887cf60dca72ce52001dcf83d8fb","ssdeep":"","tlshash":"843109f03d957b77a0e59829386f01d0cedf9ca3027968181b28c065d5e4a58a84a74b","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-05-22T19:19:21.3539Z","times_seen":197,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/1f44b.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:54.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /emojione/assets/png/1f44b.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1311\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\netag: W/\"51f-Lhpf/5pVjttXKKAzYbc9FjP7pB4\"\r\naccept-ranges: bytes\r\ndate: Tue, 24 Feb 2026 14:22:54 GMT\r\nage: 3398135\r\nx-served-by: cache-fra-etou8220168-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c146761c3af8335c09eff9b1cdecbe08","sha1":"2e1a5fff9a558edb5728a03361b73d1633fba41e","sha256":"d84e890fa93c018d8b78e3bff3f6252036aa7ead6e48b292c0b92b1cb5127371","sha512":"b99a6fcfe0c4f4884fec84ec4e9951fc23b246302d4eac2996f4b6df3e063543b640a99e083494633f946fd85a3b217e18356e6b46d6584dcbccd88215638950","ssdeep":"","tlshash":"f221c59314628da28e23c525ac24c5e0b2fb40fcd78f8ae24903feb552b530c99d478b","first_seen":"2023-05-15T15:27:55Z","last_seen":"2026-06-06T11:26:23.94807Z","times_seen":19478,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/pageBuilder/pageBuilderHeaderInfo.json?v=02/17/2026-15:58","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /pageBuilder/pageBuilderHeaderInfo.json?v=02/17/2026-15:58 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8smfoBt1MSilUyqkBsPDxSqDZGylLHNIdp3KBXsd%2BVM9%2BpcNB4S9oMUxVJPQ99ubj0OR%2B7yRZbrKCUM7LNABD8dlGoOYy9B4zQuRu%2FA9Qg%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"2-vyGp6PvFo4RvsFtPoIWeCReyIC8\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e0e093c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-06T12:10:29.985985Z","times_seen":702823,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/DataspotTracking-BGnsxVvd.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/DataspotTracking-BGnsxVvd.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1f60-o/BUZZv5OqLTw2M0TJ02rvoKaWU\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVIylK%2F90F7LVPGz0K3DSkAANJZoNsS%2FHoMv02tM1BJm2dIAaWsX1iNmHI5M5rELmX81aNipttQ0X0znf8ATAWXofNLpRuGNGmnee9lgow%3D%3D\"}]}\r\ncf-ray: 9d2f9e0eb9601806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8032,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8031)","md5":"6eb0adb294d6e0b4be4655a714d18cf8","sha1":"a3f054659bf93aa2d3c363344c9d36aefa0a6965","sha256":"1903da0a3931978e3bf11cd481394054ee369eac77e1e9eb33dec25253c83ca9","sha512":"a704e987bddeddbfcf41a894099cab890cbc9b2499a6ba6e06f649e1f716331a64145953bc618d0da4f392ad06eb946e6679642593b509023ed2cdac75826b11","ssdeep":"192:a5xZqJXykg/uKb0n5OnB7tv1/3iYtWSsftQUs3:uZUXykg/b7ZFSXSsfDs3","tlshash":"2cf10355741e78bca033c6ac0d47616218387051e6329de476a6cf5aae3d8c28bf77cb","first_seen":"2026-02-24T14:23:50.919041Z","last_seen":"2026-02-26T17:03:57.92747Z","times_seen":4,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/check-auth","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet.winwingames.io/","date":"2026-02-24T14:22:51.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /check-auth HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet.winwingames.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwXe4hiwKtGSBESe8olWz5ap3AtTYu1tU9vnk2YkIUNyvz0RIsxVEnPQTpO%2FHZqWHjeHk0duVmJjHt8itW5paWbjk7ReOnWVQny1HYeRUTx1BCKCiP4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d2f9e125f1f1382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d0ef894fa1c5fc383cce96e2d857de6","sha1":"fe19a48e71f224e79f27804ed7d5632c065e5de3","sha256":"0b3443a9377c829f10dc4dbc281475c7bf89f141d56af637ad5c59b74d00b2ca","sha512":"988a2be034f9f80c25a7cdcbd2659e4310baea3e590b0f9fe75ac9d0d7b1d90a8e8b07f33fde07627f3f61eae405d36f9afd6cbd20061b3088ab844a0821abf7","ssdeep":"","tlshash":"4c70000202000222ea80000803002a3388008838832020200008a02000230880002802","first_seen":"2025-09-21T05:18:37.922942Z","last_seen":"2026-06-03T04:20:31.934463Z","times_seen":90,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 7784\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Tue, 24 Feb 2026 12:13:06 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e1389a5adee-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4368,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1594744c430c14575dd987b06663f8af","sha1":"6ae3a00b9045083fc80dba950b908f9e7513e211","sha256":"db922d127c83813e54ac9a7e4fb61318bdc34765fde199edd3859da07f9b1a04","sha512":"6dbc4888f6eb430e5c148b063707a5488e01f7a4ffef184ac67db37cb847c0d69eff429b0c1bd3122ca4b1594229d6f4f600497011a876d5ddaada4d1fb9569f","ssdeep":"96:nNSNbh/YiOQxX+1A2teUB7SOMVMrhIa1WUqrZurozkhLQtwN:8OQVqfhSPbUK6J0i","tlshash":"ec9110b79f444a5e2b2407c9702d3e9c855e250bcbc09ceaf0c0cf2984f9eb967559a6","first_seen":"2026-02-01T05:09:11.282943Z","last_seen":"2026-06-03T21:14:05.465923Z","times_seen":245,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":65,"dns":21,"connect":8,"send":0,"wait":61,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-02-24T14:22:51.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /public/proxy2.js HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 24 Feb 2026 14:22:52 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XGe0r%2F0D1kgUbonVuFIQ%2BDivKyp0O86LRHQepC7KAWTJlP9jNuF%2Bl7w%2Bzp0HxWJLG8B%2B9AXJO81eTBO4rcjPucZD%2BY5OW%2FbXGMpGKPUqD2LJQ%2Ftin0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d2f9e13a9181382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19498,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-06-03T04:20:31.901901Z","times_seen":57,"resource_available":true,"data":null}},"time_used":1336,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1280,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_d74a4ebe29a311acd768d7a041714545.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_d74a4ebe29a311acd768d7a041714545.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30648\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:01:17 GMT\r\npriority: u=4,i=?0\r\netag: \"694014ad-77b8\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=MxsbMcPxGuFqXYYraKXMmc_7RZnqbmDj.auZbYbvUf4-1771942972.097887-1.0.1.1-P_sOGBVDkTmTUiEusdcl3OS2QHU6UnE54XfXLf68vf_ND3gH1P_VXHlffaPLz8eoTKfftG4tLcbDXrsAHMwovX03SY3awy2wFt5LqjNbcXzpzthsv0nNsOTWciDnAUo7; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2B1PMsOpQf1zVnuqFTTwBNYgnz4qtLyzsTTfQNV4IUDbdgVaCE8tDKtIKWLQ0VpCg2iMaCJ05rCoaEC%2B146wRSHczrt461cjIeCyMfN2SOLffUl5LA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e179e0f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e44c769c8b50867b3c5a5f351efe25c","sha1":"13946ee2cd8c9ff6b74ce804ffc950b06d3b096e","sha256":"ba8112aeb4f696d5320c61972a04ed6a623bcab169a49bf3e4c15309c1b8e013","sha512":"26c9ce08f0b8b8059777d5dd806b09613006bc84cedc0ff3ee4b8c01e3e1b07f3a5e06a698ba2674a46128901ae5dfff43ba656124bb8a6ce9b135d6008fb378","ssdeep":"768:wj3t8z10BKltBMdANvhvUsEDcb4f92KK4cduloRN1YfSh2+:wjY10oVymvU9Dcb4fkN1Yfy2+","tlshash":"0dd2f1f45e14f4d273822d3b6783643b64a7c0ff2e9b5db1279a007d9e36859540e28e","first_seen":"2025-12-24T22:39:16.17862Z","last_seen":"2026-06-03T04:20:31.99561Z","times_seen":58,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/sealassets/bac46bafa2cb8c20ddfa7cf0538d845b-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-02-24T14:22:55.899Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /sealassets/bac46bafa2cb8c20ddfa7cf0538d845b-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":99,"connect":1,"send":0,"wait":0,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/conf.json?v=1771942800000","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /conf.json?v=1771942800000 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAmhy2fMu%2BuPv0NzKl87rPDmo9uns1cm4doz%2BCrV1po69UoRxy2qf5DJK07Im%2FSfjfYkMK%2FHtW2jLegUylOiA%2BVCMXIdAy2o8%2FdVnsICpw%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"5664-q3u4HQt+iVDi6SBfUIHCKeCtjkE\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e06a8641806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":22116,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e8bbe9fbf35af4cea5051d8b5a12cee4","sha1":"ab7bb81d0b7e8950e2e9205f5081c229e0ad8e41","sha256":"21772e3d40dc77d968b5673e225c3661ba76ec3db937aff9d80ffbff777ff316","sha512":"a0794c58f91c9978f3881ca453a87b5a5d82a3d3c4e8be9cd02484b18c12eb581890cd0dab9094b1b08e75d30ee5541f30abe90b8a4227ee44fa07b157631b7e","ssdeep":"384:tsodO1wE2GQULoU4rWmnzl8mArtrfSK32WkbNjGm6:tkwE2GQULoU4rWmnzl8mYtrfSKcp6","tlshash":"8ba21029d5744db302ca71b568be6147f530948b4e997c283b4c826c0f1da2f29bb7dd","first_seen":"2026-02-24T14:23:51.141389Z","last_seen":"2026-02-26T17:03:57.844136Z","times_seen":4,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=69345a05c4e6ba197aefa96c\u0026widgetId=1jbq7v9mq\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=69345a05c4e6ba197aefa96c\u0026widgetId=1jbq7v9mq\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nx-served-by: visitor-application-preemptive-pl5h\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-27-0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9d2f9e080e67aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8b6b2f3b839e211c1b90435e42e30ae3","sha1":"2d188517a2e60acf62ee08308642c01dd653f234","sha256":"958e1bef445b263b623d57f092598254bded4cff0a6ebbcb2b220442fe60fd99","sha512":"bcd87eee9eb3a0087721b9c3ebb9da721ce8f2fbf0dc3c9824d4e8ab3cab1b3f4beb4682fd5cfb703f3355558c1e30c34b38757341959dbced1f19626ee1691f","ssdeep":"","tlshash":"c36112354d16dd79a3c9428371de3a23e82dd123d3845a2de1989d3c83eb68d225274f","first_seen":"2026-02-24T14:23:51.146028Z","last_seen":"2026-02-26T17:03:57.836757Z","times_seen":4,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"galabet2647.com/__swarm/eu-swarm-newm","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__swarm/eu-swarm-newm HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galabet2647.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ltCZnyV18DJjf+riAG0ZTw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: TawkConnectionTime=1771942969674; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 24 Feb 2026 14:22:50 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: A5BPn13gWzu4irArNek9QUAoaeg=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ULNLuLARSoxa2xCFqm3nZ%2B2iy3u3kxJS8P2DCi4%2FSlrmpledggmgExfiQ2WOvXB7eaVBnl1%2BQZqmjSVvB6%2Fg1ZQKXMNPgYupl4aYiDsvswGLbMcR1S3K7Oue288UpaPKFaQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d2f9e0a5ce3902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7551\u0026min_rtt=7535\u0026rtt_var=1616\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3121\u0026recv_bytes=1314\u0026delivery_rate=571654\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=fafadcd8b541f097\u0026ts=611\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":0,"dns":39,"connect":45,"send":0,"wait":594,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=0\u0026country=NO\u0026limit=10","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=0\u0026country=NO\u0026limit=10 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=2P3zn75LT_O4eqAsPTs0DW2zNaUVYs.Wx8Zk.9N_6hY-1771942976-1.0.1.1-.QXGlvA6S7SH5BMl8l0DmwOTntifU9IGP3jmTYZAFFYQpz1U53Xxltj9X0mGILNEcPukc2O0czMsEyNceOrdhpVoZWpzSxmP5N9xZpWMH_0; path=/; expires=Tue, 24-Feb-26 14:52:56 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5o7Z49eJFOdZcU2NWeXhDEKfzoczBx5yblxHAYRP2tBiIRWbrqDaG2WnpWfaeLZ%2B%2F1igDhe7Imp6ZKfztKuZlQfz%2BOATtzuwjp8kMdP%2BPQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e11ba3e1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":19828,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f6d73000d2647efcd1659c284a5fce62","sha1":"dc930fa860c1fe7e71dc596063050c214d34decf","sha256":"726d5c11e5e83a691a746be173c2f0383f9397ea86115cd45175f8d048b79a6e","sha512":"d37b28da800224d597b5e2bbb0cdd1adb3f7f928eb61d25373738b969c6df7bf4c0b9594cb50fb943f60eccc0d6903be02bf22df150e7be6fb56e7e7f4e2f5a0","ssdeep":"384:F5cYY5SFPRy5Rw458JK5q1XLJx14v51ar352gpRW5uYQ5KwI:F5cYY5SFPRy5Rw458JK5q1XLJx1w51ak","tlshash":"1e9265290b18fbf66b1b189118e63d1ed8ec2ba7d545aec18dfed8f841e50c142b12d7","first_seen":"2026-02-24T14:23:51.148111Z","last_seen":"2026-02-24T14:23:51.148111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5435,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/JackpotPoolsWidgetContainer-CG5gkeJb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-CG5gkeJb.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942971299; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"fdd-6imTdJiR9KzW7IF8K35UOGO9Omo\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FeO4Jt2wtdHFFCaI8emp0v88ORmQixEbhx8sMIpQ3Yr%2B90tfY8DiEdXecaBCHZlgsLyVxBXAeAT8jF3icfXVAmmbeyXfA4DovxWOXbhi%2Bg%3D%3D\"}]}\r\ncf-ray: 9d2f9e131a821806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"c9c74fdfb9e5a74ebd6a40874d59f09e","sha1":"ea2993749891f4acd6ec817c2b7e543863bd3a6a","sha256":"bdfca645f493e6d1b5fc8fc135b986e6412413d80d764007c65aeb258abcbcdb","sha512":"75ec153ca1d34ab5fc39ed822e85ae9ad198813cf6947803d010b12a4802ace30fe5078ca669a875115285e13c4561d7d5da396c6531089ff099373746d929e3","ssdeep":"","tlshash":"c8818617e01ab3fcd8dc04a3502f910a2b7e0abdd75605e4d06e08240abc85af25db8a","first_seen":"2026-02-24T14:23:51.150408Z","last_seen":"2026-02-26T17:03:57.723683Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/UnavailableMarketEvent-wtkKsClH.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/UnavailableMarketEvent-wtkKsClH.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FeaturedGames-CmnWY5V8.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"134-UhhjmnVS/fKpCCkN/S6cRA6/3rQ\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0h5LIM807%2FXWxiZTvArIUYKYBecQ%2FLG9JDrBsJZLpmkc9%2BO1jOan7Nxn%2BQhCmQ29q%2BUBqmIbk3kiPgVvbE%2BgawK9N3jhLF1XkCbkcnKunw%3D%3D\"}]}\r\ncf-ray: 9d2f9e14cac91806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (307)","md5":"98b9533851974b6ee03f009832ec9b0e","sha1":"5218639a7552fdf2a908290dfd2e9c440ebfdeb4","sha256":"9abebbd29b2f027411a623d5b140792a129165b070e618f803c4257da6978b95","sha512":"0170e9059b93228cbb5e6b27ea363c91b851c327080a46e85a96739c2b51562f56ba0c25f7ede463ff65a12a3f5ebfc832261f11f0db5e0eeeacaeec2353dd56","ssdeep":"","tlshash":"2be0cd0aa104bbf6d5255cccce3a8f4da90307b5d7ea45d3d1f951281b34265390ee96","first_seen":"2026-02-24T14:23:51.155949Z","last_seen":"2026-02-26T17:03:57.841108Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_e2992c962b629258e32496488e343bb8.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_e2992c962b629258e32496488e343bb8.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18922\r\nserver: cloudflare\r\nlast-modified: Sat, 31 May 2025 11:53:11 GMT\r\npriority: u=4,i=?0\r\netag: \"683aeda7-49ea\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=PUQz5BWRENVVPQwFF2QQ_.f4bYR9OKYr.2x6Zy4NBd4-1771942972.1280928-1.0.1.1-UhyD.LJ.eeDQrq6E.gr6ALBfdk2.q41RzXbGkkjnCVkKSswWzi2rXmLjZaSz2QY.W7DF.OMQ6Qyp_.yd6HbvzDfm_hpr8VUx15EGxXBzf1GonscQRsh2wxUZhLhtNJxk; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LX0gAnkiCJ604J%2BDZ5q9Gx42gzEqnG3xllRLRIv37j8BdG4dVXT3iqyEeABogyjdoaHxrYSK%2FTw6WcTCmFMgdpzpnFLAorVR%2BAaKgRT9Ze3O4bjsEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17cf322efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"903c69c562a0cbbf1c19ffb312754ab9","sha1":"6b4ec5970d79a6e68c3452ed6216390060838a25","sha256":"0e4d56e0eeeba1be555347bc03ed2125cb792ae75f2ce14668b360230c341f18","sha512":"5b6ebcac994b2e1c2544a910a711bfc046d701704b371d62732b1754bafa403e5486b91eaafdae875d752b7e3122fc33e7f22a463e581b4090d2779f80ce34b8","ssdeep":"384:8Iy4zvEFK9vUhGAB466Z1W042wifdTAyYQiai1i23xB:fzvEw98Q44R1WmwifdETQiXDBB","tlshash":"2782d0a6787d1671ef46e14583b883de87210a0d9b91878d1f18a420dd3d72ecab51be","first_seen":"2025-12-24T22:39:16.347068Z","last_seen":"2026-05-14T23:49:57.495139Z","times_seen":51,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","date":"2026-02-24T14:22:55.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 13:48:15 GMT\r\nexpires: Wed, 24 Feb 2027 13:48:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 2080\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-06T12:08:43.673199Z","times_seen":870775,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":67,"dns":1,"connect":23,"send":0,"wait":22,"receive":27,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/lodash-BtsIEKKa.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:48.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/lodash-BtsIEKKa.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"28638-levksTw/7ZT3AoNV3Eni1s4AOI4\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8bEtU%2BzsDiswtpvDKNm61uP656GV%2FwJaZTdIRI8obC09tBWFsD%2BrlvG0q5GXdEi%2B8yFSgpbFPQK9WjzFHr7toQk%2FCLBfF4R8LRXuGG1ABg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0438321806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":165432,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35494)","md5":"5bc7777b8892642f23cd66c6e8d340d5","sha1":"95ebe4b13c3fed94f7028355dc49e2d6ce00388e","sha256":"b63e578e7a1623b8704017a97c4c4a2fc9893e75cacb4036d7a44e0c4130d890","sha512":"7055ad31472662e8b5c146095854ace0e9c9ba9da557bc6fdb31cf77082a158465dd5eb9144c3c16209bf8feb546b15556aaa0449a60365430434c01913f7031","ssdeep":"1536:KR0fO7acP1TyOF/Lkj1hvbm5889266e0YRbIfY47ePu3nVd7oa+i5DnIp6EvIjLv:KScPuV/87IQ4Xn6sjLeN551tQr9M/q","tlshash":"74f3a0c835d3f4a283a7287440bf084bf23dad65a84cc554e1aae0dd7db8919c277e6d","first_seen":"2026-02-24T14:23:50.996294Z","last_seen":"2026-02-26T17:03:57.824337Z","times_seen":4,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/walletConnect-CiycSUBb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/WagmiConf-DcRD12Of.js\r\nCookie: TawkConnectionTime=1771942970238; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7ce-4NL9XQUE1X1LJPUYsilS0smIp/4\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTBhSwjPyGyRPtl%2BjdA%2BB6pNrea2%2BeDC872ciV5NamV2HH1LrTm5TKfFdKwWQ9Nr1c66Yzigk%2Be33Gb94CiRiPafSmuH8m4CwzD%2FIsEyjA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0c29021806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-03T21:14:05.323244Z","times_seen":1658,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/homepage.json?v=02/17/2026-15:58","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /homepage.json?v=02/17/2026-15:58 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzUkNNsPtLiKDIaBN5TPHkiZZpot0DZh1YBkX83GlsdslHv2tdy%2Feh4AkqLfujpKd4PbzazbBSQ1MtQ%2FxbhKyH4gs6vFDVQjMEs6JKKXAQ%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"938-QlkLW346b2vIVRB346mLDK+Fnkg\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e0e49491806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2360,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"675b507b70f39e07be8925f75058608a","sha1":"42590b5b7e3a6f6bc8551077e3a98b0caf859e48","sha256":"947b6764624290fda0991b5e06f0cc8ec17f469fa6ea3abd374cebd9a25fdf93","sha512":"a11bbe53280dbad32c58212b454a474a02a254a4704964cda44d191e82e32cf6dbf79afb0329eb54200f9b07a4d89a5342b62c726bbe3aa8fb0888cfccfdadaa","ssdeep":"","tlshash":"39415d3d6c10deb8b3a08a23d28267c16546d968c7d44c5c1cedea6ad3ed29d1484fbf","first_seen":"2025-12-24T22:39:16.115426Z","last_seen":"2026-04-30T14:34:08.174115Z","times_seen":30,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Casino.Boszqs6o.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/Casino.Boszqs6o.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"8d73-3tXIZlqj3yu9yNNzfxwYPWc4aMo\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9gDQVqlskivpg%2F9jvM%2FS7ke6qRoLI0F9WswbNcUJUR7gG7njjO1blSwMeQgPZNIfccHkyrtXbRxyVDbBnJxZZK285WMycra2uPqHhuxog%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a241806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":36211,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (36204)","md5":"801cb95829bea62589284e508c2a4084","sha1":"ded5c8665aa3df2bbdc8d3737f1c183d673868ca","sha256":"89c5eef289090fa62a25abda84e0b2d4fad313cc0f395932da82d7d2c44262a7","sha512":"b6bbf1d46d8d7c19197439be95ac44171ffe6b7cc0ace62578c78880749e841ebf6ba5f5795699fc2857ab31a77929a9c51b8cf3348dcf12b77117f72662eb26","ssdeep":"384:Rpo8j6E4sa1Hk9eeGKtNyGG6PwPJwWzY8IwgrOl009HdeVz7qQXFDpNDF6:RZj6E7Ie3uIIgVz1XN96","tlshash":"d8f28573961923bd75b796523ac0de9ce81c48b9da232641ec967237c3c79992c307ec","first_seen":"2026-02-24T14:23:51.173757Z","last_seen":"2026-05-17T23:41:10.784594Z","times_seen":14,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/getLiveGameAdditionalInfo-wT1MfhKJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/getLiveGameAdditionalInfo-wT1MfhKJ.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FeaturedGames-CmnWY5V8.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"47e-rGhFPxKkcT4wt/6F5CTbuyZv+3A\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yS5WUlX6%2F0ZSs4RXGVyEIg6r%2BM2keJMqsuZXKQWTtf4dbeG7aZyGcRVN4VQWC0f%2BNcgQEQzctFGHgviTOcefzLRWnh7fR%2BhPt5fKcoedFA%3D%3D\"}]}\r\ncf-ray: 9d2f9e14cac51806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1148)","md5":"8bb6d48e0059b4a0993ea7f2f68ad297","sha1":"ac68453f12a4713e30b7fe85e424dbbb266ffb70","sha256":"7f7d09c366f8afbb43e1439ce81afcdaf76f9f8d9aab83a3338c7b13e18e944f","sha512":"ff5ff2ccf22ad1c8f7d89b02340c0352025c54b019538a2633b759e620a36526188ed63dfc4dbecccdff53d6f723d2814e679da801fa29843fabb2e223625c19","ssdeep":"","tlshash":"aa2144b2606e92bbe5c94d945ab01b31e2b5ba05380445ccbb3cc9191877480a7e203a","first_seen":"2026-02-24T14:23:51.176176Z","last_seen":"2026-02-26T17:03:57.783484Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1404\r\npriority: u=4,i=?0\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7784\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfvWH7-l2WGZEJvxD_-cbyo5fufmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=397+3 c=0+2 v=2026.2.10 l=1404 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e166e9b6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"434c7550a1a937d1e7e8bb8416691d9b","sha1":"d837654b42d1474560a5698cfac3514209cde2c2","sha256":"5f0f065528ec2543e34a03df1cd588b4c4ce7764d1ff62e67cec0677f638c549","sha512":"eefe6cf29ea82af55070456f2bf2cf1ab3c3328938ea092695f0a25370e6cef7ed1da43633a4548b22b46d7d7a87253ef01b2c01847ea84725cd4acc7be813fb","ssdeep":"","tlshash":"9f21e6a32c3914ddefa65f1485a00d8dff03c1a5983ee3d896e83548e5788da6ca00c2","first_seen":"2024-12-05T15:42:26.602777Z","last_seen":"2026-06-05T13:54:52.469229Z","times_seen":2565,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/1519.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/1519.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1344\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 13:00:57 GMT\r\netag: \"9753ef2576dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 10:13:21 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 360571\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=i55cMyCZwlJiGWBOLVpsvJkJ9o6W6ExZiQEiGxqvVtk-1771942972.8256788-1.0.1.1-Y8xlwGnVHtmGrgiAh9uueNVsrv3OJsfmdBaRPC6tW9yrNQ1s9f0DOfyuvRzCRyG9nz4L0khn7w1s06x.BBwfFO4r6iD1JGlGv3PMVhrrbJ1wpIQlI.en_3DkQ3h2G5XD; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGSgrNs8ltTM3Ds7D864Es7tZD2kP3HY35hMUXWFt4nGA9p%2FI%2FmCggJJbi4cBCMboXkreFUV%2B9ZI0DkZEUD07wZ5Fc4VFJzclGVfgLqyzy9aOYxq%2B1WOZQmOM8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29bdc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d2634a75b5685f6fda1c97d46df41e3a","sha1":"2a92addeb13619f4ad23d78e4fce010223100eaa","sha256":"459ed4d01fd75f770b61d532384a6fbf27e77ac8ac076b539a3daddd78845189","sha512":"29b39d01d588282b440f86d9155067c23982f80415a27db17ea45bcb9c30acd8ab478302d8e03da7438707ab0db03aea063ee1f65c05bf376a6f07d76c6edbde","ssdeep":"","tlshash":"8b21b6fb08c00c515479147626d7802923179dcbe9d73952da89e8357f514e0395be4f","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-05-16T13:14:11.651905Z","times_seen":521,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","date":"2026-02-24T14:22:55.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 13:48:15 GMT\r\nexpires: Wed, 24 Feb 2027 13:48:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 2080\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-06T12:08:43.673199Z","times_seen":870775,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":68,"dns":1,"connect":22,"send":0,"wait":43,"receive":15,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/Casino.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/Casino.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:12:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=8HOjkVOso73TvsmIod7slo4OxxykjL8JqCLW7L4KnLA-1771942970.7059665-1.0.1.1-XcO.QappWmdJuaNskRPhAXJwrOIKbcJiWoARd6sNRjjwiX_.mqDS3KWzy81WHhKbYyQZytY54DZk4La15nlVOuNpqI2GHBxfwxeY4__dS1tkmqb.rCcOP5DSHjqxZSH2; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kSdgbxs6S06NH7%2FIfeem8sC1fR7vT0rb4r%2BACp1GN0GaM%2FkC8%2FmbjTnRZvCndBE6qel%2BvcgdDLXmVD3t2nnqfLbg%2F%2FgubZ9LLEdgJKwBpzkogL07vw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68665777-50e\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ee9a076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3df444684921a4a44f2dbdf6aee0972a","sha1":"f0110696848649c2c94de0765f5b22b4617ffe66","sha256":"d4f76e693c5a014a2184795ea113ff8f42a1f7196243728ee128fe81ed5b30c0","sha512":"bc7fb348d4746e017aa074bae5f3b106d6a3db9c1581876ba7db93537b1a4643a8c2695b424ae4d584d03664bfdafe1b3477134f7bc6f5bc142f8a5aa54fd4cd","ssdeep":"","tlshash":"1921dc3d470289f86e455db5e43a0934c69d817ab1c2479cf23eca2277220d8c7ce468","first_seen":"2025-08-22T01:08:50.698252Z","last_seen":"2026-05-24T21:43:33.820208Z","times_seen":93,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":125,"dns":45,"connect":5,"send":0,"wait":85,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FavoriteGamesButton-CMayIdHJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-CMayIdHJ.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1ab-CgeCq0ATcH8nw1QvrZikJ1vgJWY\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJ9UOBrowdPmv6sF4KtQK2jWBmclvXsOlX%2FR66mZ1Rl2HtJqWP3MRoEtZS2DcHCkbV5120VVNxdEsK7fVxMK6cNk1XS2iHacYyPsHEXjAw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ea9551806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":427,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"272697ecc5d859b61a93b0b0508d2361","sha1":"0a0782ab4013707f27c3542fad98a4275be02566","sha256":"c28bf4ed911a1e3d95ee88f0294ca02d9018275938aa0d5ce62559f21ce18d54","sha512":"5359a5b24b62b4ee9bfbe3fdef282c4e44b9ccf8b2ca3dfb73138287b4bc2abfb1f94f0daa37c4e8ceda755456e63bbfb771a5f8e884683a664fc97e17151f1f","ssdeep":"","tlshash":"04e0ab0be4c9e2fa2b826b911607c1282c2be4bce7a8e19050de04643d35597c81e96f","first_seen":"2026-02-24T14:23:51.182796Z","last_seen":"2026-02-26T17:03:57.838455Z","times_seen":4,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:57.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Feb 2026 14:22:57 GMT\r\nexpires: Tue, 24 Feb 2026 14:22:57 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 24 Feb 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 125105\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382822,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (25267)","md5":"631be32b99c530c0e3966fc9bad4dd4d","sha1":"f9da14e9a78af1225b4e35c59a530815d7392aa7","sha256":"3e1e721e935ed06408a3fd0bca2a405ea3405ccd4bbacd0e60c0a663a8806155","sha512":"f812ad830bb5f8b047e207e62752aae9309c257210235763ba74d280dca81fd1fbf2a41e3a8219c88cba2503b0ca1365fd94c1e8355a3387baec57df9ad76dd9","ssdeep":"6144:ok5nmy7C1y2p3J5wYyv8NyI7pNH08pddlmcrESkDrh:ok/u1y2pADv8H5HrEF","tlshash":"f28429cdb3d6b46683a3a474803f018bb17a69e2b44cd894f186dcd42d70a6a4277f7d","first_seen":"2026-02-24T14:23:51.184885Z","last_seen":"2026-02-24T14:23:51.184885Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":41,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-Dm17uEDJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:48.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-Dm17uEDJ.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1156fc-+74wfoU1f4QE4lVbKJb4qsfr6qA\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZH0UDW09YrKydbqgMerTH46paVG%2F3n%2Bn5i2Ma8uLBxXzeiiNrCOBPLRY5px5wm9qKgeZwKnOf40wI7bLqDqm3461%2FXiZKdNcUG2KBBljLw%3D%3D\"}]}\r\ncf-ray: 9d2f9e016ff61806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1136380,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25434)","md5":"eb4a698ba61c4ff2df2974c97abe3b1b","sha1":"f40e44d2650a76c10193192f52a1c267feac00fe","sha256":"17b6aa3f2fa1da41ab1b6e4109948b3b06108da0a0fc2023fd1a7d9e78d9921a","sha512":"66f305287de07cee80f919b5fcccc13b07946c4c61151e24279ea2fcfb5d41b52efa07037720b7040e5f4d5d73b3f26d66f7bf05b08465620c1812e877c2193e","ssdeep":"24576:cWVkHIx9sL4CFLHodjJhtBPZ2d0gPGYZYqjmsKmZiKif3ikAXEt70VDbyzWiQnux:VVkHIx9sL4CFLHcjJhtBPZ2dPPGYFjmH","tlshash":"73257d85b059b97997b709e560af1101b1391e04f44dc860f17cedae29bd808a2bbffd","first_seen":"2026-02-24T14:23:51.186995Z","last_seen":"2026-02-26T17:03:57.854645Z","times_seen":4,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/tr.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/tr.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b1c2a4d2b221a5c3df91a782a9958602\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7784\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e091e63fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12522,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"d5c878b97a6e060ddcc4f14fac2c8f68","sha1":"8f1cfd2be7067d0f230c6a8e4e85f700611ac5d3","sha256":"205a43ac3282e1533a6f03102f07c4b6fdb957b777e85135585af927547dda82","sha512":"9f49e1e332fbfc76add070a561f936093d3c54d0c9e0de4bd92407fd31a6716053b5177d586f8300394c15f21d9d7b68c9f4a25abccb5190ec3255eb87be6ab1","ssdeep":"192:OyJZiyVI8zVt8yr174zUet94dgbIfCTLOSWhmiUSI8MRcM:Bil4r8yB0ZgcTLHcmiLMRL","tlshash":"49429519cd61dd5b0196a34bf4db1643b0a942871f20382dbb4c86bd1f8e9af60fa74d","first_seen":"2025-06-19T03:00:53.745119Z","last_seen":"2026-05-13T07:53:47.020299Z","times_seen":585,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/WagmiConf-DcRD12Of.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/WagmiConf-DcRD12Of.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"18a72-vMQwheISi0s/E7Pjyype023mj6k\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZO3QUSqWJomooErwp08mjChloxxmu4YlMM%2BWJqsgiRnGSGUadW3QGcovMqyKOowk5YQx2mGKSHM9stWpzPE%2BWpc8NO%2BHp0WhswEuCAf1A%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ac8c91806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48214)","md5":"347fde358585510327d4cbde65cdf27c","sha1":"bcc43085e2128b4b3f13b3e3cb2a5ed36de68fa9","sha256":"4cb419c9f2956a83ad68b8f5ddc2add8a7e1aad05d56254bdf8e345ce1d9c066","sha512":"4106a31be84ecfe3f80e2350266a55d60aebf4ef67f4794bac22a7ff7465ecc92da7e01db1ef5014c1c2139d8eac287ab732b72e82b25457e7cafc9f2655f36a","ssdeep":"1536:/2Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPVAV:OCaSlx5xG7NU+WEy1bPuv1K/XGd","tlshash":"15a34ad07196b46103a74ae008bf440bf239ac34200e565cf269ecde79b96e99277f7d","first_seen":"2026-02-24T14:23:51.189846Z","last_seen":"2026-02-26T17:03:57.755082Z","times_seen":4,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/header.json?v=02/17/2026-15:58","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /header.json?v=02/17/2026-15:58 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PAANbXyGsYlDjPAGdi7jGhftZR8KxkmgONiV57CdeC1a0550t%2BEuBQuek9nJ71ju8WuF8a4SEsRTCvTNM4%2Fey7jiBkHYbEr7511kjzXqfA%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"e1-o5bX8SfuIDtHHxp+UHGEMY50Fj0\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e0e093a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fbc119c5c8514e3587fdfa01f205866","sha1":"a396d7f127ee203b471f1a7e507184318e74163d","sha256":"10279aa2fbd66a0c0140d4b4cf9a39b0c9bd14b18bb35f1bd6eb26eab355b9d9","sha512":"9eef97111b2474b705b496860ecd29c7c591ddcb79887d755e5ea7bcf2d578a68bbecdc54ce4f11954f679ff2b8b5cf060da8cd4287a78a1fc3a92fdfc6125b7","ssdeep":"","tlshash":"cdd0a73aec10da7073a0c413c18067801140e514d644485c9cddea5a93dd7891180b67","first_seen":"2025-12-24T22:39:16.192168Z","last_seen":"2026-06-03T04:20:31.884146Z","times_seen":75,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/HorizontalNavigationListItem-D8usqGBs.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/HorizontalNavigationListItem-D8usqGBs.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2d9-WwdKMm2CY+BSr3kyBQxN1pb5XdY\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mSTbYRGhykbmKh4RU7F14BgtchSK2ReNkeeTJbdcYFEuIrxfjTn4DvyM0uPBhZqI%2F%2F5BQjpLhY2t8TJzYIJk0s%2BP%2Bj2MH%2BdjkMHjilu2%2FA%3D%3D\"}]}\r\ncf-ray: 9d2f9e11ba351806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":729,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (728)","md5":"2ee91c2a746e670fa0395e2402ebb652","sha1":"5b074a326d8263e052af7932050c4dd696f95dd6","sha256":"6bed6f8c738e862641eb57d60efd2be604d705024d3576fb68a1f6cc491e62f0","sha512":"15a2d3022a25b216582a549dda022b4de3fc8eecd4d2e519a047d4ff7abf1e3ea3767850c513f5cc800e846c071b7263da71e4dca1a299a8754660a8227a0291","ssdeep":"","tlshash":"f001c001e014dbbc9a2745ccab8d1089b5479afedf782ce190f4e12109794593a86f8e","first_seen":"2026-02-24T14:23:51.015813Z","last_seen":"2026-02-26T17:03:57.886757Z","times_seen":4,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/1752.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/1752.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/VideoBingo.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/VideoBingo.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=NehXKq8RSVnH8k3lBffr6g4rQcaoPqQsT38TIWe_gLM-1771942970.68968-1.0.1.1-WGinYR_JmkhGPyU_6GcIinXHuFCMquc1CYmGecCEztD2MpKSDga_t7LyLmSbkrbB1VBmkH5mv8gaFgapKeccfHqYRO3DsyX9upSkGMBuaTjuDQThRCM4WxKdMw0.nHLk; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81KMoTBUZLa7IPqHLnx3fBZ842PrD2Cn02gTsBwnu9ZPVdSkqVEGoJMrXtNj26uOW8y%2BNkbjWA7q%2BPG6px2CW%2Fef9On44oOQHrs0p6irGgV%2BNxmXnw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627129-7c7\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ec90176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cbae8aa582bac1aa011b5159e475a38f","sha1":"0d140fc00b303fd23250218e03c28ccf986a39c7","sha256":"dcd44096973914fc9f8fdeb79a3dc5379403c3d1411854e634ab7fe444578271","sha512":"05e2c75c337a1fad9f895fa0b1635725d1681e774084ed34084444508df8dc8501c01644b19ab4f9a948c1e5b6621fd67df4fec41eaaeaf187d1a9e90c58244b","ssdeep":"","tlshash":"e24133d5e7b0a6ac2ccca59d6f2148d7350ae0bf6db36a5ce22edc580b53e1c0611c99","first_seen":"2025-09-19T18:19:26.310809Z","last_seen":"2026-05-23T15:21:21.526804Z","times_seen":74,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/NotificationsButton-pLBpik3l.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/NotificationsButton-pLBpik3l.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"22e-mRgS0ldhghlzTaY/dXLfEDwpCSI\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sbnvn7sdbHog%2FDV2yK1JLphpvDVQaNkKqXsxN3sxv37OtHl2vhibR9gOYMHOlaBpnHP1W8SDwjcuIwse8ApfBUv3drqbY58OWcQS%2BybZrA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ea9591806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":558,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"a9b056a32d1ed76e431c79743fff40d0","sha1":"991812d257618219734da63f7572df103c290922","sha256":"1d39a6add7ab9c187045bdbe1fe951cd7aa476aa5df81ad0e50ac2a876c40934","sha512":"058802b490279b15a1dc08c0bfccff599583ce22b9121453e2282443bb321ec4e51145d312ccdf1d58cc0d7ed07506b8f89c3abcdeb726bc57778cfcdeeba673","ssdeep":"","tlshash":"aef0264be994d5f417c25a11623bd0163c3ba96cef4a588000eb1c591734116c81f55f","first_seen":"2026-02-24T14:23:51.194058Z","last_seen":"2026-02-26T17:03:57.749218Z","times_seen":4,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 177\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":177,"data":"{\"p\":\"69345a05c4e6ba197aefa96c\",\"w\":\"1jbq7v9mq\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://galabet2647.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"t9C874Dq41eGy2C191AQv\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-mdmw\r\naccess-control-allow-origin: https://galabet2647.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d2f9e08ef454453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1036,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6797f325ffd2490a42840b73fcd016e5","sha1":"fb0fd294d615389b04fe5bccdcd4339d9faa0e48","sha256":"5282ebcba4f09f2aee406a34032ea567af99cc9cc74e938ac8f7b1fd186e2d47","sha512":"6fd2e8af38cc0fabe302f581e340458e3afbe36d8310b299451905560b8b2e9cf0eaac8c5be5137e73cac4451cd33a4885a0880985ac37f3e5ac23670076fe12","ssdeep":"","tlshash":"7a11d81e8c5a0ed292f29c810e213d591accf96125d54c19c8cddc4934b177d5502ca4","first_seen":"2026-02-24T14:23:51.195716Z","last_seen":"2026-02-24T14:23:51.195716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/logo.png?v=1767600520","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /logo.png?v=1767600520 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 8570\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"217a-COedXdhEORboW5CmiCmhOELaykc\"\r\nage: 1932\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsSW5o%2BlAhAImK175%2FL4GiDsntYR0nAPCDXkQCv%2BpixL14LK24Jne%2BmlMtk3AiYLTMrgJ7MzgG0jhoWncPhOsnjGkd3eiOldr2YL7dG%2FVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e0d69201806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8570,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 120, 8-bit/color RGBA, non-interlaced","md5":"8616737c6157ccaeee86e2c08f0a6fe2","sha1":"08e79d5dd8443916e85b90a68829a13842daca47","sha256":"a0b66af32c291c7f13a082fca293857613e49569f277c2d3c68d4184913a73b8","sha512":"14636bb931948ca1b8aff3dd5fcce311e595051e41240e890fcf3a0e5d507820db5670e963489c66354aac07429f979979a67b5947b9654b5303436c69eeaccd","ssdeep":"192:ymSFGYb774y9Lkxe2vjdIfKp/xJIXq2g5qPG8fxtnQzro:yJAYX74y9Ax3rdVvIXqBYZtQPo","tlshash":"6a029d321ea92eb0ddb332d52928f20f72cf010f16572136e41457a7cb1dea89c8b667","first_seen":"2026-02-24T14:23:51.197117Z","last_seen":"2026-05-04T13:54:35.270172Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/69345a05c4e6ba197aefa96c/1jbq7v9mq","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:48.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /69345a05c4e6ba197aefa96c/1jbq7v9mq HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d2f9e03ef0baa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"1cb8503928873fb0c37ddda8d9be2156","sha1":"5319387ef374c51d8602797090fed03402de834c","sha256":"f13f816cd905b4f21e6e1cb8f007a1a620bc765cc87dd54f77da47934cf78fad","sha512":"4dccac9b09a71eacf324e11bde2da2f4317c5360141051d7720cfdaa788e5987990302172d8af111afa579951c8a640cbd74266f563b35b073b5ad3c7fb7bc3c","ssdeep":"","tlshash":"8941ddea5b4f1c56b22410d90dbef90ef47620f749da6892870c085272657ad2f8ee38","first_seen":"2026-02-24T14:23:51.198663Z","last_seen":"2026-02-26T17:03:57.919065Z","times_seen":4,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":50,"dns":22,"connect":8,"send":0,"wait":385,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets.json?v=1771942800000","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets.json?v=1771942800000 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RwdhbxHdovseogGpAkJboQtZNIRPVzimSofD3jq%2B2MVnqXx1iwHrh8qIShAzp0WkTkY7hcvSvOn54Sr1QQs5tApNh9njOCObCelw%2Bylbg%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"6c-/Qm+p2fEH07OzI/hfElHCuJaqCo\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e06a8631806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4ab76b84119b58e0274ebb7773c304e9","sha1":"fd09bea767c41f4ececc8fe17c49470ae25aa82a","sha256":"ed3f85642bcbcd5f01e24e07081e8c0cb4a2afb0e45475bfef46d8b5a1fedc83","sha512":"a19491809a33023feb5f4c6789e18bde6011500fb40806e367822393b3bae10fba4d339abefabd268b6297c5af3560f255448f36063aa4784f6631644d68b163","ssdeep":"","tlshash":"a3b002995a3985159746e888474d2906d000d1a3cbae1b5a50570568c3e07b6c694909","first_seen":"2026-02-24T14:23:51.200303Z","last_seen":"2026-03-23T14:49:47.185058Z","times_seen":17,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/CasinoGame-9WoCdzkb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/CasinoGame-9WoCdzkb.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1711-3g/7tiv5gKanaT0XABGV8MoCUA0\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XEdnFOQDU7M6RJ85A%2BRLSI9dNpodqtVsrODqj7tAtEjoVVhTaTQm6BveyfSvJzXV0nDj1zJ0qTB3rnjj0AZdeDboMPR1swFYy0DZ2bV3Wg%3D%3D\"}]}\r\ncf-ray: 9d2f9e11ba3a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5905,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5630)","md5":"9394597a4dd6f86f5e43d734a073d194","sha1":"de0ffbb62bf980a6a7693d17001195f0ca02500d","sha256":"3d3c7b4dbc38c7c892cd346771c606bfbcc9ccf8d621bc8f4396ac7eb76a7227","sha512":"9c17ba1fbc81d094106907fd547a69faf5febd87bc4c795dad206094a9d355c27d89cdba231a68f340c25d1bd1821343fedce2a70308c9ceb3aa63883383a323","ssdeep":"96:jx1BM8Xcl/jL5p8u+m+9Z87/ORx2CZZ9Lm7nxT+xmZ97vaycesDa+e:V1BMJl/jPIm+k7jKq7nxKx005e","tlshash":"f7c18504e014efbdb8360cca986f202978191fa2de198565f47da839367c11db627bdf","first_seen":"2026-02-24T14:23:51.033613Z","last_seen":"2026-02-26T17:03:57.889854Z","times_seen":4,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/333/666624.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/333/666624.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1579\r\nserver: cloudflare\r\nlast-modified: Fri, 01 Oct 2021 13:36:29 GMT\r\netag: \"5e76c856c9b6d71:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=1iinJwNHJ00A.lERnVcgqvw4IyAAJEu0zkKmRekqTDI-1771942972.8008347-1.0.1.1-ZAwvy9DFhfpewIbVlaNVyG6XJAR.KKb7JOkgHSlnqg9DKk_.8FKugqN.GVyZy_Y_CbhmkJ_3Yz7pO1UL_PqE8jH8nhGIAIZmRthmIn_owM9zWagiDkHoObcnsRNjqxxM; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X3PRSUdD4iGHN0RggmbUZh0zN0jIAlEEsCCc8kTmj8KQxxDcrDQrswtB%2BlV5Awju3nbp8OOgW%2FKGHikuvneQktwZYW1l7g3RpMEvISVaZUVmy%2BiRUFXJZKdonqI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c0902c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8f233530b3b7e1e83ea1bb3e6f8e359a","sha1":"a8a26ad2908ff17ce7bff4a7f72f0d6f95b5ddc3","sha256":"aa7167d5bd6e859324634c69fb36783abddec344f420d89aede1c9ead4908cb7","sha512":"9072d60e3f8a2f2bbf6764529cd80bc3c63c471d0bc6d72a15ce36174da338f94b69adcbe3d12e9ccfd15071e82ddf6b3789cb167fdf3ac9955a46c6aeed5e17","ssdeep":"","tlshash":"64310ab4334a36f20700a8e0305962f2f196d1fd4375d80b737191ac55748d180937c2","first_seen":"2025-09-23T03:05:48.075395Z","last_seen":"2026-04-23T02:00:13.154072Z","times_seen":32,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.btcoservice27.com/?type=json","fqdn":"geoapi.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whT24NX9YCCl6wH0o76LG1eNVw1lDIagirRTSO3%2FqbG8sge23jxvJV2mJXfD7yLoQ1vdfjpE3r1yTceQR6n3AT13vyNXtqX2KBzMHjce23PmRfGpK6jpAA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=QAQAPHDu9NwCZCTAyjnipYcKQRZxVKQZCLqD5U6F1NA-1771942969.9298818-1.0.1.1-.xyzC0yHB1eQ8A0QnljqdtMAbazaSbGPqEnd1fZL2ypP2gkyb1CKPf2n5xYXqtTL2_d5fIYokuYtWvnixgwmckR5QIRNfJF9sJDqPng1qKx2l6cP55l2ffm7lM4bLW4A; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:49 GMT\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0a093923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-yvd_ZnLz.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-yvd_ZnLz.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"26774-4VQ3rXaF5h+HKJ0UpMi2xQnnN+Y\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FtkA4sXJoRhxCu2qSRmF3ktsHwvISFeOgnyb7z0cF3yzTKDMFzskmfUID5YNz7Pwi6OePj1kS0KfiU57hKyl6sGQWql4lgHbbY0NPMt7g%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ce9141806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1fba2e1c245c140f4c56b555946eb95d","sha1":"e15437ad7685e61f87289d14a4c8b6c509e737e6","sha256":"e2fc3b5224d0d5e9cf9b6055ec32b340db14dac24312e4652c31eea4484784f8","sha512":"1c97606c460c23d83456ecc27d5ea0e862e10ca933a194daefa3f4c75c665b128639821faccceed7bcec42921a1ec987579acd0f0894019b9ec4dcba59eba281","ssdeep":"3072:m1waIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:MwhFHU4HNwFH7MoOWexZFHV","tlshash":"bff34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-02-24T14:23:51.093868Z","last_seen":"2026-02-26T17:03:57.73553Z","times_seen":4,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/412.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/412.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1179\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 06:10:40 GMT\r\netag: \"9c4071a11e6dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=7bfpYNikZZzcBMgjtapqrxNUtf0.nZPgmiQKEG6yVng-1771942972.8267505-1.0.1.1-W_89OaKs7R23A1Gyb3UtBt41wJpgwBTzBXbcFtOZariu0MIc1z1xoKgo.95zIesQz40F5NGS6VEobUQCpl9RFPZGecQ_7lb8dYXJ6LRmAOaGY15EncM4TO5mGeJ96OTo; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bOP7H0ot86t2hr9%2Fe5qj0jFvctT58RmhBxnOKy2RbTlIjeuAAJ6aEz%2BnaC2L0YO%2B%2BhaQmeRwLEFvif1ETMqAMmuQcB3Ot%2BA5LHiq6EZh0GwTmiuQPoq93Hzn29Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29c6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"52e7d6942cf2db1dd36526a75499e4ba","sha1":"16f083582e70efa2cd079e7316f018536bfe7f85","sha256":"61f9fcbf6e3d5543590c2a4d485771a5b8836d56dbd8a396baedd4f4b11fcd95","sha512":"22db3f10696431d83e765e918282385b1babc67fc093934c8e6a8a6082092a41a67ffa2a2f577c792e1138e993864b6ef4e43adf6994829702fc628c6f09289c","ssdeep":"","tlshash":"9121d7a727dc4cbc9a0b306e004f9816f1249ded52acbb0abc95e518e3d4fa51c00605","first_seen":"2023-10-14T20:01:15Z","last_seen":"2026-05-17T08:44:38.101072Z","times_seen":318,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/HorizontalSportsList-BjU3O27Q.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/HorizontalSportsList-BjU3O27Q.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1a6-YTA3AQ2rCHd3qJdFAsedkqFdPEk\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZtDtwymgildKT7nVFFvtSntwIWiCPDjicQy4e2lqxVDlSIxcTvS%2FdOQLLW7ItSCQ56INVv7%2BC8AdmqEwDwyeLpidET9%2BpqptBcSrL6dqCA%3D%3D\"}]}\r\ncf-ray: 9d2f9e11ba341806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (421)","md5":"c73fa28cecd62ba3c31d6201e137d6a0","sha1":"613037010dab087777a8974502c79d92a15d3c49","sha256":"83b5ad3b3f3e009497b2dbde83af71ee19ab265c0027f0fb23504d2a209d2526","sha512":"5d6444f570ad2e892840f2e46a64d2d908a6989a8f5560eb63cb2058bef99bc9789030b9222e2f664de865261633e807a77b8df2f43637ec68bc118d8a3cbbbd","ssdeep":"","tlshash":"44e02bc6dc618af45a2b88efb95c24846112047cef47a671d29492281b7408bf62d04d","first_seen":"2026-02-24T14:23:51.203754Z","last_seen":"2026-02-26T17:03:57.739299Z","times_seen":4,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/getLiveGameAdditionalInfo-wT1MfhKJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/getLiveGameAdditionalInfo-wT1MfhKJ.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"47e-rGhFPxKkcT4wt/6F5CTbuyZv+3A\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbjcqOaSsU6r5FdwAQGvqMfdC3ZJF0nvtSrhzknI9H0dsjoRa1RQ7JoAHvGopvu4kVbTvuI8SweUC6kqpjzXWfWftOiLNbaG8am0C4GcWQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e11ba361806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1148)","md5":"8bb6d48e0059b4a0993ea7f2f68ad297","sha1":"ac68453f12a4713e30b7fe85e424dbbb266ffb70","sha256":"7f7d09c366f8afbb43e1439ce81afcdaf76f9f8d9aab83a3338c7b13e18e944f","sha512":"ff5ff2ccf22ad1c8f7d89b02340c0352025c54b019538a2633b759e620a36526188ed63dfc4dbecccdff53d6f723d2814e679da801fa29843fabb2e223625c19","ssdeep":"","tlshash":"aa2144b2606e92bbe5c94d945ab01b31e2b5ba05380445ccbb3cc9191877480a7e203a","first_seen":"2026-02-24T14:23:51.176176Z","last_seen":"2026-02-26T17:03:57.783484Z","times_seen":4,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=ff83b5d6-c81b-46ff-a19f-41e5f7ea1cdf\u0026version=227.0.2.32.102.53.2.3.2.195.2.8.3\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=ff83b5d6-c81b-46ff-a19f-41e5f7ea1cdf\u0026version=227.0.2.32.102.53.2.3.2.195.2.8.3\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 1821\r\ncache-control: public, max-age=600\r\nexpires: Tue, 24 Feb 2026 14:32:52 GMT\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6042,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (6020), with no line terminators","md5":"3707024f02c31646c59ca2681cece23e","sha1":"f2b5b76398c1292c4f817830e5d32e680005bc8d","sha256":"7a50fff44b0a1bd6ca04b691e74a5a12f110a722e77a0e7eb483ec5e2e3db8ff","sha512":"ae0cc2308ef560beada74c0d52503e50ef5dafb4e75a6470e75362fc4d8269c15b028f5e96fbf107b43c2ec3e0018acbacde1e5c2d6ab075195f035f82845139","ssdeep":"96:80hUsXhUA4hUwhU9w3acJgt017gWrZSN+/9YXtJ/xN7QcGIIKTe3+/vCaq:FGsXGA4GwGigSZTqQ1Ih6iKn","tlshash":"e9c1552a834fc8bb7377915a62cbb60f31184179b5f8593fe474ca70a2861c7d206d9e","first_seen":"2026-02-24T14:23:51.205391Z","last_seen":"2026-02-25T02:34:32.57723Z","times_seen":2,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/2/4536.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/2/4536.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1741\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 06:11:57 GMT\r\netag: \"ceb5cf1e6dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=.P0TqW5w72qu8WsI6t4n1fzOJKiXE6sK8jqq0ZvBOqc-1771942972.805243-1.0.1.1-ZNSXaeiQehM9iuY8pd5n27LebF.gonNal7NVQJhpaKTuWUsoOJ5XxU5dZsNsBnuE9j5nLmQcSBlJ0GbrG53vR6KtA8TZSWG748jxpV78DXgETzC16ToMw02DNXlP4FSH; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqLFQJNq3nZv8Sjr%2FeoHVt64ODfs4m%2BXpP7GZFXYxZpyZb3ShIno%2FxFh%2FDJuhvysE%2FSnBhNE46PlrrkR5rvxaTMddsyhtwCxoyJclXwOsXrOS0U4QhtmaDluEvo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c0927c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d9cf41396b15374fc354bcd1483b736e","sha1":"6dac3287f82bd63d7b182ae1d09ac656f2e54956","sha256":"2047315ec5515ecba32615764da4f8a225dbf0ceb5219d7e44a01014d10c3055","sha512":"dfd5bf0182a1dec57c262e3028676d9cc73e7f8c64b90f365112baf2fe8d4b0c475c72c4fc6dd87a54483905893441795e8169b6ae6259996b7d4bdc4be3b2b3","ssdeep":"","tlshash":"7a311af3b2088d9a8d02383b56f9171050f466742382875a4da0e38b66bb752a9b572e","first_seen":"2023-07-17T10:48:36Z","last_seen":"2026-05-17T08:44:38.142657Z","times_seen":175,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d21ad1b.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d21ad1b.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"1115e2fca9841903408279b7425f0389\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 387755\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e228b364453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3572,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3572), with no line terminators","md5":"1115e2fca9841903408279b7425f0389","sha1":"caabdc62a38aeee323b94ce629f1c12f260e7353","sha256":"8ae1a405e5dbd536b519694e1557e6b6ef73e4e679da67cf506cf43ff0f36ec1","sha512":"ff0e62573b59fbf6d2315eeb340a8bd798b0ac2a793b849665b46bf06f5fdbc774a27aff3dca3fde1c06b05cb8b5da46433ade1c441be88bbf0de9b2ebf6b9f8","ssdeep":"","tlshash":"d57193a8f195fbf98603e75240ff5322f0347955916ae025fb70caf803d44da6269f1a","first_seen":"2025-04-29T16:20:56.245573Z","last_seen":"2026-06-06T02:28:37.788447Z","times_seen":477,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/SmartMarketEvent-CIsZCpQX.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/SmartMarketEvent-CIsZCpQX.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"323-72zIQ/YxcmEEcwD4YQB/NBtjDF8\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uw7qWksgOZ1bBF47IpL9pchFTkeq21n5h7jwK6%2F8yk3W7wTFiYmGeT5cwhKTQ0Ax387P25hvL7bHOslnER9k%2BU9sNZeP7WV1Ijo%2FINxwzw%3D%3D\"}]}\r\ncf-ray: 9d2f9e11ba371806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":803,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (802)","md5":"f3521a316d53fa50c2e0381363feea63","sha1":"ef6cc843f6317261047300f861007f341b630c5f","sha256":"9a19b1d16ffc3ae168cc81796555a5a30f33875120447d64b6e5bf0d1f1cc0ea","sha512":"cddae7eec47f003557983c216afce6b7c676027eaff33b7433724e29a41398528363ed9be78486b068174c44719c49ed394238ddd2e816b53e04addce34c096b","ssdeep":"","tlshash":"3401d0a6e85172720072ccbcd2109b43961812d3cb710255dddf8aba7bfc86e939df19","first_seen":"2026-02-24T14:23:51.208759Z","last_seen":"2026-02-26T17:03:57.767639Z","times_seen":4,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/gameDataProcessing-DtSnCvbE.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/gameDataProcessing-DtSnCvbE.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FeaturedGames-CmnWY5V8.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"4382-u41P2DOupfN44r9IUa6Bn4qW8sc\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2LpQ56f%2B1b0P29hJvh6qf19SNzpq7ZQfhn8vYGkps2ZUW3PW3IRg1wZLazqSp42z57iCtdywFZ4AKHO5Rbd3M0yYM0F0SBESJ3HVsYAmDQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e14bac21806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17282,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (17281)","md5":"dcecb2abe07ee9dcecc6f662e238bc7f","sha1":"bb8d4fd833aea5f378e2bf4851ae819f8a96f2c7","sha256":"c5a8f4dbc771b4c88e6f971277095f148539bb64a22ac65dfda70aafa878b60c","sha512":"8c7ec6fe241f990bbfddfdf77be07986ab02525eedebc159e614b1c19988df95932d3b1d854f3fa73b3077d14215f91339822ab543e09cbe89b47adccff7cd27","ssdeep":"384:WwphrrZxhxlVz12awqhvT7vsB4Pzendc0aw5K4A1nV:WCpt7ve8Q/AX1nV","tlshash":"0972750b8a024c52c97e4639c0aa15f1b9781b32e8b8cdd11a655c7afb5fa5b31e1738","first_seen":"2026-02-24T14:23:51.212877Z","last_seen":"2026-02-26T17:03:57.951321Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/985.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/985.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 890\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Apr 2016 14:08:22 GMT\r\netag: \"5a32df43d79bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 08:04:25 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 368307\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=eQlEQIx3OLLWasGgSpgmgxF8NvZqSUsz35gDNwxbBVM-1771942972.8273885-1.0.1.1-UfMCGA4LT3DGQJG..FATPQ0WiKNSrUeg5ZShTPOghCh01Z8DXtWCiYd3GIHc4tDggi95SjiFfjYgjtT3mktATTLriQthvhB5D46ueeXeMsanwWNPBoCzQJ5T_i0xFAF_; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhX1Q35EFF2yU17QGyjtIVypXBXZmSER%2BCw1F%2BB5V%2FKzbx%2FrE4yEP9PwyIm63SkLT0%2Feo9rwsNnrEsGtN5MjHSrY78pgyx3mSk%2Fn7V1iQvTJ5kugp671HaKqR3o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29cec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"dcea5eb1f71ddaee82487e24d8b88573","sha1":"2f536742c11da846af20bf837317c71870324d0a","sha256":"0f8e30d829aa73fcabcbb989e9c73d688b0dd14ea1ed7a3d463197fd1e0fdb8d","sha512":"3a7400dfc3511f512a752cb6afccc8c0517cf625959fd9785683abfb8a549fac2ed8aacca0a56c259e80547c2c4968748c2ff1e08bc04465bc0d67a0b7ec4d97","ssdeep":"","tlshash":"9811b7e8363945310a989d873423cab1bd3f34f53c6762020a3ad56c97a5ddc868d9ba","first_seen":"2023-11-04T19:13:31Z","last_seen":"2026-05-23T15:21:21.751188Z","times_seen":280,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/435.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/435.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 1459\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 04:57:18 GMT\r\netag: \"a389ea61146dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=MPZQ7PunTNjNUWRRRUv.5N5VuA5wwi6Rpsv4j9DwrxM-1771942972.8296347-1.0.1.1-JwLG0_JIeDGVQHVfldu3Ba9WMDuFqSDy9po_Biudj0ElKh3aAfKg1UK4x0LQ6NxtvYdqrjoxoY6maNbqENeyCMy1VfNcx1Mv7xhQMEc99zpDgDkshzoX5WE4pvG1Po9u; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUh3jggczWnWxlsO2%2FTxD1pGLjgZA4X3tWEOJy%2B259vPLnLAbKM47OyODXoz0q0w0T98nlXmqEDbgEx0X%2F21eH9%2BGZrIaYpfsnMdxTDxKqeExhjIH7eNOVt%2F0Vc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29ddc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c9c487733fa6d2832cc8148336f60b69","sha1":"6ebcb858b415be04218cef1650572a1417752608","sha256":"38076052ff77678e8e5fb15a6e1c54e24b550bef73bbd1cf16cd3d400156e208","sha512":"a7c21977140cfc2869de48f40fa3c0e970f29290fd640d074ba88740f9b6453b13cfb881b718fafc21cb577c18ce594f613fc274c96ad26243afc039a9a6aa75","ssdeep":"","tlshash":"c331e90a4f26bcaff40429c77ae610b371ce5b7c7d31e91fca4ad0101d614f48785222","first_seen":"2023-09-18T21:18:01Z","last_seen":"2026-05-30T13:54:22.97746Z","times_seen":476,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"0beffdc96a1a1b35b5ce2759d6d1d51a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7785\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e06bc12aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-04-15T01:21:42.763559Z","times_seen":11136,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FacebookTracking-3dL4n6uM.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FacebookTracking-3dL4n6uM.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2a8-IASiAHvSjivV5cscT/+MWf6wyak\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtHr0qd%2FOJEw2Eurtj9HXJnOQcYsDjdkbx8jTNfEF0xDH9WPs3JEr0Vz3kmsZn1TIzvj2pMZkLeAtZuv6IaYADpN4%2F0TTpcvuZ8X9hIbNw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ec9691806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (679)","md5":"140e6f6f98e0fa8d3b0be5a3a4600dbc","sha1":"2004a2007bd28e2bd5e5cb1c4fff8c59feb0c9a9","sha256":"86621dcf5dc5a1b34c4539fb729e72c42ae3fe9bdf8eacfea3b3313b43b7e3cb","sha512":"75615ef7f6a0e1a3bf5d09e5d022ab408abda5aa2632928b514b1bea7824cb439a0025caf9ff607f42016b5a64e255803a8b012cb78879e66cfcd15099850c41","ssdeep":"","tlshash":"5a01fe0f2c45b479167c18b8d3bbd8142aba990a258b45a5c6c7c9b92a24546848db8d","first_seen":"2026-02-24T14:23:51.217193Z","last_seen":"2026-02-26T17:03:57.815026Z","times_seen":4,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/LiveChatInc-OVRSkU-M.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/LiveChatInc-OVRSkU-M.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b68-u9zW9EjILAcuyKhar5S8lTW2WtU\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N48lg1Iu7MvJttF7jSiSDk5zfMTQtarZZJ8mtDOQ8ZiU0tZMX6TS4qMkKi9XP4Xftr%2BAWTgs%2Bkh%2FRZLK5h3Z8OPS%2F15vU6zT%2BAUx5S%2BhEg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ec96e1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"386e892ab3803bf0ef0d5646d2308a0e","sha1":"bbdcd6f448c82c072ec8a85aaf94bc9535b65ad5","sha256":"e552579fd260888f85f2e29cd20c8c273cc94ffca451e80d79fce5f624465b54","sha512":"ffe631aa185f8a9db4a51fccbccee3cf40be2ffa228698cefb5d720f76cd3046f3858f6495c556212e84cc1454ec249017eb94c7a452a72f67f7e6bacbe635fe","ssdeep":"","tlshash":"975134dec43cb8b092aa67d1323f7b5f711a571ad4008d31656c4b0af61e4cbc467aca","first_seen":"2026-02-24T14:23:50.94711Z","last_seen":"2026-02-26T17:03:57.958513Z","times_seen":4,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/userJWE-BFPhdtVH.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/userJWE-BFPhdtVH.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FastTrackTracking-BNZErIta.js\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"c1-uLiTEQmQR8VZPQfe1CMxM6ZxiAE\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XXHJCcFXtHABvaYsVsxEHMJUE2CL2fc%2BP%2FJEhymhzY8QHDtyVdEAtVWpHqU%2F15AYVCwZCPJx11TKznQkqxkKFkiO0hK70zt2pQWuwEuMmQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e11ca441806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"61aca6b0f0e9aa3213323f0d42cf93c3","sha1":"b8b89311099047c5593d07ded4233133a6718801","sha256":"e5a44888979239c112e0fe094fec9a2b04b32f3c381b0b0b9c96ee9a843f7ad3","sha512":"a2f5abf9458a3a50960a852fcd13144ca1e36fe5ae42445706b382ee9d39dd8b291c120f60e6a8b4c5e0fce83b3c25361dfaaf27cb5552ed9555fc94996f9bdc","ssdeep":"","tlshash":"d6c0c0db4cc411f7c5582c441005ed13c7307914a3d8d3519b0cc3fe7a5500bf90ca10","first_seen":"2026-02-24T14:23:50.941413Z","last_seen":"2026-02-26T17:03:57.968001Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24390\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:03:09 GMT\r\npriority: u=4,i=?0\r\netag: \"6940151d-5f46\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=b673uvpP2OSAovMprEQLlPy_yfse3Cy9WGlQGaR3MzE-1771942972.1193502-1.0.1.1-DTK2jnvYTPhrf.n3TTz7xKg3kQ72HRSqS8Wnjk_zVnDj3ZjTgwgPlDwyfqNM9yUb1Rl7Eu4KOb7xrfzsjLema8EF4egZ0Q37Upd2afdITnbJ414YSyYF0VKYqkKEMLBz; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uLA8NxVxUhe8YX3SUKSagDxQkFTneTrofciOmuaqwjsV3hs9TybBRshwB%2Bg1jp0uvQSJtwRtvlJXFsHRzBhJy04KocAdHd4hqvoGEShq%2F08ZuwenKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17bee12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a343e21bbc8dd82b9a351018ae46fe","sha1":"ea31b5994a6dbc5e2c49d5f6eeaeb1c6b16df3f4","sha256":"08550d26480f3f6cf58fb6b50ba9c247d35c1eba70b6f2ca467abec7c84a19e8","sha512":"7c2cd2364f94f5a82d27ea07f251eabd2b42a03d1e2ddcb671abb80b897803941c05d8d3e2910c5fcc9844d5fb0e608c6b2063f1bf7c932bcd501efc709f5921","ssdeep":"384:lKjKORGzizM3XqK4PhCDkQcL5F0cqx1/v+zgxjfTE/a7PPY+xbyWBuPcCgfLdC:lQ1GzQM39QEkPF0cSN2zWjfTIfKjBe5x","tlshash":"5eb2e089da8861645c84f4483f4e24d7bb7816dcebaf083e978d0ee835c99b577b610c","first_seen":"2025-12-24T22:39:16.06566Z","last_seen":"2026-05-14T23:49:57.36494Z","times_seen":59,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vsa4.tawk.to/s/?k=699db43b3ad4812025bca75e\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTM0NWEwNWM0ZTZiYTE5N2FlZmE5NmMiLCJ2aWQiOiI2OTM0NWEwNWM0ZTZiYTE5N2FlZmE5NmMtT2sySnRibTlnMmdMTU8wUWFOcUVFIiwic2lkIjoiNjk5ZGI0M2IzYWQ0ODEyMDI1YmNhNzVlIiwiaWF0IjoxNzcxOTQyOTcxLCJleHAiOjE3NzE5NDQ3NzEsImp0aSI6IlBGc05ORFBQNVYweEVzWnp0ZTdDZCJ9.SdAGFsat4QogA14ouM3IutmUGjk-v_qG4bNQ1b6qt-0DU8wEHCFf1FNVF9F3aHzNMV6xPZ_QawOm0eUhQ9ygGg\u0026EIO=3\u0026transport=websocket\u0026__t=PoG20j-","fqdn":"vsa4.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /s/?k=699db43b3ad4812025bca75e\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTM0NWEwNWM0ZTZiYTE5N2FlZmE5NmMiLCJ2aWQiOiI2OTM0NWEwNWM0ZTZiYTE5N2FlZmE5NmMtT2sySnRibTlnMmdMTU8wUWFOcUVFIiwic2lkIjoiNjk5ZGI0M2IzYWQ0ODEyMDI1YmNhNzVlIiwiaWF0IjoxNzcxOTQyOTcxLCJleHAiOjE3NzE5NDQ3NzEsImp0aSI6IlBGc05ORFBQNVYweEVzWnp0ZTdDZCJ9.SdAGFsat4QogA14ouM3IutmUGjk-v_qG4bNQ1b6qt-0DU8wEHCFf1FNVF9F3aHzNMV6xPZ_QawOm0eUhQ9ygGg\u0026EIO=3\u0026transport=websocket\u0026__t=PoG20j- HTTP/1.1\r\nHost: vsa4.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galabet2647.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: XPjEdBZ0MCQlXU8GDD3hNw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 24 Feb 2026 14:22:52 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: IwV1s0IOwgyw2DLpYN+TvGsyvOE=\r\nsec-websocket-extensions: permessage-deflate\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9d2f9e199b4f481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":0,"dns":39,"connect":47,"send":0,"wait":390,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/771.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/771.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/favicon.ico?version=1771329529905","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /favicon.ico?version=1771329529905 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nCookie: TawkConnectionTime=1771942969573; twk_idm_key=t9C874Dq41eGy2C191AQv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:53 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1b67-K5P52fXMuAnkVOgS+d+nzpqwKwo\"\r\ncontent-encoding: br\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zASqUWuhB3j1gDKgBF00VmpAnJo7kQifG8hcnOFcwBCvrMfAAL68gerZ%2Bq9pJFXafhYhzqiQTBuClfbJJJngMPiINBaverNYLArJ20Ausw%3D%3D\"}]}\r\ncf-ray: 9d2f9e21fd2b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7015,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"96a66de67adef28337580739eab71404","sha1":"2b93f9d9f5ccb809e454e812f9dfa7ce9ab02b0a","sha256":"1b029ff1969f7f867742ed30370ab8f76f58f3a00c102b51740cee61a5bae6ca","sha512":"efd763159644683e2aedb05be3a541cc4792938d3755e0b0a1e8850c6240e04c3ce03e465ac5160ebea03b7ba0e9a948bff584fb163ab1db1677453bcb13a7fc","ssdeep":"192:AA9risdBVS6QwidYsQ6ujzwAzxyKjuDqc:AA9pORYsKIAz0KjYqc","tlshash":"40e19fc31979540617e9f2df05c4386ab74ca88793a2a4f927b931343ff19cda613229","first_seen":"2025-12-24T22:39:15.963833Z","last_seen":"2026-06-03T04:20:31.895132Z","times_seen":106,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39974\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:35 GMT\r\npriority: u=4,i=?0\r\netag: \"694014fb-9c26\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=23nLflSqFh3G8v1XepPNIxrxuRrdcgK4fm2Va0p.WOc-1771942972.114354-1.0.1.1-5Epg9mpbKU1BH.aiH53xsQvjIn0KRrQ3iXxVnHjj2dYhjZkxZoziS7xucuxmOh6APJFbPi4sC2bc6Bc76FY97aiMCR0EnVXOL3zy1NxUUpP8h.evzGLj2_Xe3uuX0RkT; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CovP4Xt1lFQHQGFX7up%2BrEneW9nZnG982GoJ%2BfHnOP4lKgwCMTj7aPbVA8Exzn%2F5CfTD6dUgtf0qWX6AEHjHoMi4BpPC5ca%2F6HCFeub%2BDnOg81ORKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17beb22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86013b42eae428e11372f049516b7ff9","sha1":"225a913e812a35bbd292b3316c359967757f3801","sha256":"e55c587494457c03fdc8be31a70077cbab07905855cdf253454ab76b7b069271","sha512":"524cd729a736a3cea55239e8a2cc8d1434bda345dc35a6e663552ba59db3be7adb4419ed21cfda32a1468a0dd735e910482186438c6cc119f70064e1d854771b","ssdeep":"768:IEmoxuaqs5NSF/H1M1photHZYN+MeKRlSGifuJvy2UbLWIKp8mkx+:xdxuUgFm1pmHOsMHlSms2P8mkx+","tlshash":"790302a130ad0760f79a56ebb11d8d3a91167fc149be3c782c780c5cf379fe64658650","first_seen":"2025-12-24T22:39:16.381848Z","last_seen":"2026-06-03T04:20:31.952385Z","times_seen":63,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:57.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:57 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d2f9e399a98723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":697,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-05-22T17:22:58.055376Z","times_seen":51,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":36,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/JackpotPoolDetailsItem-DOBnH8RK.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/JackpotPoolDetailsItem-DOBnH8RK.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/JackpotPoolsWidgetContainer-CG5gkeJb.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3803-0t3mrE+I6Wl1MbazqG0GOCgKFrU\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKaon9pmpkQvFBm5MT%2B%2FwXSmduXbDcwxbn%2FbQm7EG3E%2FOwu3xW1264UjeDoETOLYsFl%2FuztpVKuWxoeFuiidZt0zXgUrncRHGkVFwcDqCg%3D%3D\"}]}\r\ncf-ray: 9d2f9e14aab31806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14339,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14338)","md5":"3889e481ab1adf9f96a132846c0801d3","sha1":"d2dde6ac4f88e9697531b6b3a86d0638280a16b5","sha256":"64d0d773fcd389193d64f215cd0bc6f25d7bccef8282d0fcd309aa7298595108","sha512":"b4e0162884cabb644a2fdd77844e44fecf63b090206b2739478fe152ec719ea2cbe19be56520249c097335a5951319d25dfcb62c62c23c3f400b083fd9578f0c","ssdeep":"384:xm6srKqqF3EjFOFEGOpOpeHMtGRxeG/PcyKxV6baPFFWB:xmB7CEGOpyts/UofB","tlshash":"5a524c05f012f7edbca954f7487ee0687a5e1aa9c71808acd1bd6c313d2c455760bbac","first_seen":"2026-02-24T14:23:51.244561Z","last_seen":"2026-02-26T17:03:57.821746Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/HorizontalSportsList-BjU3O27Q.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/HorizontalSportsList-BjU3O27Q.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FeaturedGames-CmnWY5V8.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1a6-YTA3AQ2rCHd3qJdFAsedkqFdPEk\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=056mP4ie7%2FKsIFGtAbW%2FEDXYUQCHmQmrhurLYVj6wqWTb8HwWbxc1OSu3OovueE%2FaC5vU91AFV5JY%2BFzCUSjxuxhoFuSmA9hzr7YOsXZfg%3D%3D\"}]}\r\ncf-ray: 9d2f9e14cac41806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (421)","md5":"c73fa28cecd62ba3c31d6201e137d6a0","sha1":"613037010dab087777a8974502c79d92a15d3c49","sha256":"83b5ad3b3f3e009497b2dbde83af71ee19ab265c0027f0fb23504d2a209d2526","sha512":"5d6444f570ad2e892840f2e46a64d2d908a6989a8f5560eb63cb2058bef99bc9789030b9222e2f664de865261633e807a77b8df2f43637ec68bc118d8a3cbbbd","ssdeep":"","tlshash":"44e02bc6dc618af45a2b88efb95c24846112047cef47a671d29492281b7408bf62d04d","first_seen":"2026-02-24T14:23:51.203754Z","last_seen":"2026-02-26T17:03:57.739299Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/if-defined-CWaLTnLW.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"cff9-3CQS8BSHCmzdXT/mRzShI3Ky5mw\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suY%2FZH8DqCzMUmwNDb0hjHgXWwzm9bU5BlxNIMSsMK1GH%2FkyfZOzA12WIg2PK8C%2FoGoibxzU2lcZN9liIC6XU6ePSszMNq7xF8OHW0zcaw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ce9151806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-03T21:14:05.348177Z","times_seen":638,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/GameSuggestedEventsWidget-C1YjPNkk.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-C1YjPNkk.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"e8e-Os1anBER2O3YZQKJmZxNEEaJ5jM\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHmKMvsPEM3VZ6hunvv4MEbofNovKKnOei2HGz%2Fsi1h3sNkAArTdPTeK5iFiNM8491WnakeVeegNF54iGUix3J%2BWpNl4hPz2rMlzCygCiA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0eb9641806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3725)","md5":"43787a45f5cfe74078cbc565e4521f6d","sha1":"3acd5a9c1111d8edd8650289999c4d104689e633","sha256":"cd5da6dea240ba73bfe9cc022b7d9453583f2101b409e94833a3aae12cec1a1f","sha512":"090bda22324787190a13f5acbea2eceaad19784af2d260ac172a2927898e787ecdfacf87d12a74f6ab5fbf3b8b2cd2e18a9d8c970aec4dba4dbd4c7e5eb443aa","ssdeep":"","tlshash":"7071e74ae010aa39a13740d82bef3219153632b4b94353c1b63fca7123f55926b5bbdf","first_seen":"2026-02-24T14:23:51.248389Z","last_seen":"2026-02-26T17:03:57.756743Z","times_seen":4,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/AppSettingsButton-B9Bfk5lt.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/AppSettingsButton-B9Bfk5lt.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"181-Q3sDKsT6bx9KhAS1P7rrjvAVpyk\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RFKB41YyxwY%2BvbHNhpfWtH8DoVSJBLItxz2sdXFBgztPO%2F5AlRkKqjeyiHXQ8Lzbq2LQkQequwsunn%2BLsGiU1k536T6B0CqGutd7sKZlYA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ed9761806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"11b72d538039debad23018d55f70656a","sha1":"437b032ac4fa6f1f4a8404b53fbaeb8ef015a729","sha256":"c4f26646d48d997669963b81485af4a66a84c589c5005fa9aac7e81ce4151bd9","sha512":"a558a63166c1c05cd1f781fbe1e412559881d4e502a5768961783da4cedf90ccdb34d072f0921cc027c35bdc157f9fca17973d2e5617b1eae1ffcf1e7ec37c79","ssdeep":"","tlshash":"aae0c08b90c2d3fa03d27fd1c51fc2057e1bac78d394da4180fd90617ab4182d55e66b","first_seen":"2026-02-24T14:23:50.9912Z","last_seen":"2026-02-26T17:03:57.902053Z","times_seen":4,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-media/storage/medias/galabet10/media_751_d9ae3c894307358d99e0d666e91a8018.png","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-media/storage/medias/galabet10/media_751_d9ae3c894307358d99e0d666e91a8018.png HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3192\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=315360000\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 23 Aug 2023 05:40:31 GMT\r\netag: \"64e59bcf-c78\"\r\nexpires: Fri, 22 Feb 2036 14:22:51 GMT\r\naccept-ranges: bytes\r\nage: 593242\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=hlaVOD.JTaGTzWoMWHUwE4pMI9AJc9DAEibJbi7rnZw-1771942971-1.0.1.1-4OYwNVj_vUBMZvSzByEVnK3fKqXjLVBtEW7HtnSjHOePAfwDPmMZPCrn44YVrwwzT.dUIkdgRJVo6G3a.V1SAQO9lZhax5J.ZzI0TOJyCHk; path=/; expires=Tue, 24-Feb-26 14:52:51 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVJfmQlsNtoP9McqG0SKZYAaFeYrwSyKycUF811RBgRH0KHtxE7%2FK5UWQOZl%2F24bexrlfpdmIV9kQ%2BJ3Y2dZdhyuYvwB%2Bl%2Bh1vkAHm2zsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e117a041806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3192,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7abcec36faa73c3c894b361fd966fcf6","sha1":"46f3c98f019e59da6263dc8278edd18eeb5e36eb","sha256":"1084b9e09a8774b738e99814bf9869be91b3c154d88bde64c9eac5e399153b19","sha512":"bbe0c85875f870eafc2ecc05b3c21d5a8c0022f1fe92224e65d3fb3f11d68f5793947b810d00c612361e96bd113a510f2329aab9437de415f5be3e1551800cb0","ssdeep":"","tlshash":"ca616df43548b234e081f076129690e50436be4e219eee17b597737cbf2515cd0c7149","first_seen":"2025-12-24T22:39:16.116509Z","last_seen":"2026-05-14T23:49:57.477929Z","times_seen":51,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-media/storage/medias/galabet10/media_751_609aa2021173dbc7867be74ac403fadb.png","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-media/storage/medias/galabet10/media_751_609aa2021173dbc7867be74ac403fadb.png HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2609\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=315360000\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 23 Aug 2023 05:40:21 GMT\r\netag: \"64e59bc5-a31\"\r\nexpires: Fri, 22 Feb 2036 14:22:51 GMT\r\naccept-ranges: bytes\r\nage: 421971\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=ua9icp.GgTUGlzb.S7.9XMw._81INnXZ8B09D_spFi4-1771942971-1.0.1.1-nH6Zx3Wqhu3IQVTGtXgDNf2MK0dFglX8JSGvP3ICSYYkBFlSe4L_wEdlsgV05ucohTzUwW0DNF2v0jGDl3InfnNrrK.i6X_KrPE1c_hizqY; path=/; expires=Tue, 24-Feb-26 14:52:51 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BgvLn6fIxybrnYtF4whWr06kf%2B8oZHorq4ZBy0YLy9VecAR4uesUJied%2FV90ZYvjITIEw3THf0lAqqP3y%2B6BbS7KfsOxbUFE2B2jqIsv%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e117a0c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7081c9d3ea2a6fa19a82d1f725a61d11","sha1":"3c161f97bafb034eb192b0ef890a5f2e4b3d39cb","sha256":"61390467d0ee7bf0ac7253d9128af3b18943ddc4effe0ef415b1d0ab9e4da2d1","sha512":"0c2e13235adef124de8c8fef5009e25cd362690a5865db9e3ac68b80d9bc4f6e30f13880416a42206ea81cd932ca17912a2bfeee7ade6f647b0c00f46b376a39","ssdeep":"","tlshash":"ab511cf531120e38d6a470339d16dec67804b445c4afc416f992eb2d3da61a478cbdb9","first_seen":"2025-12-24T22:39:15.996531Z","last_seen":"2026-05-14T23:49:57.535757Z","times_seen":51,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/jackpot-jNbP6Duk.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/jackpot-jNbP6Duk.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/JackpotPoolsWidgetContainer-CG5gkeJb.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"178-HTAHDn0O0IONuuIsgcQUMPs9DUU\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ThP2dnWiTjcB38eCY9Aw7hhAQgSmI9P%2F6rH7nWpwUlYQfR1VJjvr%2Fo9mWKtBz9Uyn6q7GdUwEOwVmaZ42DLAzPthC6zetX2I7dHagWv%2Ftw%3D%3D\"}]}\r\ncf-ray: 9d2f9e14aab01806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (375)","md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-06-06T10:12:11.700794Z","times_seen":97,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-Dm17uEDJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-Dm17uEDJ.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1156fc-+74wfoU1f4QE4lVbKJb4qsfr6qA\"\r\nage: 1\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSEqbKp%2FVzLHyOAFcvENKV4s18pPNZZFglZ4GYrLdLCCi%2BW8KgyQCUQ%2Fg9u%2Fqm3r%2BLKJNYaNINkCarF%2FJ9buAdSCsedKkXAYlBYjmxVANg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0cc90e1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1136380,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25434)","md5":"eb4a698ba61c4ff2df2974c97abe3b1b","sha1":"f40e44d2650a76c10193192f52a1c267feac00fe","sha256":"17b6aa3f2fa1da41ab1b6e4109948b3b06108da0a0fc2023fd1a7d9e78d9921a","sha512":"66f305287de07cee80f919b5fcccc13b07946c4c61151e24279ea2fcfb5d41b52efa07037720b7040e5f4d5d73b3f26d66f7bf05b08465620c1812e877c2193e","ssdeep":"24576:cWVkHIx9sL4CFLHodjJhtBPZ2d0gPGYZYqjmsKmZiKif3ikAXEt70VDbyzWiQnux:VVkHIx9sL4CFLHcjJhtBPZ2dPPGYFjmH","tlshash":"73257d85b059b97997b709e560af1101b1391e04f44dc860f17cedae29bd808a2bbffd","first_seen":"2026-02-24T14:23:51.186995Z","last_seen":"2026-02-26T17:03:57.854645Z","times_seen":4,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FacebookTracking-3dL4n6uM.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FacebookTracking-3dL4n6uM.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2a8-IASiAHvSjivV5cscT/+MWf6wyak\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZINtb3w3Q9xEyY0xWgSxjUC1WFs8bPqLhO3aE1WgsIkelw7tkWnJkxtCJ05EMbxb%2FP%2B7SsZDPTPdf7A0RVvPhvLnOnEuY0ArFXmnni9EOw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ee97d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (679)","md5":"140e6f6f98e0fa8d3b0be5a3a4600dbc","sha1":"2004a2007bd28e2bd5e5cb1c4fff8c59feb0c9a9","sha256":"86621dcf5dc5a1b34c4539fb729e72c42ae3fe9bdf8eacfea3b3313b43b7e3cb","sha512":"75615ef7f6a0e1a3bf5d09e5d022ab408abda5aa2632928b514b1bea7824cb439a0025caf9ff607f42016b5a64e255803a8b012cb78879e66cfcd15099850c41","ssdeep":"","tlshash":"5a01fe0f2c45b479167c18b8d3bbd8142aba990a258b45a5c6c7c9b92a24546848db8d","first_seen":"2026-02-24T14:23:51.217193Z","last_seen":"2026-02-26T17:03:57.815026Z","times_seen":4,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Tooltip-CV9gl-ox.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/Tooltip-CV9gl-ox.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"334-Ak77TyGB79Nf97CZbjUX2xIDkdY\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0mCld3YA4kZSgzXcBshIjAVcr%2BmBzpvdKQIIVz24ZUSZwNXGLEmEpIv7lPiycze8mSEkpLe2tkjg6YUYBnLQK1wUrRCZ5edVZlqX85%2BKeA%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa2d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":820,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (819)","md5":"c664a5ff794ec2d4923355276efa0494","sha1":"024efb4f2181efd35ff7b0996e3517db120391d6","sha256":"0544e8134a6142b6b1562ae0ed7f436c4432371c51bd27b2d4ef7787dded9749","sha512":"7e3e1f83336d26f2e7024b35825c268d4ada8b770e4a4bbfab2b2d7d160dcea410b775fcab5f563b66fb1767aca1fa53e891581c14e489fc1529c703f82cf51a","ssdeep":"","tlshash":"1201f646e032fbf4e17754db142d966d7253266cbe2f58f0a038058f0ae4984d317b8a","first_seen":"2026-02-24T14:23:51.012578Z","last_seen":"2026-02-26T17:03:57.835687Z","times_seen":4,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FeaturedGames-CmnWY5V8.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FeaturedGames-CmnWY5V8.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1ee2-MZScdHqs3XQ2DULFve9Ti5sbHvc\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwMlvOmBvIkHGZSXIqQvdK0%2FIYhdPKCjvj03cHZjk60hqumlYK7JOLhdPFFiyLBTfAVbU3WIa%2B7kK%2FMsWUj324x8sJurWyoYB9JoobFQQA%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa301806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7906,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7905)","md5":"e24344281a7fbd4a9713273199c71772","sha1":"31949c747aacdd74360d42c5bdef538b9b1b1ef7","sha256":"cd4bbd4ac6d8c15d2e0161bbf733762f872971bef3f330f61722203fb0709294","sha512":"55516c7b75aac53acd092be82e3812ca3ed64b29355dce7d9867795b332110debbee7d5f7a536b5d6e1df37f4ac737357bf55bc82e733d0934768b6de87b77ec","ssdeep":"192:DjWt/Fh/fNHPEwDG3Qo62p7c0mhcMO/b2wL4Ula2yjRC:vKtHP4Qozp7cjhAI2CY","tlshash":"36f1ea0ae010fa7de63b49e7753f6104f47a06d4e7150890d0be6e2919e5246733ef8b","first_seen":"2026-02-24T14:23:50.903051Z","last_seen":"2026-02-26T17:03:57.839197Z","times_seen":4,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /loader/fasttrack-crm.js HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 13:55:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: X9ovE_PVlm7QTMnZs7pgGdxk3XrTsm57\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PU%2FcR12cIU3pFa%2BmItvsYax4d4SkrETQL%2BOwA78z%2F1NA3kRLSNmmHv22PqH43ExXVSQLOVXGgHJhUL4d%2F01vdUBPaH7c7VgLP%2FIg1wGywY%2Bd5pSwU%2FWdcOI25wU5vg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 08dc547306e2c7102196b53ce0859e80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA60-P11\r\nx-amz-cf-id: PCb-9sRNJT74zT35kcMuKkglZxwv8SnnaMgOpIrfLpaxlO-FT6gqdA==\r\nage: 2515\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"0e62b669f80928b5dac9ece193256095\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e13990f48d0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":69,"dns":25,"connect":10,"send":0,"wait":23,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472751\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e18d9f34453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-06-06T12:51:01.670471Z","times_seen":35798,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWx9wWIEnFx_d1q8PD7qNbGkSnNYb-lsuV8HJetvbsQMM2qTk76_2huTInESqwELcDIuybaJ2W0rrLaC\r\nlast-modified: Mon, 23 Feb 2026 10:04:14 GMT\r\nx-goog-generation: 1771841054805031\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 99461\r\nx-goog-hash: crc32c=Ys5crA==, md5=HRpGANZkoeSL85ElcJ/PFg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 32306\r\ncache-control: public, max-age=28800\r\nexpires: Tue, 24 Feb 2026 22:22:51 GMT\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":99461,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"1d1a4600d664a1e48bf39125709fcf16","sha1":"d905bf8d6eec7ccd135adf0cb50e4867d50f902b","sha256":"2ca4e36f342fa14396f7949a6b7e9546fd9511d2eb95a55cc3d28439e5feb9b4","sha512":"349dbc8fa23f7a9bd7535a1a74a95ae0d8a4434cd46fc382ec236c60488c90b45b0a38f83d4785f778654ba47bfd0b1ac2e1f859ff55af6c15c17c5149ec0ee1","ssdeep":"1536:EnCZo5ri/lsivSRciYbey40VjnjuSwppTPSD18wgnsG9:ECZo5u/anzy4Ynlp8jsm","tlshash":"dfa33ada7282b03453f786e7a17fa212b3391918340d8420f17ced6a395a987d177f6e","first_seen":"2026-02-23T11:36:50.098336Z","last_seen":"2026-02-25T11:20:48.471739Z","times_seen":77,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":78,"dns":45,"connect":2,"send":0,"wait":2,"receive":2,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTS73u744DDE6I9lcWwG4g%2BUyYSmWlMI8wcwHF4lJ3Hah%2BVZ9B%2FQwqAtMBXl9xY4j1y7brLmfqPW5Vw%2FWo%2BESW4XWCohKDHa%2BPGK3fzl3kv6G2lOzIM%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d2f9e0efe0b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2821,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ed84599d293d187c97aa6f88754332ce","sha1":"f950f5294b5fa13bd1c3950e5cb28b1a2ee241fc","sha256":"599500c94c302ac02594dd87a6652eb51a9f45042f0fc5fc2bd2f3935f8fab81","sha512":"d94fbe4938b707b2595582d942cfd27ada4874b5be459851f77dc5371f705af81eada3ddc170697813c2657a8404f1303b8777279f716eef4ebe08fdce284cd7","ssdeep":"","tlshash":"71514f3646b21421436710683babf31ab23ad2433689e9447edd93005f85f68d9b3bde","first_seen":"2026-02-24T14:23:51.260409Z","last_seen":"2026-06-03T04:20:31.871571Z","times_seen":60,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":160,"dns":66,"connect":22,"send":0,"wait":80,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/logo.png?v=1767600520","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /logo.png?v=1767600520 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 8570\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"217a-COedXdhEORboW5CmiCmhOELaykc\"\r\nage: 1932\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ev5S5f1%2BJyQf89wPqCkRmmslqDjj7saW8bVR1nQ4hT1AMnOkz7xZPPMLpIfMY7J0KheCiRDXiFuV9jp5df1Fcn95ip50fYA9iR1ugfwsqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e0df9391806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8570,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 120, 8-bit/color RGBA, non-interlaced","md5":"8616737c6157ccaeee86e2c08f0a6fe2","sha1":"08e79d5dd8443916e85b90a68829a13842daca47","sha256":"a0b66af32c291c7f13a082fca293857613e49569f277c2d3c68d4184913a73b8","sha512":"14636bb931948ca1b8aff3dd5fcce311e595051e41240e890fcf3a0e5d507820db5670e963489c66354aac07429f979979a67b5947b9654b5303436c69eeaccd","ssdeep":"192:ymSFGYb774y9Lkxe2vjdIfKp/xJIXq2g5qPG8fxtnQzro:yJAYX74y9Ax3rdVvIXqBYZtQPo","tlshash":"6a029d321ea92eb0ddb332d52928f20f72cf010f16572136e41457a7cb1dea89c8b667","first_seen":"2026-02-24T14:23:51.197117Z","last_seen":"2026-05-04T13:54:35.270172Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/GamesOfTheWeek.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/GamesOfTheWeek.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=KnEik8S0my1gDm5VXfsaaU1Css3xSsteB2xxhEzh.cg-1771942970.689161-1.0.1.1-zIHANLuWG2S26i6ck7XldKA4mKKP_F2o4lmPAStqwh.uK6Obd4Jynf4ij3SHa4Nimb91gPo9XSZ4y5.8BC5ZJXIIX8Xty9ahdpaj.EBwUw3Xj1tWlZ4R9zYFgISzKG0D; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ar9PSkdz0n2thVOtsVT0gg%2F2dZZWZKlnpbxOD%2BstmmDzT0tH3YBVQ4jFpAxvHxcR7wTb1BSauuTT6KM6VnUYx1r120CRLGw3bBp4cVxxSZsfbNnFEA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627086-be0\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ec8fe76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd48bcac13b7af9a43338fa39450069c","sha1":"b39e0dce82eec16651566913e7d8a1ae26ee25d8","sha256":"e67476d135f1d3e566d62c017b8a4afa7b3013dc29540a85de3c9f071a11812a","sha512":"39c26cb74b8bea9fd071edc07b5fe1ef144747ebd23593b409aeb8f0e6894daf00a946805f222e2dca66dae48baa4adab0196a4ef71720fd109aeba8f11e1026","ssdeep":"","tlshash":"6951b0d8c5254afa1bcc335e6322542b0cc92fd6f7a35cd8b27c85985b13d062a7e883","first_seen":"2026-02-24T14:23:51.265611Z","last_seen":"2026-05-19T18:11:41.282935Z","times_seen":52,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/LiveChatAdviser-0F1bzkHq.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/LiveChatAdviser-0F1bzkHq.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"35e-7GwevgJv9yp7FYj/CKxayyfzVgk\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5SyyRMZnFNiumASsmSUNXI7hTfN8x6pyWu%2BWhaM5WPgL21f4%2ByPds4I9ZiAf%2BR942Bm6Exm3GfsLPMQEWvAmqVCWhP8bw3R%2BryuFmCsXw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ea95b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (861)","md5":"ac763154c645295c6b3cd9919c57569a","sha1":"ec6c1ebe026ff72a7b1588ff08ac5acb27f35609","sha256":"c7bab1e70362eaef1eda0b1acecc8ad6cfc72706f66f8ef2189f406be6cde7aa","sha512":"7378011e2960c6cbd8d4b05aebfd3ef1d71a399eb5bffb8b8693169d96d3af88bc41ceef1f5dda4e8effcd4c46c5e8a2d8face17a9a2bf31d5a3dd2f48a425e8","ssdeep":"","tlshash":"f211ef96f082e3fd66a7184dd69a6047600a4ea4d27d0db6807b15641a6ce0ae20eed4","first_seen":"2026-02-24T14:23:51.27206Z","last_seen":"2026-02-26T17:03:57.833077Z","times_seen":4,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/DisabledMarketEvent-h1nKsvD1.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/DisabledMarketEvent-h1nKsvD1.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"980-yamny25TsjAicdaEPHvlc8BbJJw\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HqEdyIdH19gg8QjVW7w%2BciXk4WpHNSUmogpXU2NUtjTxuP4eOWOYE4Eg1SqXUQDxqCvlzRHwLODjGgXEZZ%2FbDAQYYvq8x8i2YDTlRg1%2Brg%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa2f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2432,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2431)","md5":"cafa2204750e6c428d8d41b6352c085d","sha1":"c9a9a7cb6e53b2302271d6843c7be573c05b249c","sha256":"24de6c529bd7bdafa022cf861a72397ca443c76bfa60e98475c9bbaa32d2ecf3","sha512":"1cf092dccfc5de91708958ba521a58df056c8d34bb1b490e1e12418e6775872817a2e9be50f976b8a0de0f97b09043a52096b7df9b425a86c5d4d384a37efc14","ssdeep":"","tlshash":"df415469e3a0fb7d653608dcd33f1a2a740906b1eb650992d07e0c3d1a1814e751ef9d","first_seen":"2026-02-24T14:23:51.276124Z","last_seen":"2026-02-26T17:03:57.830269Z","times_seen":4,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","date":"2026-02-24T14:22:55.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:49 GMT","end":"Mon, 20 Apr 2026 08:39:48 GMT"},"fingerprint":{"sha1":"94:97:3B:30:EC:7A:3E:B2:6D:F2:29:2E:86:03:BB:6E:D3:C0:52:34","sha256":"F7:5C:51:D6:8E:E9:CE:0B:48:6A:85:52:EC:A2:CA:4C:12:3D:CD:F2:17:7C:AB:07:AF:87:4F:A5:24:CC:FF:00"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Tue, 24 Feb 2026 14:22:55 GMT\r\ndate: Tue, 24 Feb 2026 14:22:55 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"51be8e79b9260dc801a05a13de6a7e12","sha1":"e80403f28cbb635e0a9c3c313b5ba84fec5c9830","sha256":"41ff81f7c2b9fc646dfe30ed53fa8f46458334743830f3e66424de1735b9279b","sha512":"9bc0ecb70503f5ab830a6442b1c7f164370a1f1dd52a133d35b4944ab5ca4638b148688595f0d8416ad8afa0eafc187e9994618fb39a129f5d2e0b46d225ff1e","ssdeep":"","tlshash":"58b012231935cf1d0f404282ca2b97ace002d638db90e0f191240fd897a44a38405403","first_seen":"2026-02-18T03:08:55.679758Z","last_seen":"2026-05-31T07:12:12.74125Z","times_seen":10121,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e62j0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:57.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e62j0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Feb 2026 14:22:57 GMT\r\nexpires: Tue, 24 Feb 2026 14:22:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150835\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455039,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"611d3581db154eba9eed6f2fbac966aa","sha1":"a78b8fbc289e3fd3614fcfb283f88b0a643cbe5f","sha256":"e423ef402aa5f42b014a40b3a472aeb7c384ad27481ec459afc82f40780ab106","sha512":"7452fda28383f7cecf0e76dc7110d464a3d28973b0d08e6b11bd0a7d355a04af432dade7664a3d70a8820e03360a7b2409079d31b8243b68ec2b42392e76019e","ssdeep":"6144:d1mO7CW6y273J5wYygLIR8Nyk7pNH08pddlmOrELkS5fenMcm0v:DuW6y27ADEIR855VrEff3E","tlshash":"4ea41ace73d674269396f078503f018ba57b29a2b44dc89af189cce42d74a5a4237f7c","first_seen":"2026-02-24T14:23:51.282321Z","last_seen":"2026-02-24T14:23:51.282321Z","times_seen":1,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7785\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e07ee28aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-06-06T12:51:01.674076Z","times_seen":21116,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/bookingBet-BkIiazay.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/bookingBet-BkIiazay.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"ed4-JuAEV1waNGxRCuW+OiVFSJx+X5A\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vZwZGj2IdlogpzR7ykn6G82cfIVuljpSWhmotCRp91M1VQz7DRsuLmjXvjNbRaR10Zs9gYS%2B9uqaI%2FWcYP%2BoFtH64oU9G5MT0XKdPwoCA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0eb9621806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (3795)","md5":"ff9453e086df71df36b0074794be5555","sha1":"26e004575c1a346c510ae5be3a2545489c7e5f90","sha256":"5d233e99dd55cbd6c4a6acd81c566dee1cb146166fc41726489d64c6b6a5ed0a","sha512":"309c579276d7680b59861354b688536af34279823f9396e3c5f122059ac7c50ea0b93cf70bf48989a7bf66a9915f7ddf366e722d109c72137e49752c1e6f92a9","ssdeep":"","tlshash":"2a71e664fd2090be67f2317df4de7b426b2c4ba871a19a40fb6b9d0841848cbb534638","first_seen":"2026-02-24T14:23:51.288648Z","last_seen":"2026-02-26T17:03:57.896099Z","times_seen":4,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/InternalDataspotTracking-DB2Ht68F.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-DB2Ht68F.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"f66-7nzjmPMHKKxUpAXaSrEXvMWmk+k\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzYPcSZ%2F7kzSLUm91tvZVOSq8%2BVZGxsDyRRMv%2FXyrlr2QiM6p7gLho7vfkFlfjtgNgr0KZIptzyM5rFCbD7I6Lj%2FaVzPxQ7ARQ%2BKNTpuOQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ec96d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3942,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3941)","md5":"28d8d80edd5ad66eefb0fc684755c355","sha1":"ee7ce398f30728ac54a405da4ab117bcc5a693e9","sha256":"2e8b31d05474087678a43335a1ae8e9257fe9a1a690b7d7fbe36e74c4d12c5f2","sha512":"c7a4ae165f4e0f5bf2b1331d3881ef08b3940022b8a5a9319657b7ede16edfdb12b37f16020ee2bb3ba6f2e1e7a7ee9064c197d5c51b121be530edba74832e5a","ssdeep":"","tlshash":"f681741fd83c08b070a0cad9583bc957857d3cc9a590d8f06037de6a660fe09d6f1a9b","first_seen":"2026-02-24T14:23:51.294039Z","last_seen":"2026-02-26T17:03:57.827934Z","times_seen":4,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-media/storage/medias/galabet10/media_751_81a0a78176aca202a6413bca3746cd67.png","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-media/storage/medias/galabet10/media_751_81a0a78176aca202a6413bca3746cd67.png HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 13516\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=315360000\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 08 May 2024 11:53:54 GMT\r\netag: \"663b67d2-34cc\"\r\nexpires: Fri, 22 Feb 2036 14:22:51 GMT\r\naccept-ranges: bytes\r\nage: 600637\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=7VyazFzBRW5AJ0tD2XVCnSeS1wSpn.ufEz8WcQHgP2w-1771942971-1.0.1.1-MEZgcvci15LqkUBmBBGn5RGr4YNhChBOmzQbx0GaBWw_5RCzwObX6Uk0tgDqXAMCZRbTU0ofy26tG46Jd8IMrFyMwkceGZIAf3.wxIheGkk; path=/; expires=Tue, 24-Feb-26 14:52:51 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enLJoJht%2B4lyKhdz6XJWh7MV%2F7FSMnY3rkY%2F0q1aLVhFn11UW0ws3Yu1nn6ECqh2DawLKMt%2FHtY46hae%2B48%2Ba92yr48q4fuPyWTYXgOopw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e117a031806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 340 x 340, 8-bit/color RGBA, non-interlaced","md5":"9fdfdff5cb870c3f0abb6cc44f262bb5","sha1":"c48fb4dadfa4e6b4de69ec0e7e02445057c7e0ca","sha256":"308a8c0f3d3f9792d26ea2d84bd633ff1f490ec83375b1613d29c0995f8b740f","sha512":"39264153a485e22fbc442e86234ce24863f5bcbfcd47cad34f5afc8715946825fc705491b2ef888295f017d98f393c44fb28428dd05b829327c7ed38db3d4b19","ssdeep":"384:CvHjxbUGUk1+EVWqPDks5r6BU+xND3AU8h:CvFHoEVvaDsh","tlshash":"6852d0f0ae72adf08ab16c81539d8d1e8473de7ea5913f0361f64077e64e40d390a4b8","first_seen":"2025-12-24T22:39:16.288188Z","last_seen":"2026-05-14T23:49:57.339956Z","times_seen":51,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/AiPromotedGamesWidget-DayfNQl4.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-DayfNQl4.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7b0-UpA+U4UCwg8bnUlj9ahgB+a3loA\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltssjrp%2FazIEJSRHSqVbzg%2BDORlhF2XVGgCvo%2FEphEGXUkurOz%2BeIxXXPKcZyZNl%2BrbDOHTduRWL8r0xF350wQPMtEeeM%2BJ8iidf%2B96vcA%3D%3D\"}]}\r\ncf-ray: 9d2f9e11ba391806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1967)","md5":"f60b4a6a3477a15b6c0c4006e622406d","sha1":"52903e538502c20f1b9d4963f5a86007e6b79680","sha256":"7c30e8e112ab68408fd5c004a111993bbda00f5a3821108446d5d76399194cf8","sha512":"353db56b85039292e147537b1f6459435e89d1dd703016ae61743e67f912dfb38f99ac4831eb046f76900da23ce941ea8af8d18c6ae53710ad86927f7af9fc85","ssdeep":"","tlshash":"f1415f2fb01dc97cf36c0aa48294b74a98127bb8d619e0e8b6ef4a11776409d637db41","first_seen":"2026-02-24T14:23:51.298658Z","last_seen":"2026-02-26T17:03:57.793021Z","times_seen":4,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/DisabledMarketEvent-h1nKsvD1.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/DisabledMarketEvent-h1nKsvD1.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FeaturedGames-CmnWY5V8.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"980-yamny25TsjAicdaEPHvlc8BbJJw\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9GaB9LVQeLjgaE4dRhFjLbsnbi60hnE4%2F7nOcskOzNdyRmxM8xjd5kgntrdF6YBchv4Qj3JqXWWimmEZTV0CiPjc5i8RAc1M9L3XyqRIjg%3D%3D\"}]}\r\ncf-ray: 9d2f9e14bac11806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2432,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2431)","md5":"cafa2204750e6c428d8d41b6352c085d","sha1":"c9a9a7cb6e53b2302271d6843c7be573c05b249c","sha256":"24de6c529bd7bdafa022cf861a72397ca443c76bfa60e98475c9bbaa32d2ecf3","sha512":"1cf092dccfc5de91708958ba521a58df056c8d34bb1b490e1e12418e6775872817a2e9be50f976b8a0de0f97b09043a52096b7df9b425a86c5d4d384a37efc14","ssdeep":"","tlshash":"df415469e3a0fb7d653608dcd33f1a2a740906b1eb650992d07e0c3d1a1814e751ef9d","first_seen":"2026-02-24T14:23:51.276124Z","last_seen":"2026-02-26T17:03:57.830269Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492206","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /wc/rewards-main.umd.cjs?v=492206 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Feb 2026 07:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: IozzF04B2G9OZI6CN1tvKkTzOeVdPorI\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dW5aEvYdbwJucJRYLqC5GCxxNfhuS%2Bfws7wAO%2BGYHYWsaaTlQ%2Fyfa%2BAd%2BDk2nPnL7vm0LuaFIWnH6%2BDI9P8E6jaxsvXh36YKl%2BnEhweXoXD8AMje7%2FnJRBlVbOer9Q%3D%3D\"}]}\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 30a448a0dbd4a52ea118d2e64f0535c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: I98cU2oNizI4n4jaZYQ5flYwq-sUzY-4Wtt1_yPEaSynzCVu0sMECw==\r\nage: 1280\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"609f8e6887e1889e72c4e96fbc3e3d39\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e152a79b80b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953208,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35732)","md5":"609f8e6887e1889e72c4e96fbc3e3d39","sha1":"1a137f4ece5f1fcbdd412cbfe382d4d3af7b5fde","sha256":"c1fad91dd5a74216ffa996be3df2737e4d30239784d7e34b004b713b7a569dd3","sha512":"c991d488a6d36de33254d5ea509320fdebb96f9bbdbac34bfc624dda5d1cf3fa3665b1ec7f02b5d51affe3e534e03d4c75a70c9a3181effc79c4a88ffc4b35f5","ssdeep":"24576:5iHlTFInH0lTghey0pZOrBQL89IQn9AZNnHF9G+lTlsREuIA:MlJInH0lchey0bOrBQLAIQn90nHF9G+m","tlshash":"50157d9072567434c3b795b160be050db23c5b027806c698f2bc99ea1fd789662bbf7c","first_seen":"2026-02-24T14:18:16.990938Z","last_seen":"2026-03-02T21:59:07.354611Z","times_seen":10,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":8,"dns":1,"connect":10,"send":0,"wait":82,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/773.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/773.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 950\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Aug 2024 08:10:19 GMT\r\netag: \"d25b1c648ff7da1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 08:04:25 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 368307\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=hsuKTBXRVmIH37DEr8EI21bTkkKu8O6nCw8qpB89pnE-1771942972.8235886-1.0.1.1-ffcLmFJp4HJYG9SCMGPHM6yfD8UXiBf.HwYRq9NLcyGqnlrz9MVwi_05hcQbufDcl5_kmly4KDWwglpTpVfxAFrYL5ZsMyuGMZhVE5P83y8fBVrxrZz3M0WTccdtRU0e; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdYuHTmde2qcEDlCfb0Pd7f4dICPhv%2FoCjfCbcPDBMNifct0fL730WBXIIXkP3k%2FN8uv7v701xwuMsKws9NZWm%2BV%2BPBBOs5mf5ysZ2dP8Ee3ofydlO7Nn12pvUM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29a9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":950,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"860fe5a77b2613708a41000b053078f4","sha1":"6ca86d19c2234937ef63570188ce315a46480dab","sha256":"e8762e088dde359ab29a72a2981810c2bbff20faf46e68d244a21aa257bb34be","sha512":"bb0de33992b3e22ed9ca3b15e08e034740148e5034bc824719f9c6d77b5a4a1f7544759bb9ee708bbfa54dd321ef857ebb2d7f3b0f7cd12df77ea0a5bcb4136c","ssdeep":"","tlshash":"8f11fbd545d1ac75724e4329309b0c32eb3350d310617d01d7cdd9e50ba38b0924db8e","first_seen":"2024-09-20T21:26:21.306617Z","last_seen":"2026-05-23T15:21:21.434706Z","times_seen":382,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/api/public/v1/tur/partners/751/seo/page?platform=0\u0026country=NO","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/seo/page?platform=0\u0026country=NO HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=eVlTEbGpiUVFmhAFHKzSArcn9sMTIhOivN3PkpnK7Ls-1771942970-1.0.1.1-l3cD74fqLBzqp.Sh5W.1mhWYQPvrrHBtTG32TH6GN5st07RmexidBdH2lZEwYxWXfLKmnNgYaWxAUbEgtyOi3udv5Of1oHAraY4FTwFMvOo; path=/; expires=Tue, 24-Feb-26 14:52:50 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7IDACBWsftIMkz%2B6POgbHeEHqfUeZ0xjd89yzT26hIHn4m0EM1%2BGiFcU0bn4STGODmNXD453aJaZgbIBdhVmxPuU4e5eZWhiIHVyU2pEg%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e0e794f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7671,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0c3cb355e0745f8d403e214af1595e2e","sha1":"ed786d0ae61ad6adce28150c04a932c4e9bcd6da","sha256":"2b7c48aafa192476fcb639519893f40c28c1de98bd5e66b84769edc55b047be2","sha512":"1c1840626aba24469d43e66cef0893e9627c25afee6ab6a955e6cebf21946e2cf3514c9587cae3c5815a3b7b5ceabdb18cde0fc4b6d5cc52e798e14c7c456b62","ssdeep":"96:E2K/6TXWpoS1kKXplSunUVtRQl8bqOHEyj7fuSE3Ytvkeu5Jbrt:E1yTXENDplfnUtQyDjJE3ovy7bJ","tlshash":"76f10f0e37962d9f038a5fca29564d3c4fd55386fe41a91c8d63ce1e2bcd278d22ae01","first_seen":"2025-12-24T22:39:16.082152Z","last_seen":"2026-06-03T04:20:31.887932Z","times_seen":73,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/bookingBet-BkIiazay.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/bookingBet-BkIiazay.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/DataspotTracking-BGnsxVvd.js\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"ed4-JuAEV1waNGxRCuW+OiVFSJx+X5A\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F6KPdSXMPwvx2XXqyNP2eSVIFioCeh9H6I01eanmjHP9DM%2FN7HHBvR%2BUlMd66NenxSTWmMYpHUrXkzZYU6V22LSXx2ja73nrc8ShO7kgMQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a171806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (3795)","md5":"ff9453e086df71df36b0074794be5555","sha1":"26e004575c1a346c510ae5be3a2545489c7e5f90","sha256":"5d233e99dd55cbd6c4a6acd81c566dee1cb146166fc41726489d64c6b6a5ed0a","sha512":"309c579276d7680b59861354b688536af34279823f9396e3c5f122059ac7c50ea0b93cf70bf48989a7bf66a9915f7ddf366e722d109c72137e49752c1e6f92a9","ssdeep":"","tlshash":"2a71e664fd2090be67f2317df4de7b426b2c4ba871a19a40fb6b9d0841848cbb534638","first_seen":"2026-02-24T14:23:51.288648Z","last_seen":"2026-02-26T17:03:57.896099Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/gameDataProcessing-DtSnCvbE.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/gameDataProcessing-DtSnCvbE.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"4382-u41P2DOupfN44r9IUa6Bn4qW8sc\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cU1F0wlJJRnD8AdAbGVBXtplenl8TE7B4WRAEkNtkC3YtXAcHUkJDh8xvigxrgpnqX06TTiDBCFAF4YB4OyFavurMvQ%2FtXRVLxvJB2ZxhQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa321806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":17282,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (17281)","md5":"dcecb2abe07ee9dcecc6f662e238bc7f","sha1":"bb8d4fd833aea5f378e2bf4851ae819f8a96f2c7","sha256":"c5a8f4dbc771b4c88e6f971277095f148539bb64a22ac65dfda70aafa878b60c","sha512":"8c7ec6fe241f990bbfddfdf77be07986ab02525eedebc159e614b1c19988df95932d3b1d854f3fa73b3077d14215f91339822ab543e09cbe89b47adccff7cd27","ssdeep":"384:WwphrrZxhxlVz12awqhvT7vsB4Pzendc0aw5K4A1nV:WCpt7ve8Q/AX1nV","tlshash":"0972750b8a024c52c97e4639c0aa15f1b9781b32e8b8cdd11a655c7afb5fa5b31e1738","first_seen":"2026-02-24T14:23:51.212877Z","last_seen":"2026-02-26T17:03:57.951321Z","times_seen":4,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/SmartMarketEvent-CIsZCpQX.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/SmartMarketEvent-CIsZCpQX.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/FeaturedGames-CmnWY5V8.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"323-72zIQ/YxcmEEcwD4YQB/NBtjDF8\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dqm%2FjJC10KZTY6Lt1RpKPuoMeckQi8ijsss7vgbfV58w3fJj%2FBXr%2Bc1j20Uuq8KjexiuRa%2Bqgli%2FwJnuursFO3ihZmVefrevbXk4Thq8iA%3D%3D\"}]}\r\ncf-ray: 9d2f9e14cac61806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":803,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (802)","md5":"f3521a316d53fa50c2e0381363feea63","sha1":"ef6cc843f6317261047300f861007f341b630c5f","sha256":"9a19b1d16ffc3ae168cc81796555a5a30f33875120447d64b6e5bf0d1f1cc0ea","sha512":"cddae7eec47f003557983c216afce6b7c676027eaff33b7433724e29a41398528363ed9be78486b068174c44719c49ed394238ddd2e816b53e04addce34c096b","ssdeep":"","tlshash":"3401d0a6e85172720072ccbcd2109b43961812d3cb710255dddf8aba7bfc86e939df19","first_seen":"2026-02-24T14:23:51.208759Z","last_seen":"2026-02-26T17:03:57.767639Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__inject.js?v=1771942827176","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:48.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__inject.js?v=1771942827176 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncache-control: no-cache, no-store\r\netag: W/\"119e5-oCJr7HFKb1y7bnwCsy/Me8bua4k\"\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5yid8UD9t05BTxfVQWjtyT26wdYJlfVnMaedUWmWtpQg78nLr7G1zdjrkpE9Qri5vrNLGByLR%2FSj3CUwreixVodOD2epwbcbWW4riBqK%2FA%3D%3D\"}]}\r\ncf-ray: 9d2f9e016ff41806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72165,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ab9e78585cc4e26cf2f5610f2c57aea1","sha1":"54725b928a9d681d6ea6e5ba9c795c0d063d9b6d","sha256":"8c633ff018bc07f707d5067bef395dbe0b9f8582beb090120ab982f3cbc68f42","sha512":"6fadc20d8222955bb2ddabb96d0189aac73deb8d8ea53d2d40aa319fa9a48993e97e97b8769bc1f0235705082a6c97f5a41efa7737cb891e371c000ddc2b494f","ssdeep":"1536:oQMg8neFTFcFuFeruVTkQCwGvPjwriA0xA:oWpa+","tlshash":"2b63a6487ef262b2577ba2ae2787b240753240031006ee517fec47246fc6a6dc576bde","first_seen":"2026-02-24T14:23:51.303434Z","last_seen":"2026-02-25T02:34:32.621886Z","times_seen":2,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FastTrackTracking-BNZErIta.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FastTrackTracking-BNZErIta.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"52a-ID+LSbOKIKNMAl7iu1W5dkk6c+8\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4K3sU7WbcTrfgrhXgBdDN9qZCu20QEdYVLIla5l7bNlNRRgV9%2Fu6PvZ0GoR9X0hr2bnK%2F9mviPogPrAARNTANTeY5ZRncsQ2YwjBiqsHTg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ee97a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1321)","md5":"1861326333be5ba0826cb14fc624519d","sha1":"203f8b49b38a20a34c025ee2bb55b976493a73ef","sha256":"51bf4e13eb7ae22577f81b7802fe6f66aba230e326f393a6593af81d306e496c","sha512":"8b7e06061c38400895b375cbece5a404410a986df6ad8dab6b4625d6bee1d6de78743cf69dc89fef75ca29971ab2b267bbefcfb468156737f1cd3b6e4fac0edb","ssdeep":"","tlshash":"1721530f80d443b478804d8da3dba261993e9975711ec4e1f07a0bad3f0ca66839ac97","first_seen":"2026-02-24T14:23:50.96774Z","last_seen":"2026-02-26T17:03:57.835165Z","times_seen":4,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/BetConstruct-Icons.DLLrZMEM.woff2?k1tr20","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/BetConstruct-Icons.DLLrZMEM.woff2?k1tr20 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index.BJU6hB4z.css\r\nCookie: TawkConnectionTime=1771942970679; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 410880\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"64500-TXRJNW/eGQbudfa5Ph04QnpdL4A\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIfDaHBjLMGT%2F2CFCO7iNra9CLj1gD8FE3ecnJv%2F8DGqemrpLbDnFKvbNmoQF6nbC8aSViS2%2FXqcr56sSJ0Lm%2FJFTBnVu8hUPknXN8qR2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e0ef9831806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":410880,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 410880, version 1.0","md5":"50333f7bf6e57f74cfc4bad94b8a3919","sha1":"4d7449356fde1906ee75f6b93e1d38427a5d2f80","sha256":"38f81389d54f3960e7415972e6c29452f3d1e855f3789c9f36c3d3fcfaf3c477","sha512":"10a55137d6af7da3f66c8533f83143a64a9a1edf449720206d3cb53f417baabe0d4d8f40d58bc0f167c1ae5dc6adbce66fab27b2aacb2b8d65619425b7db47c2","ssdeep":"12288:q1c9gPSuZsDVyj9vyLzUU1ZLK9wG9OAAwic:X8SiCzXDLZDZc","tlshash":"4f942308d64d945db9f1bc30247cca91af8b4a6454e71166cfb34caa3378d0b2ad9cbd","first_seen":"2026-02-24T14:23:51.305322Z","last_seen":"2026-05-19T08:20:26.275015Z","times_seen":49,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"79b4aa69d45c4b43f0b31fd971b1bbdd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472751\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e18e9f64453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79b4aa69d45c4b43f0b31fd971b1bbdd","sha1":"77122463966366aaa969b55f404af7903b9d8f86","sha256":"34b9a3ffbb7a87b04fe51abdb665588b82d1e5fba4cad27b6d6518228d20c2b5","sha512":"6bc666c4e89838ba9d62ccba15b642154cb69eb86ac22585e64e11eb0bca2ebc710c3c5cf8993a99aa85035e1ae44d566601f6b7649e7d92fa3d72a2f53f252f","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY7dZPkx3u4V5pfYMrlSf:4nmuTilGhmPx3u4V5pPrlSf","tlshash":"36a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-02-19T03:13:10.618029Z","last_seen":"2026-04-15T01:21:42.737131Z","times_seen":8426,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/1/3873.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/1/3873.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/774.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/774.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1287\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Jul 2021 12:55:58 GMT\r\netag: \"53e0936b9d7cd71:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 08:04:25 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 368307\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=QkXh4oK6qFTx3Mj9GcJO8j5JeWRW.U9GXZr65y5Az0E-1771942972.827086-1.0.1.1-N_MvQlgmt4CfZmDRMixFAU2SyT9Usbu8wrBEO3Uh5u6Jnhr9IUcbNzJjrqohy6KJevAQIRczfbr1iFgth_Y6ZwpMlWc7R8dIUyNCNm2NtcN0sEjm0dpXvhJWqgJpdELg; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aaIPK%2FAEeBBbjcIVXzYIVott%2BFMDqyLJqX46V33Y8yiOpo8m4iXMvEK%2BGKGQWtPUE2SW7dc5pRPJMXisaj%2FzXHYFzKJ31Y6YdOP6%2BwgZ9xqfE%2FGnAlLwH3kirX0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29cac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f2f8eeebb1cb3098541e1bbb2d122360","sha1":"3ed07ed88deaa58e9f17e34a1e1ab54e935b6ac8","sha256":"4b62c5998e916e1686e853b3da3d09c9a0af007664ac1198c3f37133281ab174","sha512":"64821a6ed8f8c4ebd89bb796d578b332dd908052931e549069a3f9670c97d85f3768c2d74ed0725009db9281942af8ec393dfd19ad8dd80fc429dfe3fa32638b","ssdeep":"","tlshash":"2721c8f312c0d478c5efd038ba9d04ce62534c7e1592a47c3d3fe1959129b843288991","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-05-23T17:36:46.207047Z","times_seen":534,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/pageBuilder/pageBuilderCssConfig.json?v=1771942800000","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /pageBuilder/pageBuilderCssConfig.json?v=1771942800000 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QFtojOuCwHXJEaEe4yDUpRHFNYgdertoqNQkVpeGcO1UkS3Lqbtd0PTgEBE3rPXk5rZ7orpLbk9Vze4Ku2toD06%2BrUVDRzbeVVxc12THw%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"115-/4ZOdO5b3KpOnXEwZOyebX8afDM\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e06a8681806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b840efc6276e4fd17616273698453549","sha1":"ff864e74ee5bdcaa4e9d713064ec9e6d7f1a7c33","sha256":"01976b4e4832d5fbf632314e6b12424691dce201138109710061a398178dad89","sha512":"35bb7dc6b4e44da9f15700eeebe04d122ddfdf41af0834f0329169c0fd98d3a9de79ca9c879d92f1727985ca07ad519870af961ba75a865a898cdc2d5035fd6c","ssdeep":"","tlshash":"c0d02b119679cf52235a51b2028becc1641bf207118086896485e2bd70c96581993f24","first_seen":"2025-12-24T22:39:16.255341Z","last_seen":"2026-04-04T19:51:35.016652Z","times_seen":24,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index.es-B9MYE6-3.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index.es-B9MYE6-3.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"48144-WeOErzKLy+DHzlJSZ5nisPERz7Q\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5I0DcoeypVWExcyrV0Xmd%2Bed7qFjtq%2FzU01ZwaROowEqd6OM7hVFHJDbT2H9sDHJriMKnu0%2FOaiA70fQv%2FKDBJlsn6X%2BJx67gxW3kB6aoA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0cc90d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"a71206a48931c8ca241fd0483be9917b","sha1":"59e384af328bcbe0c7ce52526799e2b0f111cfb4","sha256":"4fc8231f3b89b71260c8ee9fd5a048df864e54f3e54f968fa3bf7f795c8d73dc","sha512":"e35fd45c940d6d6898583f6f9a0582034184f1a392fa74f9fe38e9be216d64c27db00d61de5e9d2dfa06c8a137f911000103f9bc2e4452a39be41745f27501e3","ssdeep":"3072:fzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6UGh:fz77jdU/7sJJMcvYisoljSFN1Nd6UGh","tlshash":"3b54fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-02-24T14:23:51.310714Z","last_seen":"2026-02-26T17:03:57.86364Z","times_seen":4,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/X50Wheel.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/X50Wheel.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Zu0gTEwaZGLAlXIHKsfW_3zkxGU9909XLBYej6ZYHFg-1771942970.6868777-1.0.1.1-8Jv8cCxUqnKu3IRKH.AdV1BHP3yR56zTXHvPWN0S1FIQZNpRvfFQ1tgQIDGGDVZ3NfMeiHpydZGWQfyKFnwLuEUo9ORWCJlcbOwYxK.MK_MuYDdOZtV09UJld5OGQN7A; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZSg8NSSsbDtnLSr2cn0ZNy08wad85Hpec3zlAtVWZFJzbmi8bwMGVWhGq%2FRVFc6Ihf0Ye6kA%2FbrT3xugPDD5MHDQYL4qnyyoKmmzjZgWrKpO6ammA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270a1-65a\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ec8e776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6a4e68d64ae400253c8553f277334db0","sha1":"9f4421a8ee6dbd94b15c62098a2808e7a9df443a","sha256":"c7d0844a8e2c9ee547a4b9c4927823c95fca71407aab9cfa85bc1175c01fc1e8","sha512":"3472f7072defa5f4f70e595969443c4310d2f86be210449dbebb88defac139a9bd68503f7cefce592b93b10f0910846e815b72ea960c2809326f390e1c0566cc","ssdeep":"","tlshash":"ba3122f5fff1ceb64c9413bf3a148ea82595c02d8e618b58c83a4d98215383c9f502aa","first_seen":"2025-07-09T12:38:57.780257Z","last_seen":"2026-05-19T18:11:41.346853Z","times_seen":162,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galabet2647.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /configs/d212f7f1f16e55d50593214ba05a0f99.js HTTP/1.1\r\nHost: dataspot-bucket.galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z60rdPIFUMscY6j88Q2Gf9lQ2kZx9TWEjcwWm5Xd9HRl9vnHw1oltN4%2BKRdqJOC3mCiRNhtl8ROxq8H64TCDelAK9QNcwzzy2D8ZktofjquxvssDNYD3wK%2FCCOVnmLk%3D\"}]}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-cache: MISS\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e134a851806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"dataspot-bucket.galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://galabet2647.com/\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-served-by: visitor-application-preemptive-rmvq\r\naccess-control-allow-origin: https://galabet2647.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d2f9e080e68aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/TvGames2.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/TvGames2.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:31:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=E_f2iY.3yBP.Oa_PWweyMshssvWL9eciVEccXPNkfqA-1771942970.6906965-1.0.1.1-gMk9Itnmn1MSENTg6758x.6SlaemCnd5OxhIt101BuAliWongIiwaLuS8YGNhFuZKL_Sh5InXW_nvgw2QdiN0DbBMkti5Q14KLUK._n8QYzOCICUKY7dgGHUWlY0O1qL; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5AssqDPqm8F91C84zHWmczw7kzHVBzYKYOuvL%2BlFJ%2FDi3OE5DOd%2FHNvjFBIyer%2BMzkErmSrZuJ8q%2BlUMhetZkLcV39%2BOQj1jPiOJHwowLak%2FdfxdGQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68665beb-8dc\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ec90a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60d24e57914ca41e702277a9ce44e813","sha1":"bfb08c8dce26d91b1fdaa008ffdea07bc100e0c7","sha256":"144a8bd1616f38a95bc6e7f59283e462f358a2dcf79e10cd7bd256d49e6e4134","sha512":"43503c3df559cc8b5fab3dcd299f5dbfc8d5a6f9dbd458781c53a409d859ed730ffc24420d462b914b4ef96f1d63d9bb508ef733bad33edadc5a2d12b22e4eb5","ssdeep":"","tlshash":"7f4165f9efb091f46dd94fa9ef324cec750e68fd9f220a84812c861c66a3d94d644410","first_seen":"2025-10-09T13:22:28.980997Z","last_seen":"2026-05-30T14:05:40.832602Z","times_seen":72,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/SystemBetCalculatorContainer-BmSNbe1d.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-BmSNbe1d.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"378-C6Zo3ldTKpnUnpq0AXY/6IvtP7c\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErMiqVhigna4ceznLsknJV3KmeIiGk%2FYIJJcZE7s%2B%2Fkk2PDdfIj4k6LhfdPl31I%2BXbU%2FULzjPerXMd5ftTPJ70H3EyOQ0S450mC2z%2F1BIw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ea9561806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (544)","md5":"690145235a675d77bd5d22c88fdecc1e","sha1":"0ba668de57532a99d49e9ab401763fe88bed3fb7","sha256":"de4489e163ab1a989441ebac43016178c8c04ab7a9915ca5bd58da750b0c8caf","sha512":"e788679931673924ed51a6cf036cf5edfce7f1c8f4d6c13f36176b4400cc89b91e51b0355acd38c7706775f1569c52f84f6f21a06bb9369eeca5ea85a3957593","ssdeep":"","tlshash":"a1119c539718ce75848a0f660945a0541db54618a918f668b6e58c3cf51408387fffbb","first_seen":"2026-02-24T14:23:51.314888Z","last_seen":"2026-02-26T17:03:57.912547Z","times_seen":4,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/withPanelButton-h06qeZmb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/withPanelButton-h06qeZmb.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"441-LWBOtd77nT3oKQgrlf/bFPUt0tI\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KOC0oKjI88qgbioib5tjoN7nRX8xgNMBPhmQx%2BbGtivBRv9LFIQAjpFOfjUaDBx7wUPX9JPHu79wasbmvgAecmjldQCyoW7w%2BtHQwpYhQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ea9571806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"dc9a073bc116168bb1ccb3db6362b167","sha1":"2d604eb5defb9d3de829082b95ffdb14f52dd2d2","sha256":"b2a956b6195a69a32dceb99f54f6ed7835b54ec4a5c855ca7bdedd26536e97b1","sha512":"05c7a6f302c209e94029ef151d80b3ee05d9d20e6398ec5a3515584fe9bdab6cc7a305803e23110d3233ef57f2925ace9d82d67f74be4b530563b2f9a809fa8b","ssdeep":"","tlshash":"5311fce5f584a9b2e0c41188577b2cb6759a32c9dce114d031b6c8ea5fa80489a1e9ae","first_seen":"2026-02-24T14:23:50.979064Z","last_seen":"2026-02-26T17:03:57.873198Z","times_seen":4,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-E_Qw-LwW.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-E_Qw-LwW.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"173c-gZvawifXu22PBlRooPZe1ml9MTI\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqDNznbKngO18RX8lDKpTPdAkP5OUyhKxUaTI3PpJxuEklJk8Rzw62GT7NQfMsGLiryWh75C%2BZhRVui2DL%2FVBZLY4hxiiSXgLPXMsPNAvg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0eb9631806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5948,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3085)","md5":"9a5934fdbf3896c23908942c6ec28e8c","sha1":"819bdac227d7bb6d8f065468a0f65ed6697d3132","sha256":"83fa3f48a7e001a7d28471b096a8806e83653854e7aeeb15c4dd979cf31ef3a4","sha512":"5cc79da26050a6c76f22fedbe2e38373849eb51337ed406c5d035935c348268dbd172717a209a97b8388223f9c8dce07018b7ccdfa043716b518ebe1fc61663e","ssdeep":"96:q1SCtCFV0h7FhpokS73sjlsv2InwLRiTvHUgAaQKFJ0FdWpA6u6PEDdxrOq+IHWE:J0ljijHvN0FdIuSEDdxP+Vj8Eu","tlshash":"ebc1a65631907534c6d204a6914f82aeef3e7638f00f50a0b23f9c6d3ba1115daa3ebd","first_seen":"2026-02-24T14:23:51.109809Z","last_seen":"2026-02-26T17:03:57.724952Z","times_seen":4,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Firebase-DDwvASrY.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/Firebase-DDwvASrY.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1487f-/z5cCqa8JLUxtPY4ZG1J440v5IY\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2yRBMYgDL3ptqCfv6Y1kLOEajWcaM%2FhIzrLQRUbQSwIjHdwsKY4L88Eb5XjR7o3VCoIsadEmWjWw8i1t4hOvLgRoGmItoRJ%2FL7CeAWBJg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ed9711806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":84095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"7481cf9dd3ef4629e43999506ee69229","sha1":"ff3e5c0aa6bc24b531b4f638646d49e38d2fe486","sha256":"5dddd0ca4c525657b36e3b4310620f8e3a581c1465be6f5c21c7d32ff6f6200c","sha512":"4f04b6e31a72b4a72c9fba82a07bcb57365c400ced0fc7a49f453812edcf2a3d36da72936d9f2d5f38c08e2ef99d82c5313d827e582591f7f8ecd7f18d29cf59","ssdeep":"1536:V4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:Vs1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"3883957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-02-24T14:23:51.31641Z","last_seen":"2026-02-26T17:03:57.82728Z","times_seen":4,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/LiveChatAdviser-0F1bzkHq.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/LiveChatAdviser-0F1bzkHq.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"35e-7GwevgJv9yp7FYj/CKxayyfzVgk\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f0W3R1ybepGefW74FLpGG1lXPszVYUmg%2FL87D3fTbZi%2BlbxfNRvUq2WPdg9kMQd%2B7bCFgYyYdr2O57Bvx%2F9AE9wEPZVqxN7dWAnCAK4H%2FQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ed9771806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (861)","md5":"ac763154c645295c6b3cd9919c57569a","sha1":"ec6c1ebe026ff72a7b1588ff08ac5acb27f35609","sha256":"c7bab1e70362eaef1eda0b1acecc8ad6cfc72706f66f8ef2189f406be6cde7aa","sha512":"7378011e2960c6cbd8d4b05aebfd3ef1d71a399eb5bffb8b8693169d96d3af88bc41ceef1f5dda4e8effcd4c46c5e8a2d8face17a9a2bf31d5a3dd2f48a425e8","ssdeep":"","tlshash":"f211ef96f082e3fd66a7184dd69a6047600a4ea4d27d0db6807b15641a6ce0ae20eed4","first_seen":"2026-02-24T14:23:51.27206Z","last_seen":"2026-02-26T17:03:57.833077Z","times_seen":4,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/InformativeWidget-BAwOKhPq.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/InformativeWidget-BAwOKhPq.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"43f-vAppp6uZ211eglVg1BBFVnEyye8\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YfRORZcQpWHorl%2FmrCDj%2BQf2PcNUufICNdMWV7mvd5RMdVmEPnmFXIkXMIUePm2q28gw3yEDMUaFKGNwhDsib2k7Xzns2%2F2QquEE3c2ZKg%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a151806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1087,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1086)","md5":"bfe68e52383a846bcc852d13693ec99a","sha1":"bc0a69a7ab99db5d5e825560d41045567132c9ef","sha256":"ad6a0e54fb28450de78b863bf168d8664be8ae14ffd118032cc0dbb0aaf41642","sha512":"bbbe591918823d2e09b2fb24ebed7a12934e6d15f40e2f5ffedbf4eeeb766157ebf3346da3b0bc7421b552d4376106ca98b5184aa01a99e89893473d5889a48a","ssdeep":"","tlshash":"ca117947f550d5bdf0354dc44616d0946d212dd4df39d4e998f57008a83410bb6db7ad","first_seen":"2026-02-24T14:23:50.926006Z","last_seen":"2026-02-26T17:03:57.765598Z","times_seen":4,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/tr-DNMx9v2O.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/tr-DNMx9v2O.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"5b3-59/33iOLKMEO4likL9vPTINhKcE\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74FK45tQ6536uNcLqVE%2BzJtxDYgxlM02Z42iyzqwIJJL8xsudb9owVgkOTU8%2B5tr5MrUSvjZAykdMpgmgYIL6b3JIqnvGii9j%2FI4KwLRdQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e09d8b51806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"1fd777bf8093133bb5a1287bbc2b7a38","sha1":"e7dff7de238b28c10ee258a42fdbcf4c836129c1","sha256":"f3d64453462e4b3cab922024e5433aec52a85ebc8ebe805bea754142a074d3bf","sha512":"0101e21f6937710e2cb6d7a2a8a3c486e1f5551d293e734b62f283fb4651091180358049a6e655e0e2d63048a7a40c5c2dc71b78f41ab1286d2827a266e91707","ssdeep":"","tlshash":"2431624d2906eab2870159878c2f5f44f80d6a087136f5659be4d461ba709ee807eb3e","first_seen":"2026-02-24T14:23:51.318307Z","last_seen":"2026-02-26T17:03:57.781582Z","times_seen":4,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-media/storage/medias/galabet10/media_751_e36e767f918c2e0b1323c581778f3e42.png","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-media/storage/medias/galabet10/media_751_e36e767f918c2e0b1323c581778f3e42.png HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3162\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=315360000\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 09 Oct 2023 06:12:46 GMT\r\netag: \"652399de-c5a\"\r\nexpires: Fri, 22 Feb 2036 14:22:51 GMT\r\naccept-ranges: bytes\r\nage: 421971\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=W28dYh25MtJs2T.Jirlx3Zi5rsEiq2A1x5BfwRaffRQ-1771942971-1.0.1.1-lL2TLH.oTFMNwgJYuXrIUHMzO6XZ1SAYsidHb9vCmYBX.a9aWBu.2yqbL_EpVcyjMKKVNQUJ.6jVdB90BFektw7BeJGAy.EA40YLBFENUjA; path=/; expires=Tue, 24-Feb-26 14:52:51 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOwVbrrc0rY7D3qRgIN%2FfwpaxCSOi%2Bv7%2FAgeBxW%2FqTIGXe2ZI2D7ViQVa4nZo07waMNVWY9dnNn%2Fg5SSiV4b94AfTFPyZWxTwGJV7wtzrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e117a0a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"6b367a99bc86c352b5f45eb76ef837d4","sha1":"18d9b34beb5b22f7b086c4f803e6f21a95c3d22e","sha256":"e54c8f4ed20a3052a3d336f6084e083fb5c040aa67d85c170f0380ed0a74b75c","sha512":"c616fdbcf246d21c51373417c69af47c207bc8e6f36d4f3b3c53b83cbfe41bde4562cb147087264c68d1133c7378f477be104e8ab5c3927f7ca732981416c8ab","ssdeep":"","tlshash":"e8510af5f108241fc7a4c9721d59e0d3bd6af44e942d998f70a0d71e343b0a9d1c6966","first_seen":"2025-12-24T22:39:16.355284Z","last_seen":"2026-05-14T23:49:57.535231Z","times_seen":51,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_0670e1e298db4e3676c189eae3bf7645.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_0670e1e298db4e3676c189eae3bf7645.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 174590\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 11:33:43 GMT\r\npriority: u=4,i=?0\r\netag: \"6995a397-2a9fe\"\r\nexpires: Tue, 03 Mar 2026 14:22:51 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=.62tuKGvBfjQNcnd00bxLtOdi42Cud7tqyQZKssW5uM-1771942971.6277199-1.0.1.1-JMGD65ty.0PLxoUSwfNOGFjg8SLJl6dvU2OhYJKoOyYnInc.vWjbjI8STXG2cRJq.yVZhLFaqYUIvy5Qp3UqZ2Pb9.WWBUfY4L65FHs.zIXVV9s3dE8FhazVAD9Qg9JZ; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJ6CZPU%2Fey%2BQurDnSjDbqQMc3CbMZp64fW887KKUGm0lPx48YLpncKLC3NZ%2BNMXz9iw9qN0AknpE4J0cQayxWPZ25h9CG7M%2FQDhDxKaHcbz74OrYSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e14ac882efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":174590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"99388d47d1982024e2f2f097c808dee9","sha1":"277197d758908a3732f728a80c9048b3807db603","sha256":"74875b31d103f55d0c7d90e1c78d2173afe25299d470fce8a4b6343fe218a29c","sha512":"7e6a8080ce3447e1798e68f5e65726d16d3b7f68a9c244fa6bd0222d766f24097ca8321dcfdc1fd27d4f98f31ccf3d18e9dc352b1adc3651d371156b2c449c60","ssdeep":"3072:CSntruqJH6zGWJ1rTex7Yr1S0A5uZA//Cu6GkCf3ceozglZmcsC2JHSmZokIE:CShu6HiGWjrix6S0A4ZAXCu6xC0eoU7s","tlshash":"e204133a97c7451f0f2e65fd198d60348bb85843299c7b28d82ff16797d0be0b8c4a46","first_seen":"2026-02-24T14:23:51.320746Z","last_seen":"2026-02-26T17:03:57.983564Z","times_seen":4,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_7a00a9ba3ed19ed581ac0d151250f19c.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_7a00a9ba3ed19ed581ac0d151250f19c.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 149710\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 11:22:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6995a108-248ce\"\r\nexpires: Tue, 03 Mar 2026 14:22:51 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=GxAPfFeJLifzcBpyFj.TOUc56weiR8AGy5oFUvbZXfQ-1771942971.630131-1.0.1.1-lAYECbLLdzqCT.o.R11GiWbHWJXg7s5QXS8e60wMZ7L9ga47zVgFas42zUg1kI08KnrKcpFd8U0InD9nBOu8iQXVKN45fenx6Ze.ir2vbLmmOLHhTLdoR_gACiB1pTBt; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNNEw1v4OVCXFFRPw5GdqIv7tzFX%2FmRx75IbNjVxAHlnXjpoHHwilupknepzJ%2FwsDg5hTBVdvETHe7C2PofZkpq9hz9pQhB2vhGNuLAQfqOBBy32dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e14ac932efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":149710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4bd3b06b62de9f54f88de72e421482f6","sha1":"800cc09c853c7b79b30b368e1620a4b3c1d0c006","sha256":"f7ef74951567cb4af32eaa15aa9ab19facb45cf8ab31c5de1fd6905ce5e3bfd3","sha512":"ceff09e932f0f56c87a6532c4a14db3725760502c76e80a4f563ad0728ad6a1e84125047e9063558b466dccec6689f99e680c20a2afcfedaff168b2d539a2cf5","ssdeep":"3072:dNgHge7Ttktg1bCH+QcD0SZd+7JNblkag7fymaY/6h:dYge7TatOvDSJ10ymaY/I","tlshash":"68e312720224b71997d93bac586c188c888b7d892bfa87fbb3bc5d059741046491b3ff","first_seen":"2026-02-24T14:23:51.322196Z","last_seen":"2026-02-26T17:03:57.857502Z","times_seen":4,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24730\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"694014ef-609a\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=Dp4gP8Lxeq8sHYSasVGYnQi2bduPN23dW5K85auV7iA-1771942972.1056018-1.0.1.1-igax9uhEkNBOcI_j8GTCLYqAZEi47anVhE45VojYGk64Q2BuqYAHRDwWuiC7nU400bFNehNtLfWKdaHon1LBKgOOh_fptV2A85eDq2TdVIeXxvx2UpMnd6azfLx.3zAz; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXvma7qm4H043adnTuJrUgmEpWxstLxpVmFPb%2FbwCO0YjmJZc946Go%2B37N%2BC9d2faZEf0dWgiiJqvx8lweQfe%2F%2BFkwo6r4F%2ByMD7DnF1HUlfA5eFvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17ae542efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a684d3e1bc93c1bd3a25d9983b83c43","sha1":"716d0144a9feb5a701d5eb48133f155c97a47946","sha256":"8b8e3b62b691c235c3aa5aa0ca6bd0eaea4a188271006aa9b8fdff49c9a06f94","sha512":"b66cfd7a78af400a5375c747bd08f6d230798eca3fb7fb7e623a10694901475ffacc21eb5c6edadbecb1234bb751d2c62f06eadc0192731abcb5422d13d18980","ssdeep":"384:pFhktnLa9HrvO+y3t9oDMTjRsENmQFyUzDm8kNRfxv/xvr5c8JPH+UlX:etLaZ/sPj3NmQ7ToRfx3lr5c8JPH+WX","tlshash":"f1b2f1045efc293755f843d01dfcee680e5441af12980c20814e77f9faa9a3ba81ea5a","first_seen":"2025-12-24T22:39:16.21561Z","last_seen":"2026-06-03T04:20:31.835501Z","times_seen":63,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/1527.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/1527.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1500\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Jun 2018 06:50:18 GMT\r\netag: \"b0fa84f3628d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=oY0pwr9qVodbU2o_86jKMuKSkHmhBtiaQyR7gCOr0qs-1771942972.8061752-1.0.1.1-uanzKnbM3oxlozwDIFnTstSfX6He6RxKfOSL0nvcdS546NvJqyayiggiSQjqdes5aWKCN1r8EIJYafggykUfhk0dMpJD60vpWQ1YnRc9tEXP3yOMUG5AFOKwwDYZhAr4; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TbSZGNkliP7DISjD4ysgqNu3RP0BDbyGF4oETOOzIxbADAfhJNoi3xtSM4BxAdRxczJI7iCBGDaxcVwjOm%2Fqi92lY8rJgQV5SKQxF3auzapvCIJ3FRrkNvl12IM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c092fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8d6c380702ec315bd82d1f40b7dc2b7d","sha1":"cd089b2edc8e67b55e5fd80c939e30ad700bea37","sha256":"6e40cf876e1637f39ffda9cbb0b59d65d2cba2a39d6e4b2f6d02bf2816ef6588","sha512":"d39fa977046e0d7de05d975326850da8b0cec4cd1a59d15d40cd9664148a0c9e52aa79946eeac13887de69ed44c6a87fcc1167644cf5b5b73cfe4b4b76bbb2cb","ssdeep":"","tlshash":"6c31f9b23bc4fc7cbb6941f26db74429f300983a85539c7f8955ca71438870b0889787","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-05-16T13:14:11.741525Z","times_seen":161,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: \"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 376796\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e1deaa54453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22356,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-06-06T12:51:01.652714Z","times_seen":36572,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-nSKS2CxE.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-nSKS2CxE.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"35fd8-2G7tdjadMtACtmpJfgrzIcNerEE\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8R5vArUcfdmfnfoW8oFUPfzbok2f6%2FNUgh%2FsdI%2F52%2BXkiemNJjWMyO5b9k6t%2F2QKYVxYvxDHUcrh3z4d%2BRU6T7ixK75atwkycJbNxhktQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ac8ca1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"37c4c49a4145406837780bbb7247a394","sha1":"d86eed76369d32d002b66a497e0af321c35eac41","sha256":"b6c086f2a21e2899b76a9393b869eb8a6703f59eeda23f3d5fd5971673288ea0","sha512":"b9f970a925bd992a373a452ffef7869ebfac3e8770a1587c932a88435d4c2131e18236af156b0aedd5da7a9cb77ea64b0397d783b5898b2efbdea01f249858c4","ssdeep":"6144:YfeL9y0h4R78o8e4YQIALoh6wj9Sd51jjVvFahIRcDGRD6On:YmJy0h4R78o8e4YN/j9e5xahIFROQ","tlshash":"23240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-02-24T14:23:51.32626Z","last_seen":"2026-02-26T17:03:57.796635Z","times_seen":4,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/flags.png","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/flags.png HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index.BJU6hB4z.css\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 94974\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"172fe-w5wJfXBMdUKU4/vtI7gOUCBUOW4\"\r\nage: 1932\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjMXNS3KCpgIrTfiKxsK9RfFfoR6CK9mwMAqojcivvTt%2FYGIw2duyic3AXLSuQbmDIIlrd1p2iZcXIvAc%2BgoG%2FypX2j%2F6at%2FMqB%2F%2F6XLLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e0e594a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":94974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 17960, 8-bit colormap, non-interlaced","md5":"02c3b5af3d0ec1f21c51bf21a22241e9","sha1":"c39c097d704c754294e3fbed23b80e502054396e","sha256":"1c0578c469db9a3da5c0b6fa0258f99b2a2ac602d0027ab6fcb7b218c3acbb75","sha512":"bb097e3532e83aa4db8e8dd7cd16d95d83ae77f4cc19207f04f3b929ca695ebcd7f5730e9ea888763108c95028f40f81490a03093ef8d57665c6f4393091dc63","ssdeep":"1536:wxq8h3gUrI89XxfLcduXa08ucH+te2RIr8T8hKdPzgkjM+PDRzSKR2JLDpzm5NLX:Sq8h3e85FquXPAeExk8odPFg+tzSKe3M","tlshash":"509302ab06de36c6e10b2e9408902d3c720f65fdcba545ad497cc743d8e5a68d48feb4","first_seen":"2025-12-12T09:55:43.277784Z","last_seen":"2026-06-06T11:08:41.25669Z","times_seen":809,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/GameSuggestedEventsWidget-C1YjPNkk.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-C1YjPNkk.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/DataspotTracking-BGnsxVvd.js\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"e8e-Os1anBER2O3YZQKJmZxNEEaJ5jM\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jurJM7zWBxNUAYDMu5%2FE3FmarLoeya4knq5tW9Bu8RqE8RjnZ4rlbM5fR0YxOsH4ZAIr1V3TMdzzRkiVOoq99MZyVTJQd%2Bs%2FjdOTUW4bg%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a181806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3725)","md5":"43787a45f5cfe74078cbc565e4521f6d","sha1":"3acd5a9c1111d8edd8650289999c4d104689e633","sha256":"cd5da6dea240ba73bfe9cc022b7d9453583f2101b409e94833a3aae12cec1a1f","sha512":"090bda22324787190a13f5acbea2eceaad19784af2d260ac172a2927898e787ecdfacf87d12a74f6ab5fbf3b8b2cd2e18a9d8c970aec4dba4dbd4c7e5eb443aa","ssdeep":"","tlshash":"7071e74ae010aa39a13740d82bef3219153632b4b94353c1b63fca7123f55926b5bbdf","first_seen":"2026-02-24T14:23:51.248389Z","last_seen":"2026-02-26T17:03:57.756743Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/JackpotPoolsWidgetContainer.DoUbVjzV.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer.DoUbVjzV.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1d21-bImIu7+rQEAP29Qa5bsu0gv6VDI\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6GI7ZtEPRQSN9QDBWIgaO0nYMUn8%2F3kPttocy0ZFMUWyZjXq%2BUJncRif6UvsZvdd%2Bas3hBmVVNVmcvVFg51c%2Fsn3xOuvLqNGM24hBykog%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a201806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7457,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7456)","md5":"b90af3e11165ff40fd58becc1cca61d3","sha1":"6c8988bbbfab40400fdbd41ae5bb2ed20bfa5432","sha256":"ded84bb781964937636899c5fb033300e5bd6f038aad273ce986c6fb94d28421","sha512":"2ea7dd30ba216ac1890d730f6d45dce027259e2bf392015a29fc8a2048189bc7d2dd2862278c4ae51b0892232e0bcb75a9b5eb00203b97cca5f7e737c58cecf6","ssdeep":"96:Xnxo6ZIBmmohvoDxTTFQPHf9bzsV/bV/YgV/FxV/QV/OV/tV/IV/EVSVqV0VOVBn:XnX1Xx3erZg+qTPy5","tlshash":"eef1621352ab73ac6eee6937a170e75c7b3c083dc3131599adaf124a4d9aef1061871c","first_seen":"2026-02-24T14:23:51.32831Z","last_seen":"2026-05-17T23:41:09.67949Z","times_seen":6,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=0\u0026country=NO\u0026category=406\u0026limit=5","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=0\u0026country=NO\u0026category=406\u0026limit=5 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=QPq86_JcSEqwORib8_TPXHagYdI2AzcsW5h0Oox_QuQ-1771942975-1.0.1.1-ptSRBMQGn1Wy4H8rqjYvux.zbFy97D.49cUtdrqArBbGiq7No9kmlKXhYCPgHkdhKjob6Odb8PVW4loG6d1uNdzLp5KWL51ibNuoingatTU; path=/; expires=Tue, 24-Feb-26 14:52:55 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmcz%2BdXPqFy6KbwyaSzvS4liqqZ8BV%2F6MnJKwYIfa%2BTMFlSLVu9YLnuXYWxjCCox6lmFRiHu8x3T9TKDphOTWe5VWaA8seUpcNHnMAoAjg%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e11ba401806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":7623,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c23da379d567981202cad5354123e861","sha1":"eb17ef649cb32c47e65d61ffe314c43e433e0a19","sha256":"5efd74571c0a751dbcdf79195b4ccb28c0d02aca406f73a0524f230b6b8d4416","sha512":"a5e71278e4012d8e483599247cbb590357cb940d18d8bab46125c31760384fe6522c784474a2a6adb296b142b6fee9baa46d7a76b335b9f9541c09152c95d0ca","ssdeep":"192:I7V5Y9ae9dlld5YEbOBaOUODv5YgXIXe0d5Y5GZR07zx9d5YYsYzNUpYSNX8NQ6:O5qd5E5w5Sd5XTDd","tlshash":"67f152265f18fbe67f1a18a118523c4ed8fc1b939419ad848dbed4f902e11c207f26db","first_seen":"2026-02-24T14:23:51.329631Z","last_seen":"2026-02-24T14:23:51.329631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4061,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4061,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/1524.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/1524.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1778\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Jun 2018 06:29:30 GMT\r\netag: \"187d77b608d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 10:59:20 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 357812\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=iwpqSobAy40cNWee.1Ro06UMr_fH1RRTd1br_8IW0kU-1771942972.7967703-1.0.1.1-6PSRWG8DboLPJcqsZEIcK7bwBZTn6cL6hN9mUHwpl6sxHaeQy9d9kAvRL0GdAQks_UhRICmU6Tgo80bmDcLPzJqHLPytdaEilft12BBEMJ1mdTaIqQs.cCMkLzRl3lnZ; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2FSnGnVV1vf%2BGG28XEGEGBWoYDAwiVwq64IM4EV5t4igGvib7CkuaJafR3uq9XMIWBT6y73VpswMpPFmkuw29C8mjXh0ksOI8%2BhvWcosibpjMOQk003LJKihESA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1bf8d6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1778,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"2d484c45889dc71ab78d1dad087daf14","sha1":"eb47f14f4b72e4c21091efb9f44a0754366ec6cd","sha256":"f5a049e304b217ba18034d7b7f79c4c0d0b8b8df8cd81ef67c337fb7cf697ded","sha512":"a6fed00bc0baa722a20804a238d76279077df5c4a42caddf7604d6585f2a0557c5763bf7608fbc95b62266e3185dd1b93e72c6b98a61da7c9182b9ca931c4699","ssdeep":"","tlshash":"5d312bf25a5f25e4be8a74cc06fba416a6c527ff17a85d1d2f209cec1a2d10589d2370","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-05-16T17:21:18.450384Z","times_seen":167,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tawk.link/69345a05c4e6ba197aefa96c/widget/1jbq7v9mq/images/lWbtfzcjQK.png","fqdn":"tawk.link","domain":"tawk.link","tld":"link"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:54.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 13:31:38 GMT","end":"Wed, 20 May 2026 14:30:08 GMT"},"fingerprint":{"sha1":"2A:04:AA:C5:9D:75:C3:88:6E:59:52:B7:40:A3:1C:84:A9:19:D9:AA","sha256":"08:51:11:B7:52:7A:AB:FF:60:9C:42:A9:EA:D0:F8:45:06:A6:40:92:52:70:3A:14:2A:4A:A3:83:D3:4F:0F:42"}}},"request":{"raw":"GET /69345a05c4e6ba197aefa96c/widget/1jbq7v9mq/images/lWbtfzcjQK.png HTTP/1.1\r\nHost: tawk.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:54 GMT\r\ncontent-type: image/png\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=600\r\nage: 7786\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 24 Feb 2026 12:13:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80Fs1UKjouUoMC8KcN0l2xYduXKTfvySvP3nVL5TYheTV13j50s4PkuPIjEqhiyY1fPaZz0sWr9yroqVme4DZYarDj5JnEzm1w%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9d2f9e247ea7f3c7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 120, 8-bit/color RGBA, non-interlaced","md5":"740f71b656e07233cd24db82f62080ce","sha1":"f87b5ab22cc87ec5b5efb0689bbc03af56e21ca8","sha256":"c854fc2b538c99190a6a3099c09058d7cc97778984d2d5b462d0b8bad97c103f","sha512":"28a0190a0bb8e7ae3c65e76862548a9883a76a041595808b84ac6c37206dc0d5d340046a243c17b41352fee5d1aa27bc1d3c6f98ba5dad565981719c8adbfc8b","ssdeep":"192:yyXvgn+XKkiA1mF5HWneYkXMKgbekoqDT4f0CbhxkmUl:yyon+XKkqlWeYs2e/2alxO","tlshash":"dbd15c98482bd5a2ca2f6339de062fcd1734c4711209b1d4a35919e9b46b39ebf196e0","first_seen":"2026-02-24T14:23:51.331762Z","last_seen":"2026-03-08T10:47:57.970766Z","times_seen":8,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":47,"dns":21,"connect":8,"send":0,"wait":20,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_7874958e502645f17a95c07b1df78f6f.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:23:02.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_7874958e502645f17a95c07b1df78f6f.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:23:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 161802\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Feb 2026 12:11:31 GMT\r\npriority: u=4,i=?0\r\netag: \"699c43f3-2780a\"\r\nexpires: Tue, 03 Mar 2026 14:23:02 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=wCSURsb.PvnncZxvfgGqtic0tTpD0O14vm8zqENetD0-1771942982.2315278-1.0.1.1-5yH_Tnit5PCwPIgE2Kqpmdegwc.64jLyQqwbvSJLVkeZpLTy8MACt4aQr8_CEl76JnVfNG4xqm0T9hBFdNaxXBMQ8nmUTEFFHOKyCdj96mcNk6FpiHXryNzBWKyWTrTr; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:53:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZdktP7%2BRFiPbbF3ZZcexg7Kv3AESB51zQ3tOCv5c1QxZLw7%2BjVeEI7p4tZmdRKqVKeMd%2F6UMGAw%2BKKEF1f0jd9U0wDdf%2BzJMyltUHRquE8R6hhFRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e56ffdf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":161802,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b3d987f3f8d985b1b2dfab5e0d65eb54","sha1":"87302e075cf6f585585d9d9739da7cda9c4f9438","sha256":"aca4df370fc9f9ca4675d2f7aa6f1b9f07e3f5156a9c782836f4d0e0e67de784","sha512":"e68a74019cf1e41ed57ec1443f192c51df9412f1f1f81bdd880356276228e58c073780e810336b90b82734d45beeecc4854e99971edf50a32b8e2e6cfeeb7509","ssdeep":"3072:1lSJZe+1m7qqxRPcA0LIdY7A2SSeaseOhYwEYm/Ou6kZftpCsWsa93BsQOLm:2JZJTqxFcA086rfejCwEYm/9kB4S","tlshash":"38f3120d1edbcf9fc4aa856548ce80ebc17e5a67010b3d426af04cd6d857ef42ad89d8","first_seen":"2026-02-24T14:23:51.333087Z","last_seen":"2026-02-24T14:23:51.333087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7785\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e06ac09aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-06-06T12:24:06.769053Z","times_seen":58615,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/Info.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/Info.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:11:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=m2B0BeN4tAHn.Rn9_8jd2Pl37rS2lSfxojDMfYVPy7Q-1771942970.70268-1.0.1.1-FG6CJCKjFXR3FlBJts_p4JWQqjHmm8hJC0pJzmLRa2FJy5G.kBunnHOsmRm5yWLtEXmYzdb4aBzkTiMf1daOHdNIXdWsq7NIpoDjepl.vXHlDtsfHkZ8PehKB..i3oSE; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEgkyRk19%2BynqU4%2FZA5CZwDBfNYeIQFORZ3e%2BB5kZOrdyyD5GkMONIhOfFsirym5mrt6YkXjxiH%2FwO9PptJAGkmQ8SnsHW9HKSpjenb4TjABDM9lmg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270e2-1bc\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ee98376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":444,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"64a19d948a311d44a85ed7a0cef3e5cd","sha1":"1822d828ac00f2c60ee66a2c9acf5c84dcc7a962","sha256":"038925d678f609d6307e50af1575af63018358c6c100599ec118de6bca31334d","sha512":"4cf650a02c477a06f907ec26c15777cc0b651ddd6e95d890e5d4dd880fdf4458504415332280efe72b091ebdbd8844c60fcd0a2e7bd9bea4ded7c6dc47de8d92","ssdeep":"","tlshash":"fdf0e528953096bccfae22ff911828a2200f642bc87e1575e23d938c5f1b81492e8c19","first_seen":"2025-12-24T22:39:16.23478Z","last_seen":"2026-03-04T19:25:33.595252Z","times_seen":6,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/if-defined-CWaLTnLW.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-yvd_ZnLz.js\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"cff9-3CQS8BSHCmzdXT/mRzShI3Ky5mw\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7iZ3%2BpL%2F4UVM%2BDthDLm7uOh1UJpcPQ4cVklIRI1mmAaicxXFRKuOKylSsw62KO1ZEQ9no7%2FItHV7njxOtRrbDOtuC731Tkq%2BW7bP%2FrY2yQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e118a101806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-03T21:14:05.348177Z","times_seen":638,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/CasinoPromotedGamesWidget.C4EXhwOE.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/CasinoPromotedGamesWidget.C4EXhwOE.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"afd-CkeK2gVfA+RXSJTY/WuG7TDVMk0\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BVm0mLGdTY1f9gd0mV%2FBwZzg2QSJ1yboCOYPy0WVvVcoXXcyio0jcTu%2BVHo6S2R9xa%2B1itNIAFjEOAQU45E8rKdx64QMNA1bvliJISXPQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a251806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2812)","md5":"09fc6c8eb905c21c7a4d044090184cd9","sha1":"0a478ada055f03e4574894d8fd6b86ed30d5324d","sha256":"d1f596a53ce4b0c43d20611ff931c0858b5d6c4c987b2b546269e639543dc878","sha512":"6811084eefb8629224c5ae7d6806c7f2b220d131a02f0c1a0c44067d684da4c1676d4aaccf513bcca338af6608ba085696056a3b70ebd6274ca6992035c3772d","ssdeep":"","tlshash":"6451250f445b273af1134e60a2bd5ed66acb491bca3b4b7cacd86157c3096c2607397a","first_seen":"2025-12-25T01:12:57.08487Z","last_seen":"2026-05-26T00:51:05.438146Z","times_seen":291,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=XjBUfD3794s78w0vIoe9sPvt6rcxAx8GyhbSxuvJHE0-1771942971-1.0.1.1-s_p1u0L.P0U66b6InJCZN_TAYufZXMPnAZkvmpX.h5cf5wFc30mFsqwTjpUkRfPgW.udDKXRjfVr6AnONRSaqt9jY8KoyiSyxTQ3AlbXG5o; path=/; expires=Tue, 24-Feb-26 14:52:51 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKL3Nfm3SNTuzqvWN7BoOpF%2BE0y0RwQIePFUUhe9tLcrn3q62%2BH8RT%2FUXIJXrbOe2swbNZ%2BuGCEqhMy9rWuD44qbc0BL1RcBz6aXEVrRJQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e14cacb1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3050,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"01efa608c5a85de4b95ac270e6ce6a51","sha1":"e7be08d5603538dd307167f616a58eafd2cf395e","sha256":"b57a383dff0f0ec071dcff3a9f724683f352d1e852ed3beda60502fa56f52610","sha512":"73eef946ca760c8a9ee1e84b0f9c66be7196fdbe7d952f93cf19d76f55f3d14c43a9ad62a347e77c756236ad658cdc03e39a339ed2ba38aa0037704fb8bed0b9","ssdeep":"","tlshash":"eb519d23706d9daa5b507740b8c7395ac8ee2447dc0a5670ec498f8d82fa63ac6d33d7","first_seen":"2026-02-24T14:23:51.337716Z","last_seen":"2026-03-04T19:25:33.597242Z","times_seen":5,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_1da498fdc42586f4951ac17d7f37ac22.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_1da498fdc42586f4951ac17d7f37ac22.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33990\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Dec 2025 11:17:11 GMT\r\npriority: u=4,i=?0\r\netag: \"69429137-84c6\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=6MpAmWMam3WQrGKAlYrq5aYKP6GWtqaoyhSpVVwLkcY-1771942972.1169624-1.0.1.1-8q85dvgf2UDw1IlxGxg9crcIIKt1jP4.Z5jFFINr_Lvu69OGinso.sKwlacJNxtULydDQQY0AsR_ck62RDjYcG8elBJFm0uFJ2rnchajp5reLPFfKxdE38gIRdlxFe5q; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEuZ5gIL6r0c5ZjG67ongZ8CfhFmbMi0PX271FjsCgIsFHiepCbScNvOuvzUzTP7fpJ0rp0M6eVYkmm1eYGkzG2Upuyn0a1RUaZAGjN2F2acHDT5qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17bec72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":33990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d56d2398c08343d9952cf54a2a7c677b","sha1":"3a413ecdabafa2928ebb8d3fba0e1c35c7fd0999","sha256":"99567ef402f8006b0b83959ff9d76e89b907d548a51d771d04c5570b431b11b0","sha512":"fc03c48b3202a3e3f975a49f54bf2b05a3a19895581812a1fa51e20b4af4aecf0840a04041ab8ca1c065098e9c9552e7fcb5e76da460662b6c5c726028d70fea","ssdeep":"768:LihWEwcrCPjUS9evbbemPNwF0O+gnVgaDwz0aix8jktQWF881Z:mhWEwcrCcPRPNwF0OfVDDwz0atj2Q0Z","tlshash":"fce2f157951b4f7b58588cf2aa088a813d0986d03ca19beadf18ac3ff21e577f309464","first_seen":"2025-12-24T22:39:16.197206Z","last_seen":"2026-06-03T04:20:32.009927Z","times_seen":27,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/fonts/default/RobotoBold.woff2?v=63","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=63 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index.BJU6hB4z.css\r\nCookie: TawkConnectionTime=1771942972158; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"f250-sdZeMF6FDN01JzT3hCzd/TDwjQs\"\r\nage: 1\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uG2t9wJnWzRmbud5EFMHsXCZCNEPEofYqguDB95fiz9kw50gpBE%2FFfXw9poUabmbJM%2BltRlau%2B9WHh%2FF6cuEoyTyrtF8%2Fi%2BzicvE3kqzSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9e184baa1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-06-06T03:01:40.649428Z","times_seen":2659,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:49 GMT","end":"Mon, 20 Apr 2026 08:39:48 GMT"},"fingerprint":{"sha1":"94:97:3B:30:EC:7A:3E:B2:6D:F2:29:2E:86:03:BB:6E:D3:C0:52:34","sha256":"F7:5C:51:D6:8E:E9:CE:0B:48:6A:85:52:EC:A2:CA:4C:12:3D:CD:F2:17:7C:AB:07:AF:87:4F:A5:24:CC:FF:00"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 24 Feb 2026 14:22:53 GMT\r\ndate: Tue, 24 Feb 2026 14:22:53 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1054), with no line terminators","md5":"c8e1fe1da5a4b19204be72c5a9043700","sha1":"a4dc076a6faf08b29c1759e5120e59533ade6b0d","sha256":"dbdd116306d8cf37824cde048f77aef495328fd09c7432638d0772c4e96fa514","sha512":"eba38b80bb3b6d58c5d99aad304a4ac5107afa7503028a8d4652ca3bdf1ce0273b261e8a9c372d3b8f4f15e1641f1e10575d2b31a0a79bb53e070928202e84ef","ssdeep":"","tlshash":"ce1142b21a15e1390b720dd0e2ffcab5e482701cf15884d8a401eac86fbeccbcd05589","first_seen":"2026-02-24T14:23:51.340293Z","last_seen":"2026-02-25T02:34:32.486712Z","times_seen":2,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":105,"dns":29,"connect":21,"send":0,"wait":37,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Lato:400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Feb 2026 14:22:52 GMT\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ae317c913d9f17e384174fcac1e95f49","sha1":"97048ceeff296795e17fc282e38d26d44fce8bad","sha256":"0250efe84de4fea78b47bed1e3367687b72cbad25fa556879acfd9adf33f6b24","sha512":"3be7c2d8b49c8ecfd8fbe46e0e57aec92fe696894da6243f6b9f0052461f28eaff9b6974068276cde565287efe54a8a16379b21a522dfaaad925fa38215bfcc5","ssdeep":"","tlshash":"ee41ce92096fb908db830cc212c97d32ef0f625064499935afff14d8bca7d699362b0d","first_seen":"2025-09-17T17:57:20.126253Z","last_seen":"2026-06-06T12:34:08.614795Z","times_seen":7379,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":171,"dns":0,"connect":20,"send":0,"wait":16,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/1527.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/1527.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_028afea23354a53ac04ee2a9290db1f2.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:23:07.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_028afea23354a53ac04ee2a9290db1f2.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:23:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 174024\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Feb 2026 11:15:42 GMT\r\npriority: u=4,i=?0\r\netag: \"699993de-2a7c8\"\r\nexpires: Tue, 03 Mar 2026 14:23:07 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=w6l8ef2XTqFt_Pn_MmoPaDKCT254_uaUhPq_mMbVhAA-1771942987.5636697-1.0.1.1-7YsEQSkVVVw3Mc75U2WqEX8GY3eAMCkfRltp_FjP_T5xHUvwJXCh41o8QsJ0jD5KjFZd6tUTGaY8HqUvMTBsgYE02xLD0aeJ6RFGaj3LobXSu5CquI25xtfg9XO5OfZk; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:53:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6yBTWYMvUXjwOyZhoPvvEpj2%2FRJTnM%2B%2F7tK9EcSmXeU%2BOFonMTagRWlOCWc4Rglnkz75rCO3XVBUfv7LAE0gcatJnZ8Q7BD3nN8YJ97mUhYThMhvrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e784ac62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":174024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"94e923e9bb12e3a69cb260a391f8b0b7","sha1":"6c538cd615271b490e198f2901ea6b69f6d83833","sha256":"f70930f7239a15591e5cd6970b37891a5cec569c108374a960c3781fd316a2ba","sha512":"3599ca01f412a036cbce7124a68ec709bc29bbab7f5e3cd4841d7c7f636c714be4a7959fd0b7c3d9837e2bc60bf11384ca831333a9e84e4c87888513603fbf79","ssdeep":"3072:hT8pulofe5h7q4TMmHfmC+VhTynqp68DXQg0iEHcXpU9DCODLGuD0+1rdx9ADiz8:F8pZF4TMmHfmC+LQNCKHrdGob5veiz8","tlshash":"fb04127f8eec33cec491a69a9890624ca411e413efbfb377149adcb394e4657046d42b","first_seen":"2026-02-24T14:23:51.342122Z","last_seen":"2026-02-24T14:23:51.342122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 7784\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Tue, 24 Feb 2026 12:13:06 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e1379a0adee-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431352,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"472320048f1140d65c626c738a2d5a11","sha1":"286bead4f5cb83414125186e10ea7b25c0c50c93","sha256":"148076a53747a1e6ee410289ebe3a89c3127a9b7a77264643e425483c928a023","sha512":"ec6a66fa471b0f3ffe18f94439552ea3fc84ca80211b1575dfa023892f1d4f14f04559088f2d92157ab812131856106f9b56582d14902c8056f27ed47db471fe","ssdeep":"3072:bnRupaABaZbVITZZYA5dVAdZ7GlAMIDl3g3Wcmvu7IHkGOQyD9gkx:LsbBgVILl3WHu7WOQEx","tlshash":"1b9444bb8f848f5b1b280bc9212d3d6c999e298bcbc55df6f1c0cf1844f4ab92315566","first_seen":"2026-02-24T14:18:16.793229Z","last_seen":"2026-02-25T02:34:32.597866Z","times_seen":5,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":62,"dns":20,"connect":8,"send":0,"wait":60,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"89134e892271c99e4be394e757691c0c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472751\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e18d9f04453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11888), with no line terminators","md5":"89134e892271c99e4be394e757691c0c","sha1":"7e8e00a94406382ad3006aaffb6ba522a7172077","sha256":"d09d7f32db5774ee049fdd2fce086b87d897c6893753091886a8706e9747c9cc","sha512":"df656841a2fd8daa388e0345bb36bda46f568cb5b7f05cf9b10673227ba36da20c35d3fac4f96edc411475e93805cddbd8f85c545cc1d7c41aebbfcb9712f089","ssdeep":"192:0H9MawRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:Kwb9HkS316xAFKpLZEh","tlshash":"6632a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","first_seen":"2026-02-19T03:13:10.639989Z","last_seen":"2026-04-15T01:21:42.639775Z","times_seen":6484,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:54.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:54 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7786\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e243b4bfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-06-06T13:02:41.123117Z","times_seen":31836,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_fec0ce3fb838228909c143d4c2cd0907.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:23:02.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_fec0ce3fb838228909c143d4c2cd0907.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:23:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49090\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Nov 2024 09:10:12 GMT\r\npriority: u=4,i=?0\r\netag: \"67419bf4-bfc2\"\r\nexpires: Tue, 03 Mar 2026 14:23:02 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=9fY85rFuotyZXqNNI9xPP3sD4h5bgBLrvxPY50dBDX8-1771942982.2965724-1.0.1.1-A43htuYUZjWq_vrzOjwWsLSEeI.YE3VeO2WSdOveQtikWahuYVkRdlNWLyoF1pzTwd6DOfuh.iPYef3J.9JZAVc7q9Rpq6b5B._lgD2Xf.c86iMU.a2ac1wHn4u_iQH.; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:53:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b8Vn1SbCImJjNZdhJnnnJpBjc7NiW1vDDzMMcQ45vv4tW16BGpJlkhGAxQPl04n7vW110WUKRhChi0e8QAIG5iPVPJBsbPBLzSBDufP%2BMZ5JHSLjuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e575a202efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"554a6a60b6ffca448ba10b49245ef022","sha1":"ba0918260a1d0c6637a1aacbceb9e00ae51426f4","sha256":"072b206ca7103452a85057bb9b4e7cef928ab648bca6458ac244f8ef86be5d9b","sha512":"79847851f93587d1aea114fc35dbd63b6b3882e932bb5469240f4fc2f28a01a866e883ad3440cd0ea3c641210821304a34031889973a3c0d3d75df70982baef7","ssdeep":"768:F093GeFzB7B+3nq/0hWz3f2O8euie3REnwUuaXPdTBvETOP2x1RkILzP+81dzNI1:F0NjFzeachqJleBEwUTETOux1KQ28dZ2","tlshash":"e9230233c0f23a3c236f235e6f4f4be42998a54ec7a79158a8428737631f0944f995da","first_seen":"2026-02-24T14:23:51.345694Z","last_seen":"2026-04-29T13:47:02.85816Z","times_seen":34,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index.es-B9MYE6-3.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index.es-B9MYE6-3.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/WagmiConf-DcRD12Of.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"48144-WeOErzKLy+DHzlJSZ5nisPERz7Q\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=px66dJPW2c%2BgNgJycHjSfF3LvWA7pqFKfasDUsg8fXoSy2QjT2%2F2IEUKRU6F3hBPQJXQcMR2J2dIjDXR50RbSL%2FvuLV2juQiYe5obVasZA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0cd9101806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"a71206a48931c8ca241fd0483be9917b","sha1":"59e384af328bcbe0c7ce52526799e2b0f111cfb4","sha256":"4fc8231f3b89b71260c8ee9fd5a048df864e54f3e54f968fa3bf7f795c8d73dc","sha512":"e35fd45c940d6d6898583f6f9a0582034184f1a392fa74f9fe38e9be216d64c27db00d61de5e9d2dfa06c8a137f911000103f9bc2e4452a39be41745f27501e3","ssdeep":"3072:fzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6UGh:fz77jdU/7sJJMcvYisoljSFN1Nd6UGh","tlshash":"3b54fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-02-24T14:23:51.310714Z","last_seen":"2026-02-26T17:03:57.86364Z","times_seen":4,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Firebase-DDwvASrY.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/Firebase-DDwvASrY.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1487f-/z5cCqa8JLUxtPY4ZG1J440v5IY\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hgTOCFjlMzz9gq%2Bv0e7LYam0bidRyys6%2B891an%2Fhj2HN7b7DI3eByFmubv35dQqGvUgN8ejrtJYafKy6Q%2B3dSBFzmxZ6Xdmir6%2BDBD%2BlSA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ea9581806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":84095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"7481cf9dd3ef4629e43999506ee69229","sha1":"ff3e5c0aa6bc24b531b4f638646d49e38d2fe486","sha256":"5dddd0ca4c525657b36e3b4310620f8e3a581c1465be6f5c21c7d32ff6f6200c","sha512":"4f04b6e31a72b4a72c9fba82a07bcb57365c400ced0fc7a49f453812edcf2a3d36da72936d9f2d5f38c08e2ef99d82c5313d827e582591f7f8ecd7f18d29cf59","ssdeep":"1536:V4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:Vs1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"3883957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-02-24T14:23:51.31641Z","last_seen":"2026-02-26T17:03:57.82728Z","times_seen":4,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":116,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/StatisticsOnHoverContainer-BsM17Aei.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/StatisticsOnHoverContainer-BsM17Aei.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2634-kJ8cyfq5G3rtB1P1MhiAbrW+NLQ\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uw49sGdi8JQsSI27FjUG6TjADvGFocqcsJ%2FYskf6ZgiDpH6ybvKTVA1353iYFLVj%2B25GeoI4iumgYgc4bpjH4kdQ700kk64NgijClN3NmA%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ed9701806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9780,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (9539)","md5":"49787840fdb8d4df9761ec97f3432d15","sha1":"909f1cc9fab91b7aed0753f53218806eb5be34b4","sha256":"ad4dd40765aa61a8a852c0607b3c0bd802989ee4b7f3e686e8ede8adb6324907","sha512":"50cd1ee26d9cf314e8da57339139d5e00840fb7583f3dc1012b0e1ce38c787ecbbdf490fa8aaa6d3dfc693cf1fac77ce8940a95e394900b379e4e1183409c9c4","ssdeep":"192:sn2zkXAsarXDxLwxGEE0D9AOgzm6j/e0R:sBParTxLwxGEphAdzm6j2q","tlshash":"1512626c118e5f69f41a8240b5202e39bb3a7877958d66f87ebc441fd3ce444bb9cb18","first_seen":"2026-02-24T14:23:51.34682Z","last_seen":"2026-02-26T17:03:57.950488Z","times_seen":4,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2176\r\npriority: u=4,i=?0\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7784\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=535+2 c=0+2 v=2026.2.10 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e166e9d6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-06-06T12:48:14.022578Z","times_seen":2946,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/622.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/622.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1389\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Jun 2018 05:37:59 GMT\r\netag: \"de6631d9588d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 10:13:22 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 360570\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=K1QqM.YVHDUJWL.DeDkFjuMJ01s72.iS.QYiL9DrrCE-1771942972.8091898-1.0.1.1-BSY5swklCqXts9AYKRa65phqYqCUSRghwx4BHL9jInKh21G5R7rKKMTI93d30D_rZnt1o0jKfhur3yri7QYoMT2nghMz9CJ3J4jvPxcdvATHaLN7J8q5IhMPZNbiKfDo; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQD4L8K%2FuUHbUKYje6RP4JBQCLJlyZVPl0LsPkUpDd%2FKv0efVqvejgyAGUl7P5gSbyQrlrGaevDPZMYUjgc0Jfzi6jcu%2B%2FUQ9PO%2FmJPc961jUzxNY%2BXdeDTtRRM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c0941c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ee89f9bb87c5ee06a903ae78b370fcf2","sha1":"593f3b389631329ba10ca0cded4ed6748bc2fd21","sha256":"b1bd2395edd9abfe93137ba43c9febd183f48a2012fd929d5f60823d34fb044c","sha512":"88aa70b7c72842ef23332df3f72abeb005fd327602514c488279bd403fbdc24c6c2c132927d6c5fef77762c727f95ba755fe30120e54f6d1b67cc30ca860cdcf","ssdeep":"","tlshash":"4621e6a20322261e56987a727c94a7257f2298a517ecc99416fde1aca0297dc298020b","first_seen":"2024-08-19T23:09:36.150757Z","last_seen":"2026-05-15T18:53:14.736806Z","times_seen":327,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:57.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 740\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 17 Feb 2026 05:37:14 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: wSQ7leGkMZEupC3bQNtebP5w7SuPxS7K\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 24 Feb 2026 14:22:32 GMT\r\ncache-control: public, max-age=120\r\netag: \"556e2fef94fd6cbe6ed83771f215828c\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: LHWisQmBQWtDbiAFIcy5iPnC18elXo6eSDbdNx3gq2rzKi1vhEQs0A==\r\nage: 26\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"556e2fef94fd6cbe6ed83771f215828c","sha1":"01d1ec8eb30db250cd96b175514a47442b8e29c1","sha256":"02e42c6d7678511fc5d27402ef5fbc93d015c9ce4f87d6f856cdaba0056ee45a","sha512":"3281558a218b65e59837390bb0ee260ea85303158b7adcb745237adf93631d33d64a786ed480cc60908f6f6c7cda9a10581ce44c457a4bff204f1879a4b232ba","ssdeep":"","tlshash":"2e01c0cd3420b1b38d4a8b23c9197d037ef58878198a653054be6b4c00badad03dada3","first_seen":"2026-02-24T14:23:51.349331Z","last_seen":"2026-02-26T17:03:57.974607Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":10,"dns":0,"connect":1,"send":0,"wait":24,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2Fgalabet2647.com%2Ftr%2F","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:58.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2Fgalabet2647.com%2Ftr%2F HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:58 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncf-ray: 9d2f9e3d6fde120a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0882e7edf1a94defe3689daca8e6b18d; expires=Wed, 24 Feb 2027 14:22:58 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-06-06T12:17:18.194582Z","times_seen":101022,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7785\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e06bc13aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-06T12:24:06.774592Z","times_seen":85130,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/firebase-messaging-sw.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:48.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /firebase-messaging-sw.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"465-gZ9gYVYk8CXRJW78QI2OV2qQnHs\"\r\ncontent-encoding: br\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nGF7TwdN%2F0%2FNtytqIFjM3vjokibFEDqfXDnl%2F07iQ8p7fnUUDpk1r65yq%2F6lS%2BDWVW1plqVrKDj8KqJlAXwAUai2E8EpXttaFMVQTdUbQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e017ff81806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"44b92a7d10cb0970ced5798c2eb1b8ac","sha1":"819f60615624f025d1256efc408d8e576a909c7b","sha256":"a87215bfd90d96fb55335ce2b2411f38074588149c9e896505cb10b250e17e1e","sha512":"75c55da9e8afbd96b6219292c91fb88e01c15d20bafc974028763227220aa042f4b761895d44b0394baae53c225e9b0c109d2eca333aad6b382951a60448e8fe","ssdeep":"","tlshash":"5121cb124be2f8231e4104c7679f32186e290d2507b0f1de61bf56b86b0a57b206bbc5","first_seen":"2025-12-24T22:39:16.149326Z","last_seen":"2026-06-03T04:20:31.962446Z","times_seen":77,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/localConf.json?v=1771942800000","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /localConf.json?v=1771942800000 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EM1tcQWetBms444NOXTyH%2FDQ9eKV1m4VvGyTcxxa1VqsrRjKvB%2BiAQ%2BxIw8wlIVavTxoPLrev%2BnryvzAj9GVyiSreaPlISWoK8A1iUTTEQ%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"1177-VN35mVLPmw+r2CmSgSUCavRXJAw\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e06a8661806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4471,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b406e9c7fcaf80e5ab91f27ea0f0294c","sha1":"54ddf99952cf9b0fabd829928125026af457240c","sha256":"a327cfe81199467e7773a331449db596ff5a5da012ace64d4ae1889c757bdf15","sha512":"50bb2149cb4177578ffd52d275d2f399922cf5dc4fe93ec9e32b840532d1dc7cbf148a136fc965a7e353fab249d5849f33dba3146a47b9f8053a574661b71f4d","ssdeep":"48:YuTyTbGhzyQnA8qA+9nIok/we+NPhwxbwPAjgCfk/wWp3Copi279lMFDQJSLhHan:xu2ByQA8qAHTwAsAjgCuE56szUn","tlshash":"7391cc9d31458cfec75eeac3788b679f3042811387982c06c27cef4c5676f19650a2ab","first_seen":"2025-12-24T22:39:16.189594Z","last_seen":"2026-06-03T04:20:31.881043Z","times_seen":82,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/GameSuggestedEventsWidget.B3VqF5zK.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget.B3VqF5zK.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1ee-X27EksX9+CXe1JEPOARmuyOlAzI\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RRKcH%2FuhJ9W6UDmEDsoJYuGdUGO9ILaW7d6Pipq0A%2F8QjMpNeL8gCR9QI%2FHW7luacOJNYZO1AuZiE7aedYhJT3BkifAbgV31hX8Z%2B%2BN0Lw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0dd9301806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (493)","md5":"3d3f0fe9e1a11530bcc5b93d9a483aa6","sha1":"5f6ec492c5fdf825ded4910f380466bb23a50332","sha256":"bee73c23ba614c70cddd4a90715357b4e5247e83db72e74289f80e59f6349fc9","sha512":"3fe221c3be766eda2e1f32ce4d86509e3766421cde94b5098cce1e9a4dd253c550901190f197e517d10e96322ac66e357e727e78382480d92bad2d1efd53d670","ssdeep":"","tlshash":"a0f0e9218f34ed35a4ac03ed2a77005a5760e195bc5039f86fe1bf158a087e61ce82cf","first_seen":"2025-08-13T22:32:23.57413Z","last_seen":"2026-04-29T13:47:02.73876Z","times_seen":41,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/BetslipButton-tfWg31Ws.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/BetslipButton-tfWg31Ws.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1a2-qYBBr8bkBbH+tRTUJEF4e263Fvc\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0i1lUyrqreN08ijFlDeRO4AypwUgAHNl3A4%2BWrb5d3JVz3XxW6YkoPZF7%2FWDcbWAF5D1QKYpKTxMzesZ0XfC4CEE2G%2FHTuDJzwJvPucBEw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0eb95f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (417)","md5":"3eac9758e461b39157cba1601935dac2","sha1":"a98041afc6e405b1feb514d42441787b6eb716f7","sha256":"c93e12cd7a9021b060876cbe4384088c2c2183d1617cffb509a17dd883f51d04","sha512":"a91e554873ed7ff7c4ae676e2fb3fd11f331d987f097d1b82f7ce55e45d95b1e99c534efee805ee87f54a34d314b8158c9c96f8887d987a4df027f9fa1c89d1b","ssdeep":"","tlshash":"16e0ab478888c2fe07425e82110682123c2795bca250e69180ae6c657e38646c81e52f","first_seen":"2026-02-24T14:23:51.354145Z","last_seen":"2026-02-26T17:03:57.763051Z","times_seen":4,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/NotificationsButton-pLBpik3l.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/NotificationsButton-pLBpik3l.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"22e-mRgS0ldhghlzTaY/dXLfEDwpCSI\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ytnPRdx9TAzqlZfA78GeITVzYIUqgWrJUXwW6%2FHRtO1PipYGzrKldl3yhoCdUvfePrDToZTJemAXc%2F0LbqJWiZsuPM02UQi4DtjLqBY4Q%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ed9731806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":558,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"a9b056a32d1ed76e431c79743fff40d0","sha1":"991812d257618219734da63f7572df103c290922","sha256":"1d39a6add7ab9c187045bdbe1fe951cd7aa476aa5df81ad0e50ac2a876c40934","sha512":"058802b490279b15a1dc08c0bfccff599583ce22b9121453e2282443bb321ec4e51145d312ccdf1d58cc0d7ed07506b8f89c3abcdeb726bc57778cfcdeeba673","ssdeep":"","tlshash":"aef0264be994d5f417c25a11623bd0163c3ba96cef4a588000eb1c591734116c81f55f","first_seen":"2026-02-24T14:23:51.194058Z","last_seen":"2026-02-26T17:03:57.749218Z","times_seen":4,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/DisabledMarketEvent.BUY5t_rR.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/DisabledMarketEvent.BUY5t_rR.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"2c4-BlCcUkj/wUUFtw/bsj+lE5hutQw\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nFAJ6ZqnVADUDksQZrDENsxYkHxIGTuo1xD1LgPrlKr6S7OjxKUB8NhFQAjFfVCn4WLzlYvAWW0gxF0y25jTL2corECvfA7SsbhdMKJ7BQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a221806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (707)","md5":"c0742f5af30b5e1ab1e9e3184a8d4adb","sha1":"06509c5248ffc14505b70fdbb23fa513986eb50c","sha256":"4b6712623061506cf21b8296602cd61def3d0a81b5cee16bd0d245e7275715df","sha512":"7050ab375c9e4b209bda0bd7ce449e76da69f00d56d7a9504a52eef1e36fabfb8b36f9f560d810edb4522247e15d17cf736e929f40503802df2035007d1494ab","ssdeep":"","tlshash":"4701d4c4f98a25344c3a9d0c9abc8fee560a93705ca15d33789a113a4bce08a4a20d26","first_seen":"2026-01-18T14:34:50.585531Z","last_seen":"2026-06-06T11:08:41.333115Z","times_seen":483,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=sVVIJVuHwQaMW5gzhjTJI6HjfqX9nk6f4WLDXkSLVwQ-1771942971-1.0.1.1-VJDdAotAFqKASNtW6S.xK14bSCEZrdpPjC9pRDPXmCCaA2gm9KCeMNNQSQQIcVy3braOs5_wimqK4_x30kNdsPsQbdGzkdQhvoZ0MaVQT5g; path=/; expires=Tue, 24-Feb-26 14:52:51 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTlH3%2BiHHM%2FbosveR2kduRpfSySiz1MDqj5w4FbhnYvIJznJDnsN%2FvBd0xQjxfc7VAKY0RXZsvrFH5qmalhxpCIIFtn1pHmxZ4ykLI23Kw%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e11ba3d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f5e948dafacf5075635596d30491541e","sha1":"8bfd3c7007d74bff75280fed2382903c08994da3","sha256":"dee29c816db2ee942f94cab35ed3be22f3caf0fcd2fa1b583c744101a56eba77","sha512":"dd2fb743d4149d19058ea100095bf8ded552ae35394173bbe2077d745b48b6b80be5b9e5411ecd3b3c2adb697a4f7608d487a99992c9f792bd068702c793c540","ssdeep":"","tlshash":"cd51af13b02d98795b543b40b4d3394a89ad18479c0e8a74dd498f8d92ee63dc6e32d7","first_seen":"2026-02-24T14:23:51.356718Z","last_seen":"2026-02-25T02:34:32.538064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/TvGames.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/TvGames.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=8EO7_Z7kJ9eZIN2DR5EtAbYb1nS1M6izlTQnBY1hYKs-1771942970.6969848-1.0.1.1-hth.0lt66VL.ly3WcxQPvxBWZT.2Iy3h_X5LRy4mGBFoWuTPqC6fFThqXvMtOV_bdqKJ9rOC5Htbm5PdkHGKGz58wnvxJNSi2clUILRLStMUiDjwORqoHqF.i.XSBZUq; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1V9jH14TvI3VEFVnmJ1nQQX3JRQwb4bF5sjX%2BrsXyeBJYporMRgrnTLwArLZoDqZAaZE%2BXbTn%2Fu9D5aedG3YIJqvlxCsTqV6rHZJjcjnHaO78deDA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270a7-c81\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ed94876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8cb4d739571507bd6cd3b25a15163537","sha1":"f8061ea6ba5d599b463f5f146b407b0f6fbe4bfe","sha256":"3b2f15bcef3e58ac040feea4d073d42f18e48bb6f399c4f9f89845931f87085c","sha512":"38862ca5d9bb144dfa4b9c0568f05439e788848d45f8891fe508570322d34200ecb0e3f70dd9f1e8ae5659ae3333fe154d439e797c556ee94fbf88f47ddc3cb3","ssdeep":"","tlshash":"41619c87ff3089e04a7c5f99af6840d76689c05dcf731118b23c643e5af7d5884ac9a9","first_seen":"2025-07-08T10:50:27.694177Z","last_seen":"2026-06-03T09:16:08.868203Z","times_seen":494,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/useNotificationsProvider-BxGEeL4T.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/useNotificationsProvider-BxGEeL4T.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"5c-rUe/qyjmXYNkrRlPutI65eeaFt4\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oeZDMBkD6iAoRmSQDssQU3PpLsgINQQeE7lECIxTfCZRB2Jmd0mGDb%2BcyoXLQ5iuIyhLJ44yV6sWbAVVZVGXeLMtO0nZgVX5i44NudoMzg%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa331806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"2d9d5bd0509144a8bc2d18c111af42af","sha1":"ad47bfab28e65d8364ad194fbad23ae5e79a16de","sha256":"2546dc615d6b471b0a8c83a0f9b156a345134b4484caf6574eb58c5954ba9100","sha512":"b5cde42dac7ae4b2a865530dfc69039ee3efe535764378d517e156747a03a735449ca23f15fe699894692ffcdeba8bd13ef0f84fb297d1605496ddb7f0a13144","ssdeep":"","tlshash":"c3b01213884013f061010cdc11149c294f31483c3381cbb05034811c11e80858b0e901","first_seen":"2026-02-24T14:23:51.043147Z","last_seen":"2026-02-26T17:03:57.849061Z","times_seen":4,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Odometer-BX62fBgg.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/Odometer-BX62fBgg.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/JackpotPoolsWidgetContainer-CG5gkeJb.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3ccf-ipesN87ir5lKz7/J8s8U41JsfE4\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfhG5aLE31r2yjO4dzNyEKurQbefUDiL0yq2TJaKbzZFM%2BMw8k5bsyvUGJ16Nkjk%2FMx%2BdBSkHlXdg%2BHvtPIFe6bL9oG8BlAz4Mn%2FccAhSg%3D%3D\"}]}\r\ncf-ray: 9d2f9e14aab11806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15567,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15566)","md5":"55a1a4b91300616965d78a3641eacb56","sha1":"8a97ac37cee2af994acfbfc9f2cf14e3526c7c4e","sha256":"ffaf29e279a90410cade3f3daa9ef47a21684c027c281f7d196cac20604a450e","sha512":"b61b1b1f088df62ff5ee4e38e7ab6b1820a320e3fc2c0c37415ff1d9bdfeafba35817b9b62cf4b731f95ddb43487dc610fc89c1ae16de536a04714d3062fe67b","ssdeep":"192:2FZd7KNJtQae0S09YJFF2UXxx3HjmHHXpkauLPHMBNeSYpkYxSBrC7TlzUgrPND:2cVQae099YJT3DmHHMPrFtUhGxrPx","tlshash":"de620a8a796272344393b1e015bb0609773f9d6a3808405db67caeda7e32c19d12bff5","first_seen":"2026-02-24T14:23:51.358719Z","last_seen":"2026-02-26T17:03:57.766878Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galabet2647.com/configs/928de3c284a560a4ec2990544700741b.js","fqdn":"dataspot-int-bucket.galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /configs/928de3c284a560a4ec2990544700741b.js HTTP/1.1\r\nHost: dataspot-int-bucket.galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2FgbgDctxzTKl2wnFS4zDcRfmBNLa8I5RUqw0RDE3QYHXBU6uyY%2FdF80fh1o25ztU2gjCSSwQQbM7AlRknPVD3UzBCxsVxIDR7YZGuGsI0BzKQpBN86JUFQYjU21tVBO3RQ6\"}]}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-cache: MISS\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e121a501806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_9ebd89d4b7e272eb1d283c8014d5776d.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_9ebd89d4b7e272eb1d283c8014d5776d.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37486\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Oct 2025 08:37:47 GMT\r\npriority: u=4,i=?0\r\netag: \"68f2005b-926e\"\r\nexpires: Tue, 03 Mar 2026 14:22:51 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=uAY.lGMwhe0JEyCifoIiTtaDJPo1DZTYKjW_m1uYT.w-1771942971.6343653-1.0.1.1-O9VkQIO9xJY0c_ZIeHAqnGtP.ahknxGHY7R34vX9Isp58xMRbPqS0uueGOE0WZTkPEeI4RCTQeXuYRudKPm8E8eZ_aswZEstPrd.VusAaj8psiOlUVx9azvKmBigGgLN; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLtpkbjKTrofX6K39LFXttQgiVexGAMgjC2EQWlTNHLH61MwJ6NUM7tY6D9VWV76nP9IJ5CeHHTSRhBNv1aw9k2Ab9gcUxivPcWOLMFd36kIR7AGwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e14acc82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":37486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9ac9c7309c1e3ad08e40dd34bc454d67","sha1":"b54c720aa9b62e91c1e00db7ae81d10eb9c927e4","sha256":"640800f3344f29c8b95ceb80f1f18aac2f2ffe62262bb82011568b4bc67d64b2","sha512":"d1a2159808eff2f6b9fd0072bdeceb566cd349518779f82a9166afb4a5c879c2fc51c523794341a33e9e5d784bb0a5a9ea0294e9e07c5d575819ef951b69aaf8","ssdeep":"768:IcaczNfC9tDfLhOgCk2HVAtL8VWbxJbOL6Cew4fxNpT8hxuK:Icac58zLcLkuGbqWCe75jwPuK","tlshash":"16f2e14fb3792174723d7d8b686cacbf6a473215b6bc1c4e44b37121a697f3819268c2","first_seen":"2025-12-24T22:39:16.389829Z","last_seen":"2026-03-11T15:08:02.991413Z","times_seen":10,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=XybkL68cWVOJMjxShBLr0a4LPIqimObwv1Zhc5RZKY8-1771942971-1.0.1.1-6K8To8VR.a44l9ZqQAlxc7F4DzHC0jGXc3E19ZB.CH8kqknTnjW5qioPVUo9sfPp.E0AuMpctQPPrm6pU4GsbY_L.ftyfH0qhMacx.jaE0g; path=/; expires=Tue, 24-Feb-26 14:52:51 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0CJFwhcevgp1UVfh2u%2FgKTqTzwrCx967Ok%2FrUBJgY%2FR4YS1MwDerStYY%2FRMMsLiJTZQbUwE93ZFY8bbNZtP%2BYA22cabO1fvz6IGyxpiDA%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e14cacc1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2222,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ce3902f4bd7f8f07ef19311509e56859","sha1":"4f8dac69410d4feb2f28963976a11de31833bd47","sha256":"e95f8590f1b24eb82a9bcd46e69bae80f375da5a9d273d5111fb19ec40fce0ff","sha512":"ec76ed398930c6fdeee5bf27adfa17c668ef4d344e8ceb01367f6f2251bc83502c04f7cc4d2cac53b3ffe176e1c0b850a266fc233aff454e7c5ec42b1480d1a7","ssdeep":"","tlshash":"c7415933b02c98a65b443b40b4c7394a94dd54c7dc0b8570dc899f8d86eb6298ad32d7","first_seen":"2026-02-24T14:23:51.361484Z","last_seen":"2026-05-14T23:49:57.392496Z","times_seen":49,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BjgPl3QA5IK1JuZYhXx185roQriMTjA2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrIIig%2FF3zNblMoRpIVUpXLiNZmPyQGQBpAV5gVwbRGFRAp8yYbCmRYakvXG8cWpjY9O8qoPn6VBE0%2FINv3oFMR7UyRwWNd%2BbmaDNRiU%2BzF%2Bb8UVZlYEBdOSsOmJOg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: IQ-aKaMv472pHBFBSfPY8escpl97A2vj2EZV1DPDyAL_wTODQFLoew==\r\nage: 2907\r\ncache-control: max-age=31536000\r\ncf-cache-status: REVALIDATED\r\netag: W/\"a2363889186e23777b4b704661794f3d\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e152a76b80b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1831195,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36723)","md5":"c466e082c7495db98ee1686d003d2484","sha1":"ca5c126c2d6e71c98050cceea0e3ff60d908178d","sha256":"36ae79bf11f0dfe815aa2e68937b7aba68950aa0b3d80ed783ce3aed9163058b","sha512":"7da32c99dedf46fd8f78fd0dd618f9d9987d5b831eaa3d6f6066cd8d6f1b4a5f47557c4826bdd27859bd5974202cbe9af75ef124c5a76117d9ab8b37d5e266a8","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJya:xGBzd6BgJn+wT8ZI3I5Z7yq","tlshash":"16358288295ef7500957e0e7e03b2d08d22ec635f847a4409f7297b36ab2357e3ade15","first_seen":"2025-09-20T10:36:49.604845Z","last_seen":"2026-04-14T09:08:05.833697Z","times_seen":46,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":4,"dns":1,"connect":8,"send":0,"wait":152,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 628\r\ncf-ray: 9d2f9e1629ceadee-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfaRKjj98wG78-Q94g8ciN3whHfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1019+1 c=0+1 v=2025.6.1 l=628 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07a8ca43077147f4b93899efbe31ed8d","sha1":"bb87180866adc635991e4867c8222fc4387331ba","sha256":"b22b238c613c9bfcf13e8340213b734fea3bd0b9b2fe67648e3ba6decc104e89","sha512":"6d9a2235c65c224e78bd78025eacb630cca9bc9c4a838fd540de031cca2e8c442460eae186359cb98dcb1f1eb867414c6b5b77c78a2f3e1be6f6f36b254111c4","ssdeep":"","tlshash":"90f062be0d21c29ae04842881a0c6c5da472a9b9fb4424c4eaa5f7a67c0319433a54b0","first_seen":"2024-06-15T18:00:08Z","last_seen":"2026-06-05T13:54:52.452366Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/CasinoJackpot-DoBzeOXX.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/CasinoJackpot-DoBzeOXX.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"37a-3cN/qSBv9/JMk6FQccXMrzxKN98\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8Ocd2kV%2BhQw4EeKaJxiEkSjX76L5pMVNCkH%2ByWhA2swDOuoP8pZ0F8dh9YqhcBisS9G3AUd%2FivvZBA%2F8dj7QOH6ZuYTFTs1Nu8bN73CNQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa2c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":890,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (889)","md5":"fce9b3cfd468eed48d05649525ff5ed8","sha1":"ddc37fa9206ff7f24c93a15071c5ccaf3c4a37df","sha256":"954d2d5703bea36e3674bc3c5ff566b97db4ada799205a18ea5f83d0baa9d458","sha512":"6570def11e173fb4563ee7a075ce4a1399ffa3b9477e08c1a3102b8e78091fc7e926575fda1e152fd436cae5999b5a77d6b6484d6ed5c93084dcc6e02c63a171","ssdeep":"","tlshash":"b1110087e01bf3f4c8dc58e540a5955f0b2e2f7af72081d0545c4b385a25857f56c7c2","first_seen":"2026-02-24T14:23:51.364102Z","last_seen":"2026-02-26T17:03:57.805473Z","times_seen":4,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2444\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7784\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEskOIKWizVhJrvVnrMlrV9p-fmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=1041+5 c=2+2 v=2026.1.6 l=2444 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\ncf-ray: 9d2f9e1629d8adee-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b44902a539b26f42ca501a8fc2eca9a","sha1":"c9156f826c8af47c13c4e95a4953987d2c34a74f","sha256":"e1473cf463a4e737486548692bef2ff33e1435ccb7b1d4d9e4428371b57a2666","sha512":"2dd9d9716c420f8d993a738149c8ed8a18bb8ee2034cadb05c3743cbab9ecb9eaabfa064be34e53fad571e80eeebdf7292cb9811a369dd67d51da327fd80fef2","ssdeep":"","tlshash":"db513db78f5778c0ec5c0e4b60017a48e401be0053f0e18caab51dd2069c629d371a8b","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-06-03T21:14:05.448837Z","times_seen":1639,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/5/10072.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/5/10072.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/990.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/990.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1308\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Jun 2025 13:05:20 GMT\r\netag: \"67fb94a38e5db1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 08:04:25 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 368307\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=.yRfXHSopTA2r.KZoqUybYJMp2jrk5runu1E.KAC3Tk-1771942972.8118286-1.0.1.1-LL_P.9z38KIIrRp5DwT6gjb3d.vp6YFbC8MeZHMuq1OPI7W0jcaWcsZORVDVZzfREGll0PKZKtwHepumYPlDEZe1ihDnYjCIqq7s2mTt7ys8gmHq4R8YE3xAwhKCfObi; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fS7JQSwwIp8jP4UpL92ve23XEjyNqH9D2rCPYDyp5t4U%2FFrQ%2F4hZfGeaqWSDqR8XGFdT6yI12p%2B1v7n3HAxYnaT5S3ssm4lpPvs7Khl6Too%2FmGAjMXeLRlS000%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c0953c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1308,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"45d7aa33ea6c4d4d3ca56a51b54919a8","sha1":"9010da5f58c74f27c525afd0ffb007e939e21dd1","sha256":"ec16c9aeb9b132a272211bff652b69f35ae48169e96503bfee67f8caf066a495","sha512":"bce7272cc26b6b6890e64e0df65a87636a97008e987807988c9b3a4bf3a9ad389660e0186c793668afd6440ea4b72f3f824cc993b6caeb8a33b2c1c564bf98d5","ssdeep":"","tlshash":"1a21fbc314f70a7d7c97269766fb73070ee1fb9a009e908114bcfe720141e1429c6724","first_seen":"2025-08-01T11:46:29.98044Z","last_seen":"2026-05-23T15:21:21.687113Z","times_seen":216,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.eu1.segmentapis.com/v1/p","fqdn":"events.eu1.segmentapis.com","domain":"segmentapis.com","tld":"com"},"ip":{"addr":"52.51.51.56","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:57.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"events.eu1.segmentapis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sun, 07 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6E:BE:8C:EC:AA:F0:8A:50:90:0A:E6:C9:91:BD:26:DE:D2:1F:39:C7","sha256":"F9:2D:36:7B:E1:0F:B9:06:71:4E:07:2E:BF:99:BD:75:4E:49:9F:E6:06:C2:E7:98:EB:1F:A5:83:10:CB:27:41"}}},"request":{"raw":"POST /v1/p HTTP/1.1\r\nHost: events.eu1.segmentapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nContent-Type: text/plain\r\nContent-Length: 786\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":786,"data":"{\"timestamp\":\"2026-02-24T14:22:57.926Z\",\"integrations\":{},\"type\":\"page\",\"properties\":{\"path\":\"/tr/\",\"referrer\":\"\",\"search\":\"\",\"title\":\"1 yeni mesaj\",\"url\":\"https://galabet2647.com/tr/\"},\"context\":{\"page\":{\"path\":\"/tr/\",\"referrer\":\"\",\"search\":\"\",\"title\":\"1 yeni mesaj\",\"url\":\"https://galabet2647.com/tr/\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"locale\":\"en-US\",\"library\":{\"name\":\"analytics.js\",\"version\":\"next-1.81.0\"},\"timezone\":\"UTC\"},\"messageId\":\"ajs-next-1771942977926-55b9bac8-5426-4209-af69-04bec6ee0c67\",\"anonymousId\":\"b9bac854-2682-49ef-a904-bec6ee0c67ca\",\"writeKey\":\"lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D\",\"userId\":null,\"sentAt\":\"2026-02-24T14:22:57.957Z\",\"_metadata\":{\"bundled\":[\"Segment.io\"],\"unbundled\":[],\"bundledIds\":[]}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\naccess-control-allow-origin: https://galabet2647.com\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"90749a50019a27e1f32cebdbaa7a1bc1","sha1":"8329e3339f928f8591024bb0f938dab99c0ad4b8","sha256":"12f71cb993958eefc4bdb41d7dbbda490779a9c7aba448f7be52bb63912e0254","sha512":"b3959e671f729eda8aba59886df18c60ed5a768a3357dc09b29069b0da9c9fad7073d0072dc47f3ecfdc945351fe82ad3b653dd5d79d01096e5ae8bb42af2bcc","ssdeep":"","tlshash":"b8700022000000b200a0b0020028a802a8a08c0880820028c00a000a8a022802082008","first_seen":"2023-04-06T01:58:03Z","last_seen":"2026-06-06T11:05:01.156724Z","times_seen":6911,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":173,"dns":13,"connect":37,"send":0,"wait":36,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index.BJU6hB4z.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:48.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index.BJU6hB4z.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:48 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7f2ac-bt5pQaBXQ+YeczGTIrYKEv1cp5o\"\r\ncontent-encoding: br\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLQEP16Ke3%2FG0hAX2Wfmrow%2BUYnTjlx%2BsybthTmbdYjO1NFASY6fwUcczuIg0qwehWR6AbpXpKGApUhAF8ozGH5BR4UAvT4QzZ4RzeKYnQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e017ff71806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":520876,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (43016), with NEL line terminators","md5":"da61405e6776f6154255355d0a9ce506","sha1":"89f3c0e695aa1a4d86a752d127a93b8d5d370518","sha256":"d2207037ea2d302dfaef88eff5f6faa7f95cf3a15e52a6806abe72aa12f8b7e0","sha512":"8a4e029f35bf79598fb89ba695dacd191f7124672aba6f891aae8b7a9fbc92a5553659a78faf6b19abb41a72d1f95530b7102d0e26a44b89fb5f1517dd405974","ssdeep":"3072:ET4qmal/L6Zt4llM2b+rtIZpbTikkUVnseBr8SaQFr:Ecqmal/L6Zt4llM2bit+kcKRs","tlshash":"c1b4e9a2968822f87b37d61f93c5b39cb014f061d9621e6ff19a612dc6d27900263f7d","first_seen":"2026-02-24T14:23:51.368608Z","last_seen":"2026-02-24T14:23:51.368608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25320\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:58 GMT\r\npriority: u=4,i=?0\r\netag: \"69401512-62e8\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=Pj4D9Egf.z8Hckq5qDo9d.XibXJRLRwEQ2cNp.fYa4k-1771942972.1188338-1.0.1.1-DuCKkmQN9yeM5U9t2xAY06J3eETWkkvcBRq_ZzGGQGMqEc0FCQLNTP1WzstKoI0OAgsH_tClSO2I54i_L3j93X9hS9ug4Uq7BSP0AA2m.1tD_uaUg_oSeCvfrYxT_WKg; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6y91zX%2FwWmp8pidb7hGoXhGRyAP5s2Fe2HorsvTpT3fiG%2BFGFPYGgcUWJ0wuzYkRCVp6Roz3HqOyAdgEmu%2FfZ%2FdKbSP%2Fqe83fM%2BO0yhV7NR0hNIPyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17bed92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":25320,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"acc869e91de526af3cc37efa5e7cd714","sha1":"96a65c3c5c64e544be0a75f42e7578147811db69","sha256":"57b2bd8ba04c5fc5617770502b74fbcbe449dbb22377f04e8042147dcc5da51b","sha512":"d35b2e9c750078007a66162e0b7956edb0b85f33f4e5fdaa25c83b7a4bbbb8e7540ff6eaa60d012ba904f0254bf0d35ac531b422eaa44763a785f64f01442722","ssdeep":"384:2AJyeaoQmlt01QNg7DPEqZK5Ud6nw4Gw+Ma8iASXoK41z+I/gYbz0n89B/EV:ZyeaoQmlS1BL6uwLHSYK41+Hc0nce","tlshash":"82b2f1b0154ab6d3708548666c0d3e9017ce8f5034ae0bf4789020229765f5fe4cfb9a","first_seen":"2025-12-24T22:39:16.063814Z","last_seen":"2026-06-03T04:20:31.844925Z","times_seen":63,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_aff4011d6c5525eac140c93daa9b705e.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_aff4011d6c5525eac140c93daa9b705e.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19502\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Oct 2024 12:45:45 GMT\r\npriority: u=4,i=?0\r\netag: \"66fbeef9-4c2e\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=zv8gRjSk.aDuY894N5j_Pb8aFGRW3oH.zi0Min9u.Cs-1771942972.1259136-1.0.1.1-DNppfmoiadhfl.prlw55W1zyb0LeUpS5dKH8BtFuI2RIAKoxAWWh989JAQo8zQVF1wwQyu1knKzYgCPYRK2GNfKxpqR7CnKsKrh6VzNjVn7llOtlBlxRnWIUW0muz6my; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSv8YVpBBYg5Jmf4eKoXJfyvwlfBsxlyphHjS2bWeWS3EQHkkqbSIGf8WfnLLloQoXzKHyB5%2BpRARtWDkLWhr%2BJeIPEasilRcJAdnZ%2FBUwtkOugOwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17cf142efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb8a2fce829b77a41898f77b8044a7d7","sha1":"ec930f3ad570b2b82de7435f403294373b9e08c8","sha256":"eff975d202b8198412f6fc60d2a9d0debe36d1ea2a413caba2b3ff0fa2146327","sha512":"b4021d2ee5657abe95d0115e5695c124cd500d20ab1d331c64ac4a416de874bf3cf83e9d79c50d133c843df31a1c2dd39a2188256f920ec027bde67a051a05ca","ssdeep":"384:jTMW+QrwvaBEDdPExxNOAZA2MSjnzJAkp+4avBq59InjItQua/ctq:sW+QrwvaBYPE3WNszJt8TBznfB0tq","tlshash":"d492d0f2949f7a4a5b93ef328c38c2011faf335d0b64448461c1f69544b495a4e6f9eb","first_seen":"2025-12-24T22:39:16.161133Z","last_seen":"2026-05-14T23:49:57.377188Z","times_seen":52,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/983.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/983.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/8/17475.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/8/17475.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1674\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Jun 2018 08:36:07 GMT\r\netag: \"2ba64be63a9d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 23 Mar 2026 02:19:53 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 302579\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=jzjLQ3rHOGMUQE4C_gtzvojDSM9O7KARrn49TanMRfk-1771942972.796171-1.0.1.1-76gtYd0qFpbGcvpJ9XBqtk_rWjttJoV59rDbSij7fQiMdNjGtHQSdWAkS233Pm10Q0rW7HaAR_oyHCZx1nwB8tFfKOryX_eycIXLXwSPNtiKVSUhJ3t4wnMHOSPcRVEX; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ixPB7Ch9F0BOmK7I9evOAplHL%2Bp5w2%2F0kOD219Ku92nrZWm36mJYI1o1vlWL0lFDSFWdHOxyO0SpbkdsAs3IXL6QpNE%2B7Qti9BmVdG4NJxNRh7uA1i%2FnXBk%2F2qk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1bf8d3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"9896ca015d84756d6fdc29289b09740a","sha1":"24c64eb41719077411e5e020f6adfe90ddc8cadb","sha256":"ed11a6ab07d183d2e57f67366b11db4a94e67d3bbb838cb8624df1607415e258","sha512":"515e5a9dfce44d958f40d0fd09b1f492de6a4d24f6c6833cbde4b1b36534239425156a15b09b0e7a65d08dfabb56fa4fd9d0481f25f9dc4e38f15491aed32a04","ssdeep":"","tlshash":"a7313dd21d8aac78b38c004673512a051afe06f324075dc9c9ef8b00779136076227d2","first_seen":"2024-08-19T23:09:36.25489Z","last_seen":"2026-05-16T13:14:11.740822Z","times_seen":187,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MjY0Ny5jb206NDQz\u0026hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=j98xhwu8o4t0","date":"2026-02-24T14:22:55.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 12:43:24 GMT\r\nexpires: Tue, 03 Mar 2026 12:43:24 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 5971\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-06T12:08:43.635028Z","times_seen":646868,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/menus/app_menu_751_tur.json","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /menus/app_menu_751_tur.json HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSt2qSiHoSKIlFwQS3nkgBMx3Kr8aCAMpLli7bewuUdxD600XnwOoLw8hWjYMhjxjBy0cQKippDbmwItZ3IDnNHhqMp7YBR2ieJo3luH3w%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"1adb-YjWYVQBaNZGhb0TdCpAaYdAleUs\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e0ce9121806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6875,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"10f99f9f3ca21ff632f0a7e6c695f814","sha1":"62359855005a3591a16f44dd0a901a61d025794b","sha256":"05b71da83b4e86eeb074d6632e54d0c53ab4743388acb6a3b0f1af2108b4e9b0","sha512":"37828736594746232c42d7939d0c3def4c34dc3fd7c503ae3e7d96684fe93a9dac4b2243b8d5c2a739d52ddc10d567c7f1cdc7654802a84539fa57077670cee5","ssdeep":"192:SSkcUlkiU+kuSkAUdkuUQkZUckTk2UUkoekIU1kvkq/UKkJUdkpaUAkvSkGUlkM9:Svuxuvi7iwbCCMjHxvv8MvRqzaKTi","tlshash":"3fe10702f01d5976d30c3e00bcc76d5b888e50996c9d19419d4d8acecbd649fdacb6db","first_seen":"2025-12-24T22:39:16.190871Z","last_seen":"2026-03-08T10:47:57.851769Z","times_seen":9,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Odometer-BX62fBgg.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/Odometer-BX62fBgg.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3ccf-ipesN87ir5lKz7/J8s8U41JsfE4\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksvWKpYB8QcKPhfnvFXlZdwcBAbEfLo0UVd7owYs4MWy34jbSgAg%2F91uoUForPBTdatstLCt6pYrEkwoeOaUVUoLikjodf6V8uQkbCAsRQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa281806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15567,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15566)","md5":"55a1a4b91300616965d78a3641eacb56","sha1":"8a97ac37cee2af994acfbfc9f2cf14e3526c7c4e","sha256":"ffaf29e279a90410cade3f3daa9ef47a21684c027c281f7d196cac20604a450e","sha512":"b61b1b1f088df62ff5ee4e38e7ab6b1820a320e3fc2c0c37415ff1d9bdfeafba35817b9b62cf4b731f95ddb43487dc610fc89c1ae16de536a04714d3062fe67b","ssdeep":"192:2FZd7KNJtQae0S09YJFF2UXxx3HjmHHXpkauLPHMBNeSYpkYxSBrC7TlzUgrPND:2cVQae099YJT3DmHHMPrFtUhGxrPx","tlshash":"de620a8a796272344393b1e015bb0609773f9d6a3808405db67caeda7e32c19d12bff5","first_seen":"2026-02-24T14:23:51.358719Z","last_seen":"2026-02-26T17:03:57.766878Z","times_seen":4,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/JackpotPoolDetailsItem-DOBnH8RK.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/JackpotPoolDetailsItem-DOBnH8RK.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3803-0t3mrE+I6Wl1MbazqG0GOCgKFrU\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oNH1CqNxJWWeTKh6E2e8QFpGwspQf0IEbj8DlykK3t4LXdZ57BVV0m7Mkh3HL81XcFNBQvwx6gGwdONEmjCvlrs%2Fxt%2FD0NzRDqiAEiX5ow%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa2b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":14339,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14338)","md5":"3889e481ab1adf9f96a132846c0801d3","sha1":"d2dde6ac4f88e9697531b6b3a86d0638280a16b5","sha256":"64d0d773fcd389193d64f215cd0bc6f25d7bccef8282d0fcd309aa7298595108","sha512":"b4e0162884cabb644a2fdd77844e44fecf63b090206b2739478fe152ec719ea2cbe19be56520249c097335a5951319d25dfcb62c62c23c3f400b083fd9578f0c","ssdeep":"384:xm6srKqqF3EjFOFEGOpOpeHMtGRxeG/PcyKxV6baPFFWB:xmB7CEGOpyts/UofB","tlshash":"5a524c05f012f7edbca954f7487ee0687a5e1aa9c71808acd1bd6c313d2c455760bbac","first_seen":"2026-02-24T14:23:51.244561Z","last_seen":"2026-02-26T17:03:57.821746Z","times_seen":4,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/PromotedProductsWidget-DSoPzSu9.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-DSoPzSu9.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7a0-RzNYavmAQgZgwaYozgIKNiEGsW4\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EyI9Xvf3Wyzx95d26YD86h08Vt2CIbP%2BPDQQYzCdAczBR0ILxXWFuYjbDJ4oj2ln6GlHXJVi3W3yT7Z5aFS5Yy4B32Kp4rUYcBEB0M29AA%3D%3D\"}]}\r\ncf-ray: 9d2f9e11ba3b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1951)","md5":"d25f49c76bf72dfb92284c6c8f2dc43a","sha1":"4733586af980420660c1a628ce020a362106b16e","sha256":"2ac7c3f2e2427cdc73697125a1738aa01a5fe580bbef638ef5212dd8a5294adc","sha512":"d86d81adbadb6bf8b8413a53dd5a04b75efebeca14413a687d0bcff91e54809a670e26d12566633c3048257c0e7577073444220d4b0890e9ffbdf6464d43f84f","ssdeep":"","tlshash":"d2415443d535a2b9f23a5dec264210c43c167d34d5b148a5a0b7bd1e9039826fb92ffc","first_seen":"2026-02-24T14:23:50.993184Z","last_seen":"2026-02-26T17:03:57.830859Z","times_seen":4,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/useJackpot-DIZu1EfL.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/useJackpot-DIZu1EfL.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/JackpotPoolsWidgetContainer-CG5gkeJb.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"529-bFoXraFaLuEIo1H06Ma3rbmpYPg\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFgvkvM3MR%2Fq%2F1lI%2Fg9Gjc06UhcrFuVj0w4t%2BqcXzhpZbNd7TVTeEUVh951NesEsU2HxD2%2BcytkD0WocgeAwdmilqXs94NzHmxJ3YbXhBQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e14aab21806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1320)","md5":"f51e23fa741958fcc0acdce4b55fa46c","sha1":"6c5a17ada15a2ee108a351f4e8c6b7adb9a960f8","sha256":"7f255dbd2ebc95805077d7472e6cd99de2b6a488a4b6de2e3a50d6fa20a29d52","sha512":"2208a19286c5e3159732a8e30c75655fbd4bbd9fbaca53ea603e91996901533b4fefb57d23a5e7a859edacce3dfb03b856226dbdf2ac6d159600f466a254d577","ssdeep":"","tlshash":"8621264e5049e2f8f48988f20022537b7b3c3f29b590e0b094ed5d6da269d96fa30a46","first_seen":"2026-02-24T14:23:50.971725Z","last_seen":"2026-02-26T17:03:57.940737Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/CasinoJackpot-DoBzeOXX.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/CasinoJackpot-DoBzeOXX.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/JackpotPoolsWidgetContainer-CG5gkeJb.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"37a-3cN/qSBv9/JMk6FQccXMrzxKN98\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPIl6FP0oC7XV5Eu6Pr5HZGUkXETFfIpxFBS%2FJiLRsPfNjyvknslu6nDdIoEQdlM7rtsLUY7h%2FAsLgpRFQ8U7vk%2BWH4Oc11vFo%2ByDOlpkQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e14aab41806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":890,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (889)","md5":"fce9b3cfd468eed48d05649525ff5ed8","sha1":"ddc37fa9206ff7f24c93a15071c5ccaf3c4a37df","sha256":"954d2d5703bea36e3674bc3c5ff566b97db4ada799205a18ea5f83d0baa9d458","sha512":"6570def11e173fb4563ee7a075ce4a1399ffa3b9477e08c1a3102b8e78091fc7e926575fda1e152fd436cae5999b5a77d6b6484d6ed5c93084dcc6e02c63a171","ssdeep":"","tlshash":"b1110087e01bf3f4c8dc58e540a5955f0b2e2f7af72081d0545c4b385a25857f56c7c2","first_seen":"2026-02-24T14:23:51.364102Z","last_seen":"2026-02-26T17:03:57.805473Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 316815\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e1afa384453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23063,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-06-06T12:51:01.62898Z","times_seen":34427,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/4/9486.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/4/9486.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1544\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Jun 2018 10:08:20 GMT\r\netag: \"23e79c9d7e8d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=FCAWy492EPVjLCl.8XJnHDSe1cdvWBvmiA1NDEh9QIo-1771942972.7988853-1.0.1.1-gfY_tRl6YGF0F7Im8V1oDGv3sf8BdgA2vijo5IeTVB8LBSfngfjcV_UC1ePWUGF88H0FXgM0FslCaMArZztqpVjO8ZqqEroii2jqx2.EJA.zBTM4o96mKLpO9TaTM8zb; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DflPiLCSxxHtJDuqvYgAuPm7BH3mQnoVUmTZMLEpVTWg7JRk8MW1jlB8GibXFEPIX8fQTrH7N7SFh6pWlvjGkMselEvOk7tDzY5cyzrgFRtWrZ79EfWRP358WpI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1bf8e9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6dfa113d594f80bfd62d51098f41c2f8","sha1":"afdfb56ff86ac45175b7b341bf0350273dfa2c5b","sha256":"d5f25fd69ba82b1dae625f6250641449d081f005d4063d152f9353e13dcd77cd","sha512":"0ead99be2cb11ceb6845b8e3bec10e35ae1844f7ac9a69ce1a4e8bcb22826bac5b85bce62c00a490bc1e6e8c2ce626fcba0baf5ea4e86619c7e0c58131323ca7","ssdeep":"","tlshash":"22310a8ec077bb08c50d77ebf72149251ccf88d84235f41b4433c51043321e2798098c","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-04-13T08:30:40.842748Z","times_seen":21,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/LiveCasino1.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/LiveCasino1.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:11:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=KwBEsAC.ai8STw7.aapQmu7.JJG.JLwojxq0zKQjnSE-1771942970.7074149-1.0.1.1-_7sh_fDcA1BNibmdiFaafAjTxL0JwsxuMJ.xQIaKzJnQgsdpn.fYhJmdy4XGG.6iG_sjCNbO6RKnBgORX07vQkdgnOaz7ogtfp_z0.2so3nlc7CwAAeNXpi6Ik0hctHU; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QUGz5ZUruvVN9ZeOk23fhZlv%2B9C%2BXqYFqWaDKkcDBKBLGxWihc0mazRB9X4GrHhrt6UqqPNMjixDAZn%2F2IaFAYnu7sMS4jHqJX7%2FK6YgkQ9Ofz3wA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270eb-5d7\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ee9c176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ab76ddacc7177297110531bdc4b7b09c","sha1":"9e3a3721140685f8b095694cf6690ebaeac63278","sha256":"67de7a9984a8f57a460e025368985daf653eab425caaa5482cc1f3af17c43104","sha512":"16ce040d64e0b45e159c5a0bc2ee0ddbcffdf3405d0ae5dd70b5d1297f657f9067b8cb03a1e30811720c804e7997d3c57815e9b3db2ace852941fb2a7900ea13","ssdeep":"","tlshash":"ce316de876b0ed7c5c9d3a9ea7195d542c9ede6921007ba5db0c8c90c3cb4089759c8b","first_seen":"2025-08-01T03:40:47.847838Z","last_seen":"2026-06-05T06:21:41.274802Z","times_seen":1016,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":126,"dns":46,"connect":5,"send":0,"wait":94,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/BetslipButton-tfWg31Ws.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/BetslipButton-tfWg31Ws.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1a2-qYBBr8bkBbH+tRTUJEF4e263Fvc\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZVmdU2IIR2g9a7hDz%2F9I4ADQtMj0IXxHJ2uGpjTwwFQE3hoXiG9N0cJ8Sq%2FAKZ%2Fn%2BgOKxQ8iKkhv8AO9J0eww4gzjAheGvPcfLMM0V0qw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ee9791806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":418,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (417)","md5":"3eac9758e461b39157cba1601935dac2","sha1":"a98041afc6e405b1feb514d42441787b6eb716f7","sha256":"c93e12cd7a9021b060876cbe4384088c2c2183d1617cffb509a17dd883f51d04","sha512":"a91e554873ed7ff7c4ae676e2fb3fd11f331d987f097d1b82f7ce55e45d95b1e99c534efee805ee87f54a34d314b8158c9c96f8887d987a4df027f9fa1c89d1b","ssdeep":"","tlshash":"16e0ab478888c2fe07425e82110682123c2795bca250e69180ae6c657e38646c81e52f","first_seen":"2026-02-24T14:23:51.354145Z","last_seen":"2026-02-26T17:03:57.763051Z","times_seen":4,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/Odometer.Dtmtuu8d.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/Odometer.Dtmtuu8d.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"ac6-Ca9TICZiffJinxqYoEnujFAZRjE\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpPdGlyNiAZPIhRzfaKDGbO0Ohhgw%2FZZt8hOyLueou1klaTLw%2BCs%2F3IB%2B3DxuiefJ6M%2BeEg4uwmgVtBJIU6A%2F6iziHneSbvnKB8G2C0SHQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a1a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2757)","md5":"e60bd0b6b84d162ff84ef731b11ed036","sha1":"09af532026627df2629f1a98a049ee8c50194631","sha256":"8d2a9d2617a60055e91c6b16f4cabd14851836edec7bf90fc8760e1d31a39df3","sha512":"a85638b5f89d49c50da5f9dc0cfaceec033c45f524a51bbf266fe9cf67f9ce63ef157745964b9ab7c1811f8e2f2d2c5d6348efebe6818d6fa5beb8291e36c725","ssdeep":"","tlshash":"2451e1154f910364633a7906b5c81b51bfece5415223c58e7329a447cf83db9e398e1b","first_seen":"2025-05-18T15:21:59.195484Z","last_seen":"2026-06-06T10:12:11.676053Z","times_seen":245,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/CasinoJackpot.g_xeWz8w.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/CasinoJackpot.g_xeWz8w.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3587-amjiCbZVXAr8Uu2DM5Vw/mgdGyM\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aoipldt9340%2BIWAwSMz7ErtsoFD7M%2BR4N8MMx9kKPJGRwdkx1pemYIir78QeHuRARvBz0A2QEQioQRVhVICL2GEKhmn%2B%2BNpE0qwpQQ2SBQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a1e1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13703,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13702)","md5":"75632d4973e29ce182d8caa61ff921e0","sha1":"6a68e209b6555c0afc52ed83339570fe681d1b23","sha256":"a00dbef5dff141c39219d43bed81880c18357edb10320a1bf7311941a3d958a5","sha512":"74577b4bd8699f5fe0e108d2f3428f17ca399c3c1e3fcf45e5f828060fa346155abb85dd6c40fe1a0e620ecaaaedd896bc6d9881e213c9963697f79552a3c97c","ssdeep":"192:5aKQrrxX/YyrspdNl3qLq/1R9z7g6mbftDxzNfDFDfhf3fOfNf5flt/1ttTptVFd:9UVwVELPh+EcaLDRdng","tlshash":"1652fe17656f33b829ef653726f0e3cc9a3c4879c7126664a8d1a2194b8f9b006717ec","first_seen":"2026-02-24T14:23:51.399866Z","last_seen":"2026-05-17T23:41:09.463668Z","times_seen":6,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/UnavailableMarketEvent-wtkKsClH.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/UnavailableMarketEvent-wtkKsClH.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"134-UhhjmnVS/fKpCCkN/S6cRA6/3rQ\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sHXVaBO2723C1%2FBxf3CTmTe%2BzFiIPwAiNgYvx7RTM3eE%2F11Y8wv9XWMn%2BuImoZWZvKlchuH8PFrgRSEQTohlypfEswF7ErMsmpgh1GWSAQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e11ba381806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (307)","md5":"98b9533851974b6ee03f009832ec9b0e","sha1":"5218639a7552fdf2a908290dfd2e9c440ebfdeb4","sha256":"9abebbd29b2f027411a623d5b140792a129165b070e618f803c4257da6978b95","sha512":"0170e9059b93228cbb5e6b27ea363c91b851c327080a46e85a96739c2b51562f56ba0c25f7ede463ff65a12a3f5ebfc832261f11f0db5e0eeeacaeec2353dd56","ssdeep":"","tlshash":"2be0cd0aa104bbf6d5255cccce3a8f4da90307b5d7ea45d3d1f951281b34265390ee96","first_seen":"2026-02-24T14:23:51.155949Z","last_seen":"2026-02-26T17:03:57.841108Z","times_seen":4,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/TabItem-zqZt7Nh0.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/TabItem-zqZt7Nh0.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"19d-L0tIOzDq25CRCzGLQ8i2iurkajU\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYKeT5RCGz2HVeyIr7kvBwYsD4bAKTYWed%2BgkbAGiD7i%2Fvw3dK8W5Fej%2BPZhngsJBaS2biw71IRiU64OYfEnPvLNUpQesdHcySjLJfc1yA%3D%3D\"}]}\r\ncf-ray: 9d2f9e12ba621806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":413,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (412)","md5":"7399832e6d7898196fe5a4b445f58dea","sha1":"2f4b483b30eadb90910b318b43c8b68aeae46a35","sha256":"4d9195a229d1433eb80aa41cb3d5a1d41e315d57081e871c6ba0d6069b42159f","sha512":"103e8255fb328e1f8ad8edd4ec6dd2a1c36b1533e03b5286272b5f2f6c53ced739ea46c254fbd7e5008e6475b3e81ac6ce268df769c0c60c8593546176533ee0","ssdeep":"","tlshash":"25e02b42e020f3f5982b84d6d26ed4c7761249dcda9588e6e0a22054072e521fb4ff8e","first_seen":"2026-02-24T14:23:51.086077Z","last_seen":"2026-02-26T17:03:57.833559Z","times_seen":4,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/1530.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/1530.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/jackpot-jNbP6Duk.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/jackpot-jNbP6Duk.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"178-HTAHDn0O0IONuuIsgcQUMPs9DUU\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oI5DqBWec07H7xDa6UNMz0PaSmVIeLxQaJ%2BG9%2BYszt8tSbtmAkQet%2B%2Ba9sjQIWeeVKMnH14UAGywFKdFMuia%2FohoVjbxOTJgmaOB08zywA%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa271806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (375)","md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-06-06T10:12:11.700794Z","times_seen":97,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/983.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/983.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1054\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Apr 2018 11:08:15 GMT\r\netag: \"9054b3b960ced31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 08:04:25 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 368307\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=XkOAqcwD7AjhvYlXaDGoJYFP7wYDp6GgoX4XKaykVkY-1771942972.8014452-1.0.1.1-t54zeHJrrhb7Cweh0wjtSG.LvtGdrS3tvYCOC1gFi8fBwM9b1HURy3u3GdmaXvxFlwpS8yWGj.GzUk_vNe61GgLJTy0ATXtiHePAS8AjuICsVlsOf5xFbKdrwFM1hI.u; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yU3G5NwJ3Db%2B6Hy4MN2cEkdemAFRqjcH8AOFxAzvqeF3IfaTnZ80tRNEXTEv98Lpr8MGnuLa0XwkSQ2g4arARpDpnWQs6USZKyBeiP%2FhUmTfYU2YTp%2Bqi%2FDHUlY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c090bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"06f5364ada1c16e44272963e806a6da9","sha1":"9f748722c42498c715ef980a010cf62d2ffb061b","sha256":"142415f81aa19debb62090912edcd6573b8552ab7fc6dafda08308236d55b392","sha512":"08199989237bf9deb8420bae6a142656fd36de7dd947cbe882f4f5662db9fce13d510dde51cff5accf7bd307938592687627695adabfeb37e23c4a5daa4788a4","ssdeep":"","tlshash":"3411b9f30b9dbaeaedce2c5c5890e42771a502ed5aad18007d57d3383694c546421f52","first_seen":"2024-09-20T21:26:21.337228Z","last_seen":"2026-05-23T15:21:21.712319Z","times_seen":240,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=P8cyHPrXODVy7ASorEhMUv3P","date":"2026-02-24T14:22:55.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /recaptcha/releases/P8cyHPrXODVy7ASorEhMUv3P/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 367288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 23:24:14 GMT\r\nexpires: Mon, 22 Feb 2027 23:24:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 17 Feb 2026 04:59:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 140321\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":861770,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (581)","md5":"205fd253c40be836ca198c86ebf9528c","sha1":"1efa4ed91199a039607be80c80897986e9eff572","sha256":"e0a77de1f1d2ffc5ea5bd48a92a9f465126fdd7c87e433962f55966c002ba111","sha512":"ead0b69f1ed577c3a9f70e534539868909946b8c3b6f703c8d38d2343c274afeb52d25dd5f0029b5ae28e8682f7c153d1c22596f0a2693cf880b76f590b050ef","ssdeep":"6144:lm3CPpl2pfyCUg4ZkHWOJN8Igixk5RtrsgKnAHWbacB5EVjOo1E73mjRHuGMy8ZG:UnpK5lM8mxk5DB2bv5WdK3LyHrGYia","tlshash":"6f055ad8721679614332bcfa64a31019a33e9666c89c4c5eb5e5c6f13ff084870b6eb7","first_seen":"2026-02-18T03:08:10.402444Z","last_seen":"2026-05-31T07:12:12.631707Z","times_seen":12048,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/tr-DNMx9v2O.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/tr-DNMx9v2O.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942969674; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"5b3-59/33iOLKMEO4likL9vPTINhKcE\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfkMnQRpPluSeXc5LIoBOGyAyDzsj89l%2FXXpSWz65j9JFtLdkB3AFibfsJppsE7ftSb5YWNgDq54MsnIcLjYgIGI1ZJiF0HIYrgLupMpQA%3D%3D\"}]}\r\ncf-ray: 9d2f9e09d8b61806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"1fd777bf8093133bb5a1287bbc2b7a38","sha1":"e7dff7de238b28c10ee258a42fdbcf4c836129c1","sha256":"f3d64453462e4b3cab922024e5433aec52a85ebc8ebe805bea754142a074d3bf","sha512":"0101e21f6937710e2cb6d7a2a8a3c486e1f5551d293e734b62f283fb4651091180358049a6e655e0e2d63048a7a40c5c2dc71b78f41ab1286d2827a266e91707","ssdeep":"","tlshash":"2431624d2906eab2870159878c2f5f44f80d6a087136f5659be4d461ba709ee807eb3e","first_seen":"2026-02-24T14:23:51.318307Z","last_seen":"2026-02-26T17:03:57.781582Z","times_seen":4,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/990.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/990.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/1752.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/1752.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1498\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Jun 2018 08:45:08 GMT\r\netag: \"ad1115fe728d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=g_psynKjlIjmCRla5LOelHMlNk4RG4kOSIB3mqidakA-1771942972.8069448-1.0.1.1-njr1QSynaFXhmW8hIonim6NppQYMZ5UI9bh6ruQTsVnwfeETRYmONJkMARu3OxlBwNVi_7fskZXFNGzLZ_iKiaqKJ5fRnAz8.b2dTTp628GsXgCks08St5ZoEp_wT8wT; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKL5kTuLTEshSfyJsucbuaZnwNrcvjY1X0Ejr7U83gITe3yEbXGVcaFWgq45kuXQaLGk%2B2ddRm%2BCZFXY8oaRdh%2FbWSG%2Fj12h6my4ELAZKNbbrZqIKZA5jWSa%2Bcw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c0934c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"9164189bed47a2871696d8ee2603fa7f","sha1":"52899ada8e4def040e71cdf51c12775ff6b40b19","sha256":"a9c978c5c5ed871391dca471fc1064d67748974c16af51378913569ec4476ea2","sha512":"7c91b4cd03db76da2b7e9061c307da8e38994d9a925c1507a229e90e83af1cd8536c97a50b7a1d7311360808336fdf6d8c9715740eb470e7ec3f34be539151db","ssdeep":"","tlshash":"5731b57370673665d928706ea5110ea89577bbb0db3e95192461da302069c1e0aa007f","first_seen":"2024-08-19T23:09:36.143884Z","last_seen":"2026-05-15T18:53:14.862552Z","times_seen":213,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/8/17171.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/8/17171.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1736\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Jun 2018 07:04:35 GMT\r\netag: \"c1bb771c2e9d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 25 Mar 2026 00:33:47 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 136144\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=.UzpFPEqaLhj4KjOzssKYRQqS_0a0cW8xKKMBT3TMBk-1771942972.8259652-1.0.1.1-JG.0v98s.YrNnJ29qJyCC..K4_JXaZ3gNrAmuoPu_kRNAxTr2LxXFUOPv5Z4.3sSctIMH54c.9xTYK6FBQABATmiB8NW1xsXaHuRIyTosXTrWJU193ayPIyC7muNQFhi; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4SbMJADQ2K%2FXUMSuQAK%2BoU1sDx69D4FfnyG3iRpdYBHQlRhn4JUu19pGePe6l%2FMZbGRui0fRo0gARgeKryhRyT9IryYe0tta9lFLgR%2BO53TBONSwhhL4Q160C4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29c3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"a14d664c53db81678b306f7eb515836e","sha1":"0d615adc6af4f3d34319301ec533970d3a1b535a","sha256":"38fbcb80dd72eee7eb81b2b0101a9a58b2548eb427caedcd095283f93c89c32e","sha512":"550b7823d21daf722aa003874ac651912315f473714ff78c4d61f40372bd4db94679bb437e68b9a176b7b1728f2dcb00fe96b7fecfc4ec25ed1be62141f90e40","ssdeep":"","tlshash":"5b3108d69bf24cfe0d4c98c0a2fbba1d9013f0a048a5304b10a35009e7af6a0992479b","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-05-16T13:14:11.70874Z","times_seen":213,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:54.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 24 Feb 2026 14:22:54 GMT\r\nage: 4028304\r\nx-served-by: cache-fra-etou8220027-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 41275\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-06-06T12:08:50.150137Z","times_seen":48712,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":60,"dns":0,"connect":26,"send":0,"wait":27,"receive":27,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/content/images/casino/icon3/4b264f82dff0a2449eff3dd18895eac9_casinoGameIcon3.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:56.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /content/images/casino/icon3/4b264f82dff0a2449eff3dd18895eac9_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28746\r\nserver: cloudflare\r\nlast-modified: Fri, 24 May 2024 12:55:27 GMT\r\npriority: u=4,i=?0\r\netag: \"66508e3f-704a\"\r\nexpires: Tue, 03 Mar 2026 14:22:56 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=.TTDsKPMlk4fxXb7O914147d5xlud1gJx0I6oBgsGgA-1771942976.7932093-1.0.1.1-Sfm9XAqLnhLe9qoVsWzxoy6S7CAqXb4um5bQzCSv7qDA8NlHIueYGO26ucOSlMMZ0omeomkuzllxknP0LtPZiOMiHzYhut9fqhdiV.dLRm14UOE8DhtqQ.mnxUzagDgt; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QUso8y8%2Fp%2Fet2QWzRN%2FC5PwydG1JQPT13ZcOa8bAXDUOJxRd5BQei0h0Lh5abl%2Bzx0G6Zz52RQkGi0VJCqy%2BESKD5v4gv9WPjOK3gXh97LjAvC18w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e34e81a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":28746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d625311757b22ef12d6f6c9baca4c599","sha1":"178252135a6968c4e9a5149b06503c365d09ca08","sha256":"563d7d2acf42d671c309e9a9d4a438505bdb43f531e5d38181664221a084fee2","sha512":"a02af144c06face2d13ff6dd319a08c3eb11ee2e08cbb0ac5000c8179fd13d797dde66ba07363af6f80f782dfbf9b2eb47fa0f050f436bf7f6d3624ef2a5d490","ssdeep":"768:VyZjkTYIqhDWIuiIAgz8LKpeq1O6I18QKd4fiyuxgomGK:Vy9kUDDWPiIB8LKplBIGQKd4faWomp","tlshash":"01d2e193df9e064ed93f8f4339ac6bda72a63a648105b3658c1d9701fd7beb406c0909","first_seen":"2026-02-24T14:23:51.406196Z","last_seen":"2026-05-22T17:22:58.205425Z","times_seen":24,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_5dfa5061eabaeab9293768e0f797cc33.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:56.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_5dfa5061eabaeab9293768e0f797cc33.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 191676\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 14:04:48 GMT\r\npriority: u=4,i=?0\r\netag: \"699db000-2ecbc\"\r\nexpires: Tue, 03 Mar 2026 14:22:56 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=FcBxwEvFj3qKmwe3.mip2YcxZPP_oEl59pAiTxhfF6k-1771942976.8177948-1.0.1.1-3JgYI8XEIN35eTvwnOj89FmipEAIl0CfFeqAwLk.mVPXOv7Iixw9uc1KIAFBXEoh0Q1MrBsCk9eWChJYJPNDM8BoNOxlvw2FhUk5hKbEi8ogjsJKgdh2TD5zHCyWejIa; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnr1f24A%2FAeJ29c8rNIH5MIMKGc9XvX4RR6TottxbhzdBLsZNlzzW2j0UFlYKMIPjTaBkYrnJfcP2XIXnqZRd8hsUK2lfJElXRVZA3usrFNOANO1iA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e3519142efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":191676,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a35a27ec91c0cf4c5b4d062a1ec20f1","sha1":"035fd6aa998e9fed21f97eba36fc9080f23843b4","sha256":"f06d90153dcbfe92c455c0734ff4bd66803d2e58a40a2fc77b0047bb2b5f4f89","sha512":"403322e9b4b70a9a455e0516f571d60aa4bccb134a140d3dc5d7dfed8032d5e8ff0bddeb14212930d491f409a65b2bcf1626425422a8ca45476bf23aadc556e3","ssdeep":"3072:MhvZyLGpAdHDMc7QdKCVFgGF42eJ0QtsMF9GbGJyLOotZKDJ9szs6KjY:8vZXGHuKC7gGF4/0Q6M5JyuDszs6Ks","tlshash":"331413f681d7699f4dd130d9980913c72e0e2f52d7259f2380d67d6adf8a844ea03ce6","first_seen":"2026-02-24T14:23:51.408619Z","last_seen":"2026-02-25T02:34:32.641705Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/WagmiConf-DcRD12Of.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/WagmiConf-DcRD12Of.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970038; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"18a72-vMQwheISi0s/E7Pjyype023mj6k\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4RrSVlI9dcuJIPlmuIHxppTrbSA%2FwqO%2Fbg3u7MHuo2mUAE60vAD0zOT0bnvPcqKkwxrrGMI6c%2FE62dbZHenBXmWarUTQsnMlKBAOGlN%2FSg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ad8d11806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48214)","md5":"347fde358585510327d4cbde65cdf27c","sha1":"bcc43085e2128b4b3f13b3e3cb2a5ed36de68fa9","sha256":"4cb419c9f2956a83ad68b8f5ddc2add8a7e1aad05d56254bdf8e345ce1d9c066","sha512":"4106a31be84ecfe3f80e2350266a55d60aebf4ef67f4794bac22a7ff7465ecc92da7e01db1ef5014c1c2139d8eac287ab732b72e82b25457e7cafc9f2655f36a","ssdeep":"1536:/2Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPVAV:OCaSlx5xG7NU+WEy1bPuv1K/XGd","tlshash":"15a34ad07196b46103a74ae008bf440bf239ac34200e565cf269ecde79b96e99277f7d","first_seen":"2026-02-24T14:23:51.189846Z","last_seen":"2026-02-26T17:03:57.755082Z","times_seen":4,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-MCEY36CK22 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\nexpires: Tue, 24 Feb 2026 14:22:51 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150856\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455117,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"31b2ca89afa369d4cddf5a19e0da8913","sha1":"0eb01d8c0bc0e6a0d37429c0bcf9218112ba4d69","sha256":"445ace4a47ff4853970c108a145562248ade8f4480b204217eba4c1f65d44952","sha512":"5f86ca42b121ff3e31c69aeeb9c22dc9432beeb108d069f804409c23f9926f656c5571ab017fc0d1b79b5b99ff856a17673adabfbd2ac857cb7fd952bf7bc484","ssdeep":"6144:vM2mO7CW6y273J5wYygLIR8Nyk7pNH08pddlmOrELkS5fenMcm0v:vTuW6y27ADEIR855VrEff3E","tlshash":"8ca41bce73d670269396f478503f018ba57b29a2b44dc89af189cce42d74a5a4237f7c","first_seen":"2026-02-24T14:23:51.410455Z","last_seen":"2026-02-24T14:23:51.410455Z","times_seen":1,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":123,"dns":1,"connect":8,"send":0,"wait":28,"receive":25,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/AiPromotedGamesWidget-DayfNQl4.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-DayfNQl4.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942971299; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"7b0-UpA+U4UCwg8bnUlj9ahgB+a3loA\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PxcKy%2BqhFjWhT0cIp2pJWxfWWiHn%2B7faAYbhMjP92fjCrogN1zWbotK1kaKw1NuTDFCdIuwrfarIIFcJqmHTNsygMnilaJeJkXL7yN4eCA%3D%3D\"}]}\r\ncf-ray: 9d2f9e130a811806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1967)","md5":"f60b4a6a3477a15b6c0c4006e622406d","sha1":"52903e538502c20f1b9d4963f5a86007e6b79680","sha256":"7c30e8e112ab68408fd5c004a111993bbda00f5a3821108446d5d76399194cf8","sha512":"353db56b85039292e147537b1f6459435e89d1dd703016ae61743e67f912dfb38f99ac4831eb046f76900da23ce941ea8af8d18c6ae53710ad86927f7af9fc85","ssdeep":"","tlshash":"f1415f2fb01dc97cf36c0aa48294b74a98127bb8d619e0e8b6ef4a11776409d637db41","first_seen":"2026-02-24T14:23:51.298658Z","last_seen":"2026-02-26T17:03:57.793021Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/8/17475.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/8/17475.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e62j0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:57.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e62j0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Feb 2026 14:22:57 GMT\r\nexpires: Tue, 24 Feb 2026 14:22:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 150871\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455048,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"058fa14de11009f3d7bf050324f8cf18","sha1":"e25d8e13b1dcde0821a8a55bf07f4e45788a17a5","sha256":"e7ae023c1e103e6675fce26eb93377224a0e45956044d9123d4fd1278b307fce","sha512":"42b00e15bcc3a46ce0dd106502abd2c5424d815e7ccece77c4df8fb0732a2cf41a86141befbb0da47bdb589936490205e98101536a704483e20c8addb5904e2c","ssdeep":"6144:dKmO7CW6y273J5wYygLIR8Nyk7pNH08pddlmOrELkS5fenMcm0v:kuW6y27ADEIR855VrEff3E","tlshash":"a3a41ace73d674269396f078503f018ba57b29a2b44dc89af189cce42d74a5a4237f7c","first_seen":"2026-02-24T14:23:51.412941Z","last_seen":"2026-02-24T14:23:51.412941Z","times_seen":1,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7785\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e07ee25aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-05-27T07:42:34.836287Z","times_seen":49915,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/436.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/436.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-B7VgD98L.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-B7VgD98L.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/WagmiConf-DcRD12Of.js\r\nCookie: TawkConnectionTime=1771942970238; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"466b-/Ts+QOKMoXhMODCvlRfElkFQ2ec\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ytgfTOFNQ6DoLBtwWt5jvxCfr97FTSdBo8GW%2FIMk4sH5HWIOsl2swZYBIOl9on4B9kwyFDpV9jEUNiB1AWoqosIm0dD%2FdTIqLzsG0Sg1gQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e0c29011806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"f3e977cdfcddfa67de40c9532207a4e9","sha1":"fd3b3e40e28ca1784c3830af9517c4964150d9e7","sha256":"ed155181d21e63fe4f536feee6db5319acce059ebcb51d535fda3eac10ee81a2","sha512":"eaf67df8e9b0cc8ea960822bf3065c8e42c3a75184e741550897ea4b7fb58390ee0b877e9e1e73aae3723aea8e9fa825e3a27a88531e74a5c15d18d931310bc5","ssdeep":"384:3Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJs:3Mci408FFnJrIjE3D/OY2E0xqpc1NKkR","tlshash":"82820ad0e2b4f7a642e86add80392074f2218c28347dd0f1b6b6edd974664cac56dd37","first_seen":"2026-02-24T14:23:51.416772Z","last_seen":"2026-02-26T17:03:57.901098Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/Mobile.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/Mobile.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Xwkr6el_CjkdlaeuRfJDT.8P1UWCxiAvJplqOrtbFHc-1771942970.70026-1.0.1.1-BOH7TsaBj8ME5VGORy_ccR5ZTiTU4EB7tT5vZ2peiwIw5n3x_WrQUOx3EIZndnM4QhOHu0XnG7KF5fTRdClcWoNe8G5C2AM_KhuyWr1jzokOu9k2oXg87xC6bbMvp7S6; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0a6mQGH7FJhD%2F2OLPpsKzzMCfzhRaqtQhvzeqa5XY8fuCbDJjQjhT9t0VliCPMS3TdvNzeOoqcPDi3JSwgDUuxmmd%2BegTCVmUIJAmfLjeX%2F9IFamUQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627114-155\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ed96876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":341,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b140aef15c3a0e2328970dbf675bda24","sha1":"77f0fce91e82379b75340bef8bcf39509d1c55eb","sha256":"08c2a0b66d7c329ce1e9e957188e98e920311984544c6d824a29cb8c73d668c0","sha512":"06c19a313efcafa154900f41bd864dc6bc5764a82dfaee82c91ec6fb360d61e0da1a1bb8fa6c58dd8a14f6cde01b85fe25e0ab56a9ba3009f4be67f99eb1ddd5","ssdeep":"","tlshash":"dde078e5b250d40ab5557d53b3fcd5a35e69f0d1da940c39713e791e0fa3034128d14d","first_seen":"2025-10-24T05:32:28.297874Z","last_seen":"2026-05-14T23:49:57.513273Z","times_seen":55,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/GoogleTagManagerTracking-D0YNYPoP.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-D0YNYPoP.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3dae-TqkZmkmHKEAfsC/Hqfm1cF1+lvs\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p07Zx%2F7S3w9f2n8MRhEwzrJ9TY8ymi0zQQJWfBKbzriV3XxPJhwp8iB%2FmoyEWD5aAekk9GkpLD4gOTjWRNMWbAlmR3Wd07b5GwJiosbLYw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ec96b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15790,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14494)","md5":"7ba959810d4a9f7754c1811a32e116a2","sha1":"4ea9199a498728401fb02fc7a9f9b5705d7e96fb","sha256":"e3cd4a119c74e94648e229b1ccf657d25f63b948059b222f30a4adf5187c091d","sha512":"2ab8952eb3f12b16f8c4ea3d244d4da7d41281c83bf2a36a1a7b2a741c6ef5ad977478d3ca25cc1fbdbd8b60c91df2ab09096f4788a82d5af08b5ee30f5cf545","ssdeep":"384:oT5rzmJK7O+CQsGPsR9W+/kyMVVrkfknk/k9ktg7riGw7DUe:WrQiO+FQR97/kyMniKCuJ3SYe","tlshash":"f36295d7faa558a0b0bd4de81f9281c23ab1b56af58144707c7e3c0c6378e0af19596d","first_seen":"2026-02-24T14:23:51.041512Z","last_seen":"2026-02-26T17:03:57.813524Z","times_seen":4,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/JackpotPoolsWidgetContainer-CG5gkeJb.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-CG5gkeJb.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"fdd-6imTdJiR9KzW7IF8K35UOGO9Omo\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bm2nxydZhv0lEG%2F9Z%2BkVAa39IsNRG3Sk3S9b2PgZTO0nYmI%2BaMMTSSvIm9XTDz8KPF7apn9E2vLniQW%2F7HjlE0NWK%2FNSwIORcEZd91fMBQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e11aa261806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"c9c74fdfb9e5a74ebd6a40874d59f09e","sha1":"ea2993749891f4acd6ec817c2b7e543863bd3a6a","sha256":"bdfca645f493e6d1b5fc8fc135b986e6412413d80d764007c65aeb258abcbcdb","sha512":"75ec153ca1d34ab5fc39ed822e85ae9ad198813cf6947803d010b12a4802ace30fe5078ca669a875115285e13c4561d7d5da396c6531089ff099373746d929e3","ssdeep":"","tlshash":"c8818617e01ab3fcd8dc04a3502f910a2b7e0abdd75605e4d06e08240abc85af25db8a","first_seen":"2026-02-24T14:23:51.150408Z","last_seen":"2026-02-26T17:03:57.723683Z","times_seen":4,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30858\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:13 GMT\r\npriority: u=4,i=?0\r\netag: \"694014e5-788a\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=KFg04b5Duc95HYb8MBemDMP8RELSpqCBj3sZuTuFdcE-1771942972.1056223-1.0.1.1-yeE8uy1Tnab9F1O7IdPR12Cu014Aci5PDweB_sRdrMWb0izT5Tz4kXaX1cJte7iJWANSHD4.yKuB5kZM3tyjW7D07fuMtcVLY0rjc3qV6_q3GV8QSBu4PBz2fClevh6Z; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMyBye9%2BCh7X%2FpSYVz4dKYLMb7H04o2qI37L1Y1fqtiQlNP%2F0mJWbOaTOk8qIWBYp3WV6AokfSFBHP5aC3FmrWMVkgo%2FrLV9UYrkK6XLyesaVzbIZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17ae4d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3a657bf250f0501b6684593c6d3449f","sha1":"3ae10ca24e1ed4fd7f3ee97a04029f84edb29c60","sha256":"4df91740f4d1d34398bcde4b0e71127587fe51241c3283f3e7a3bcffefdfc21e","sha512":"c70376beec80f90f2b6f42daa10038112bca9eb928f50f6dfbbb4b8e9054ecfde0afd7aba72fa826bd64ab0615dae03db9d608d7f63e06af394bcd5b669a2ec5","ssdeep":"768:X2NTeq/6/zzgNTdJxlOo7U+QcbTMcipzeGy3sB1I0:4Kq/6/0O0UOOzeKBS0","tlshash":"22d2e1a0782165c72e6e25483195487b904f5bec73687de5b9ac03b3ed0e2f24f69339","first_seen":"2025-12-24T22:39:16.142316Z","last_seen":"2026-06-03T04:20:31.9141Z","times_seen":62,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/436.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/436.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1452\r\nserver: cloudflare\r\nlast-modified: Tue, 08 May 2018 06:38:02 GMT\r\netag: \"9fb8e21c97e6d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=IxX1H_W6uQdXKLnQhja48ANFF3YW1pDDEEG6wJDC1Cw-1771942972.8056562-1.0.1.1-TDEohUqzDaffuHvZ4YxEHRM2uf1Eyhdbk2k2XHEbOyqBedWAZEZFaSxqE.p4EQKMn94nwvnnCxZy7ukjbXEpsv_wy_P4kcunt1Ri5BRKb1o.DR.lBMRW1GiviZ5jtB5e; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L26RUmscwxnPXmfdd0R0ZKAKzdBqJRBpgqyATmPIJC2G53jjjbelZNu7pUhfanZePc7uktKM7cJV8ZzpKk9z4mqGrR7hBnrjUWN29jDLaDOwUEeR3dOZin8niBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c092ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"60bfb998bf429a074918730ee1b6663a","sha1":"b346e17fa1b6d833cc716cd1116182c4a392ffda","sha256":"df183fa340ad5aec1a274df189bac00d898782dd66d86c08ca908a07def0bfb2","sha512":"e804a646d56ad517987825949fc87bc8d4b88b3da6ad460d9f76e5d77a155b0dd48892724ebe783c53a94a7fb9630696052df022b81096ecbb7b429e5ed72e6c","ssdeep":"","tlshash":"90311bd2f317acf209380575b72323355193605966654f49bc52c23da365911cbc45ff","first_seen":"2023-10-14T20:01:14Z","last_seen":"2026-05-22T13:59:48.517076Z","times_seen":123,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: W/\"7c8224daff490314bbee102edaf64029\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472751\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e1e1aa84453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c8224daff490314bbee102edaf64029","sha1":"13aabbb4f10305443e0fbb19c55fd27c149828a6","sha256":"a3652c70ae4477871298cf7fec970ce38a1a5f26a814c06b72cbbafa9c6f3298","sha512":"4a1ac844d0cfc147baefde211336f72422efaaa9c92b4e3a150e434aa3bcd0ca3ab49c34aefca46bed94139738c01ec1af989beb50b48dc747faef0cb8a779b0","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:xauVLmi0V0d+tKaK","tlshash":"dda399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2026-01-16T00:46:03.978063Z","last_seen":"2026-05-27T07:42:34.872881Z","times_seen":27804,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-B7VgD98L.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-B7VgD98L.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"466b-/Ts+QOKMoXhMODCvlRfElkFQ2ec\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVHh4f4WTL06JKQcDmp98GpTASXAvhvWZVbWS2v8HMp0VjHztHm3Clgu07l7XRqoufT0MFrpc0FSAhYUVgv1V6Fw4SDJQAfFWsEo6ourgQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ac8cd1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"f3e977cdfcddfa67de40c9532207a4e9","sha1":"fd3b3e40e28ca1784c3830af9517c4964150d9e7","sha256":"ed155181d21e63fe4f536feee6db5319acce059ebcb51d535fda3eac10ee81a2","sha512":"eaf67df8e9b0cc8ea960822bf3065c8e42c3a75184e741550897ea4b7fb58390ee0b877e9e1e73aae3723aea8e9fa825e3a27a88531e74a5c15d18d931310bc5","ssdeep":"384:3Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJs:3Mci408FFnJrIjE3D/OY2E0xqpc1NKkR","tlshash":"82820ad0e2b4f7a642e86add80392074f2218c28347dd0f1b6b6edd974664cac56dd37","first_seen":"2026-02-24T14:23:51.416772Z","last_seen":"2026-02-26T17:03:57.901098Z","times_seen":4,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/DepositCountTracking-De1I4Mce.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/DepositCountTracking-De1I4Mce.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"285-1SQwAyYPW8GxXr0iZep8jn2Uz9o\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nk4D2aUCFex6SQugNwBqrECOU9CKtC4uE8K%2Bs%2B%2BfRK%2BlQ499R%2FZ3TO2NVklx9e240470If5Joe%2FR5yyGBpbQQhyu5e%2Fl0GD4YYbGT8Rr8w%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ec96c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (644)","md5":"2045707223a5f38768732a2b5bbd3ba2","sha1":"d5243003260f5bc1b15ebd2265ea7c8e7d94cfda","sha256":"7c77670e6513887e7a5d0931da2f6cd0c40820dc4f6a04f9dbc342ffbb83901f","sha512":"4369d6ce9fb4b1abb3b82c1679590f2293e7953da296dc18c75043818c4245e43e04df6f825843431822700cc874e547399839227d5630bffebe1da8bb36e106","ssdeep":"","tlshash":"6ff0dd576878e2f58a892a8472c6a8a367f0a55cb956c8c381bd8d4a0208002e4dcd1b","first_seen":"2026-02-24T14:23:51.429292Z","last_seen":"2026-02-26T17:03:57.814227Z","times_seen":4,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2472\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7784\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfSFghIByqO-qpSeiAGASfCVErfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=488+5 c=0+5 v=2026.2.10 l=2472 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\ncf-ray: 9d2f9e1629dfadee-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9bbc32ce28fd80253987f2e1f0be287","sha1":"ac50a6c9aaaa9a3fd32f610e9858fecee25be6dc","sha256":"9b9632ed8ef4f6d25483053b956d22184ee488efd3f8c22e0ef2626b974475cd","sha512":"5863d7231d17d3edf58896ef5332bb631d9a5c27d06fb934be7653a6847b8918e92ccb66090e97c8b96f5bd51b3c9ae112d2c4eb9407cfe8f617da98ea3d3dd0","ssdeep":"","tlshash":"f8513b2e28bac5e8bedcb4ce2f90883a3283b7511ad4c45552d80854e35fb41a1db0d8","first_seen":"2025-03-01T08:57:15.902828Z","last_seen":"2026-06-06T12:48:14.032775Z","times_seen":2661,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/443.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/443.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1727\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2020 11:39:53 GMT\r\netag: \"24db4cf6e0d51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=DYsGkcVdK5zcYeCBdGtwjXybN23gPQfeHK17eo7Lr6o-1771942972.822745-1.0.1.1-xJ0z0kYNNnZcuhJEelEg_JRGcAwq6LzHm7PaKb14_MAgYzzzNM7bDYJgVG90p6ythYi4g6otZ0uoabpw7e5tYG4NCXzRN86C89oQcObYESFUY5.4hTkJBFEAISu2G1PV; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZv8SHB%2FO1ekQOXlaEnc58Xq1jvBQXPLBHYKUTmk3REdzrzdyXNf%2BlzxHsuZavPWgg%2FoIBW4LCX%2Fl%2FCf%2BpontX%2BeYMPnNU%2Fp0z%2FGKhYmqNxKQQiada9KBMCHrtU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29a2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ca14aaaef99aa66a4b0e636374d804cc","sha1":"d585eafc35d2bd397fe18b3be09bc612fe416a4d","sha256":"afa2af2aab7093655184dade310d50c098cb5dae1bd100c96e6bf90afa6ffa3e","sha512":"9b1c2e63f25baa1d7499fc5e1e6733f3b103b729475ee4302e3304011a5ced39124a86f54f35fff7b489cfdd40180054d35d924a6f3edcc3d30dc7d09dd4d82b","ssdeep":"","tlshash":"41314ac30abdec4ed5d5380047653385b276a52317b0644ddbc0e903428df669834c3b","first_seen":"2023-10-14T20:01:14Z","last_seen":"2026-05-17T08:44:38.206518Z","times_seen":155,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FavoriteGamesButton-CMayIdHJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-CMayIdHJ.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"1ab-CgeCq0ATcH8nw1QvrZikJ1vgJWY\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3jwohqWFCK25sMDG%2BRZ7w3ZHArMSAL%2BXI1QMPsBSNXjgj%2BlXkUkr9KiBm6AIGnq05ixe6jSyBkXYdxoIXSKR%2BnGp7c9eWSZM80Xk6IQ7hg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ed9741806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":427,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"272697ecc5d859b61a93b0b0508d2361","sha1":"0a0782ab4013707f27c3542fad98a4275be02566","sha256":"c28bf4ed911a1e3d95ee88f0294ca02d9018275938aa0d5ce62559f21ce18d54","sha512":"5359a5b24b62b4ee9bfbe3fdef282c4e44b9ccf8b2ca3dfb73138287b4bc2abfb1f94f0daa37c4e8ceda755456e63bbfb771a5f8e884683a664fc97e17151f1f","ssdeep":"","tlshash":"04e0ab0be4c9e2fa2b826b911607c1282c2be4bce7a8e19050de04643d35597c81e96f","first_seen":"2026-02-24T14:23:51.182796Z","last_seen":"2026-02-26T17:03:57.838455Z","times_seen":4,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-app.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jD3YWZG5NtFt4BcajB7OMpiBQ.UUxxmD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kIZp8Srtp9OmsN9cTlfEEsPJfWgTdqEHPTvsPKK80NZI7LkG4nD%2F0FK0oFXu%2F%2BbxBH8Jf0%2BOHJLMmFE2S7hzLG2ekBxPqlSWDFZeuh1jImlAnqM0oQJr3w5ZY6r7Rw%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 301faf3f65621d2ccd9fad88788c128a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: zYehocXynX7PzZS-pDBYE06_p_OkJbLj4Dv5dh69MiM2P97qw2QCOQ==\r\nage: 3346\r\ncache-control: max-age=31536000\r\ncf-cache-status: REVALIDATED\r\netag: W/\"c2b96460440b1358a43a511913fcc46a\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e17fa54b80b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75107,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/api/public/v1/tur/partners/751/notifications/whats_new?platform=0\u0026country=NO","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/notifications/whats_new?platform=0\u0026country=NO HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=0; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj; twk_uuid_69345a05c4e6ba197aefa96c=%7B%22uuid%22%3A%221.Ws4u7zf4ZgXSUqCHDv4Y6MeHnlLaukGCDQ1gTBmzzFl1vjlgtTDwNFTYiSOg22HHJumYmzjBaRAYL7JOfqkU9bzBIs3sYzkurXimL2hHh1pbfQMsms0eYCUGN%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet2647.com%22%2C%22ts%22%3A1771942972267%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=zKXGQWCoif4EISRTGDkD59tbVPhWvP5hemminWG7AHs-1771942972-1.0.1.1-FS7xFaeMMa_fXHzeS3xIQxOI6JpdScOKP7XNCpGdaZhlOEJCYTm7r4jd04wfn70uycaOddUnZvTqp7kzswBSKT7tiQYs.4hux0t5ymK6VDs; path=/; expires=Tue, 24-Feb-26 14:52:52 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHNtNiGH5RBlvXyAlm1CFSA0mhyKnKOKci7Q%2FZ6WV8kT2Yo6RkTsN458wMVo%2FYueRtzmrLPB1Ic13VuP0vkxLupV%2FUtahtVZ4xmVJeRBkg%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e18fbd41806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d3c54fbb58bdbc049cdb0511ebe72bfe","sha1":"952c530fa5e60d5e6f4092dca93e957ff475f0e4","sha256":"e937a0e69c3616d29c6b6d653f7b58c1dedced93f6c31b8c4c7edc0aa70af0e9","sha512":"dc0267bfc82cc2bb6c9c397203c45bf5c4515432a8fcd8f0c50bedaf985707d1c2ad0fa8bfc057e3e25bd40b82e41fc3d6b57ffa4ebfa26699345edfcb66571d","ssdeep":"","tlshash":"b8315335657d4f4c8f81178a9487f12ea40f035aec54fa34d658cb6690686b8d5331e9","first_seen":"2025-12-24T22:39:16.028828Z","last_seen":"2026-05-04T14:33:03.573483Z","times_seen":59,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/img.png","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-02-24T14:22:56.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /img.png HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:56 GMT\r\ncontent-type: image/png\r\nage: 3660\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 24 Feb 2026 13:21:56 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBTeGjtK5YmzSJL5VpMdIHAGQBdI6EhCRvBQEU2bK7UmBvw30uCvcJnPKiZEtUHwDVJYTR1fiK5wQlYjSOQtCCTzgBTcy5Ukpjc4milIBFRLvvAZgBY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d2f9e328c4c1382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"2ad3a45d82e0940f4c3dc90088721bdd","sha1":"a85bbcda89334914c332b2315aa94f32c843c867","sha256":"bdeff9d8a5ad9b3cb7dcfe91fe91080359bc5a836d18d2f78e1d308c412d87b5","sha512":"06a4f493c0b3fe9ca7ecbf17347ce0aab1e3447c4c62e2876b945fd13f40140cdf11b66e8a799492d8709ba21ccd90c54c7c5f446370bbc7e2579d0b0477360f","ssdeep":"768:VQRzoYMic5jrKBzf/csKDh/GxEsBJWnO2iPRvzLsiWY:KpMVjOzcPVOKJn1iPRHx","tlshash":"3ed2e12fe1997b7a550136f649372eb5124b0e5a54c3f878c31c68a8c217b08cef5ab9","first_seen":"2025-12-24T22:39:16.249591Z","last_seen":"2026-06-03T04:20:31.85693Z","times_seen":77,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-nSKS2CxE.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-nSKS2CxE.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/WagmiConf-DcRD12Of.js\r\nCookie: TawkConnectionTime=1771942970238; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"35fd8-2G7tdjadMtACtmpJfgrzIcNerEE\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=thgpAds375d7TJ6vks%2F6%2BAc8FXit8YRDN2oYVUgCBYrvw9sK6am%2FxyUKro1JbncGPdLm8lwPMfDISX016EI5B%2B5F6q6%2BzUrYms%2FHuJHGaQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e0c28ff1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"37c4c49a4145406837780bbb7247a394","sha1":"d86eed76369d32d002b66a497e0af321c35eac41","sha256":"b6c086f2a21e2899b76a9393b869eb8a6703f59eeda23f3d5fd5971673288ea0","sha512":"b9f970a925bd992a373a452ffef7869ebfac3e8770a1587c932a88435d4c2131e18236af156b0aedd5da7a9cb77ea64b0397d783b5898b2efbdea01f249858c4","ssdeep":"6144:YfeL9y0h4R78o8e4YQIALoh6wj9Sd51jjVvFahIRcDGRD6On:YmJy0h4R78o8e4YN/j9e5xahIFROQ","tlshash":"23240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-02-24T14:23:51.32626Z","last_seen":"2026-02-26T17:03:57.796635Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/menus/footer_menu_751_tur.json","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /menus/footer_menu_751_tur.json HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPqL3feV1omGJyAGXUVwo5FD0pkjo0HuC%2BL%2Bqfw2jwXIasJFW58Qgz%2FAy8EuZXMmOxhFInGe28yjk6O5mXmCMaJIJWn8DmO5oeiDhPPCrg%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"2170-5YkIaEW1VPWbGxGytJjt0PCdLFA\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e0ce9131806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8560,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cb7c741a547fc4a891e36f03de2f52fb","sha1":"e589086845b554f59b1b11b2b498edd0f09d2c50","sha256":"e1f2743754b756e617ee3307f8ac72f50f94263f3009f9aa90aec03edac6be73","sha512":"2d3da210a4cece77d8c2c5a21e57119c60f5010e02e3e86a8e7d3b1df68174b55f59be99ed140bf5760974abf623b8eaa24d96f0808498dffaae7723bf944482","ssdeep":"192:XSk0zkRSkukOkWkEkRSk36kphkpGkTSkEAkMlkk73kKUkwHknu4kQSkvIkWbkCOY:XvTNrLz5Rvn8xTvewIYfQQvVdqO3y/XV","tlshash":"c7024612f00d5576e7087e00bcc7ad0b84ce609dac5d49519d4d8bcecbda5af8ac62eb","first_seen":"2025-12-24T22:39:16.150949Z","last_seen":"2026-05-14T23:49:57.318125Z","times_seen":57,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/Promotions3.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/Promotions3.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Yl9hN10ZX90EXZLJiNqmOZlWSgWpxO_4j6015VFDNLE-1771942970.6893225-1.0.1.1-tzw4FoOveG5gPvpReYBt5e97D.SMu_ZBwnwVsrURLVeXxDsp3CmlQjjTGytMZ5dR2CbpCYEuxJt.2a_Cs3O_XiDUxRfM.AXzaV4QEcu0w7rlSnQUnt7Je7AFxySiXoKJ; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7y2scjdl9wVJSO7fDmmihvUzhtozA3GHWlyCzZyiZ9giLyr4VCbHGiBenbkkMduoF84%2Fw6H2alEAKErPe6%2BTjSg790ReAMPeYf0bfv%2FcipcICPQcw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627085-710\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ec8ff76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60e5a10a5bbcc415db7edd6ea60aec4f","sha1":"65af716c48e21ed7c837e77c4b7c3e2f33205dd3","sha256":"a8c1d1768e9efff44b10ffebd02cb4959af6be79610cdc02e44e840f0ec39a28","sha512":"418d3b818cc59a64f5261e2cc27fa2234ef1bf94a886866217d032d211c2ee47b758410154acbb7721314b855778c3e6bbd73fd57fdb092c5703c9270796ed22","ssdeep":"","tlshash":"ee312cd8ee305570eec443ffab118988795614bb69328edcf22c83886b8390800288d9","first_seen":"2025-07-08T10:50:27.664088Z","last_seen":"2026-06-06T11:08:41.264724Z","times_seen":614,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=0\u0026country=NO\u0026category=28\u0026limit=10","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=0\u0026country=NO\u0026category=28\u0026limit=10 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=3Fj5a6u2MSj_Q10ui2Ax7Xhl0WUno1CJGD7FDBgKGcU-1771942975-1.0.1.1-_b_mEyygU_K2go3fr5LQddI8UJRa5i5IYY6E7VdsU4iHwomZoz6pQmYCo4TqRt1RJFV9pEWSBZWYr2LNf_Mfh9AE9uPHZMsqWrHtm5AmrvQ; path=/; expires=Tue, 24-Feb-26 14:52:55 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OskagnzasEGdmlEnM0nA3%2FUT3IDwg%2BeiM01FGz43TmNP%2FfTcdUefUx4lCwjyyHjbUbHUryvckh%2BmwPWGKNsiR8G342XvBkhrQ%2BZ58gX4Sw%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e11ba3f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14740,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"831e3fae9cde48fcf7f4ba7184fff83a","sha1":"ea9480c208f1390971b72063895ad7703935707a","sha256":"7f845dc5f88d63186fc597caa52bf895546fc005d86c435c36a1e2b81156471b","sha512":"b1b931b18215d84b5e39b5c1c431a431c7f9d8db7dd215a9d861329282fca7aa474724266470c485b2c1b4987d2c341ce9122a625fd799b0dfaea38009cc6ab9","ssdeep":"192:I1Z9D5iomhaMVMM55YnwKP56cz5FiM4MfcMfqw5J6if483/3Z9a5ioFlFyhFVcT6:Y5iuu5pQ51JU5iJ5s5f5I5TX54jsV","tlshash":"866222221e28ffe55f1a5c9228963c4ed8fd1ba39456bdc04eb9d8ed41e40d243b12e7","first_seen":"2026-02-24T14:23:51.438411Z","last_seen":"2026-02-24T14:23:51.438411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4656,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-BiJIhSTW.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-BiJIhSTW.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b6b-1Bg7yjdoLwUGDo0c5teGj4YMq4Y\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nl66LsNxt1BxxczdwL7BmBUhnifF32UJZWblUtWI%2FmfZB6dCOtT%2B1cnLqhzXAaRQPNWYm9odNw2T1JTo%2FAFhIHGX1kyMmKlTxLFKTu65XA%3D%3D\"}]}\r\ncf-ray: 9d2f9e12ba601806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2922)","md5":"290dcee25f8e870092e0107cb9f53b29","sha1":"d4183bca37682f05060e8d1ce6d7868f860cab86","sha256":"0ef379043ea494139dc0f9b188aeea5e4a27103630a8f5fc565f4ece328dbd3b","sha512":"ebcb68e4da4f4a2a0c0f600e0003a5cf9a682273ffeb2352ed169c1e539a082b0c906ad037c92633945224fe94adcc66992a58eb154ffbdd8f137b841c348f30","ssdeep":"","tlshash":"ae5141c7a042e7f4bfe708e6429b10b074378d5cbe1b84a092be58964958752e36bf4d","first_seen":"2026-02-24T14:23:51.440572Z","last_seen":"2026-02-26T17:03:57.799137Z","times_seen":4,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_fe9ce82a9594faeb677c9458656719b5.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_fe9ce82a9594faeb677c9458656719b5.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36170\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Feb 2026 16:07:43 GMT\r\npriority: u=4,i=?0\r\netag: \"699886cf-8d4a\"\r\nexpires: Tue, 03 Mar 2026 14:22:51 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=33oluRBm_fW.L4GbC.Wqvwb7PhT0.bbHRf7hVWxsHsQ-1771942971.5150058-1.0.1.1-X40AwMzIz7TQY5K.toAT6GDZ_lX2yZu2wdp.lvRHyXOuOpxCklfz7cUojSAiv44uOwgjL.iIX3w.3U_sRZNyrQiUMXzlLFVBCGHPBVrZ90EEFxpnJDnJtYncc2G3.JBb; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERfU1iKxc45OX1hwrah8SkTg7I16mVYwE5gM7te0XXVimgzTF%2F6xUIDbMhwPPNgZOGt4j5v8QZdMH1vKw062t3yThsssYqQd8Wg%2BZsgojr%2BlhRJaBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e13f8cc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":36170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a83b05531898576aab1511504f06dab4","sha1":"372d24176c30f75b37d3cc07212f361906a58fb4","sha256":"f8397e3631fe3dbd5c2d5ead34b45887d38955afb4d7f6d3555000d34b29ab97","sha512":"19aa79e670b63c99cfccc79af5161a770c1d39c18199beaa6eae3ec8a05670d86820b24f34ca5b58ef8186c5b7943ef558c1cf2eb5f885e407fa6212b6a79ca6","ssdeep":"768:g22tJXYDhekvdp93zWQTEqHtx/xSxehsNzJAGo9uf:b23Kdn3zWQTEqHtOsazJAGowf","tlshash":"10f2f1f1d81baecc77a0c7558c350b1361a892295d2f45fc6efd0a5ac5d30682e362e7","first_seen":"2026-02-24T14:23:51.442647Z","last_seen":"2026-02-26T17:03:57.83982Z","times_seen":4,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/4/8175.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/4/8175.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1764\r\nserver: cloudflare\r\nlast-modified: Mon, 11 Sep 2017 17:52:29 GMT\r\netag: \"902990bc262bd31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 26 Mar 2026 14:22:52 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=gH4uRtm70HIQ78BgSAqp8K89UuNreX.yw_K_DtIIIxg-1771942972.8242316-1.0.1.1-1Ucx8S0rizQ2ZeJgFyp8CA5nHmBQR45r9EXGgczVdENGmX67SroR0OlSxyQDnbcWHt75bS5xohfaLavIw7wddVKbxvsUcxCLbnwpk5E_UUBRH7pp__VSVfeWnOBSRg6I; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RrndRv5nrC3uPM9fo3quJenBs%2FcM7J2NGKVo%2BtPWjh7QTRRwfwr7AnwCug7%2Fmh0TNj96T8XUw%2FPOYzUiiGZSBiOQJ9WOgMPtrQ6rhFQCc4rp7VXWfujdYo0B%2Fng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29b3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8b2320e19d3c5655e59096ecb894cc40","sha1":"822c3efc71ed6719f20ce5e002067a4760516a5d","sha256":"2362447c262840a6b8538169a7c5011ffd71ca9281efd589b29fdea0ab2640e6","sha512":"7088148cc616af4a01f3317574f4c4f09d52143eeb706cdb14b5ef8c90198c1b866857c801764906be2c917415edd5986d3da125577455ff06e9a3f8555d77ac","ssdeep":"","tlshash":"7d312b80920fe605f0e39ca00e0272e277d7fe3f8adb0ed150b4b1b0b45864c665b326","first_seen":"2025-03-03T03:14:58.048561Z","last_seen":"2026-05-16T13:14:11.705743Z","times_seen":183,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/428.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:53.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/428.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1568\r\nserver: cloudflare\r\nlast-modified: Tue, 08 May 2018 06:31:24 GMT\r\netag: \"94ffdd2f96e6d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 22 Mar 2026 08:04:25 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 368307\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=Qw979jw5PIhMrkjwwGJV230ViIww6o_nR6gxRqwM9cg-1771942972.828606-1.0.1.1-ASXN7oHEzR9KEngiBxyFZyDLTNitBcghURXAhz8R_nNdIOBstx8UZLiLcScX00aK7DGqIWavNIA0cLEaA.4Ma9d0NAco1hM9u5QsuJIZQrOCnmvw6vBJ9nOp5u_NYjfT; HttpOnly; Secure; Path=/; Domain=btcoservice27.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5FpOtzv8dvX95NyzIXyXGJtgEW1aehSdheCi%2FtHzgw90UCY6IZ9gvo%2FwEAUdg4dRrsBZjE7jRdA1ilLfVvwv0nsrw%2BvlXmVQYYbx1d0Ip2k0KHhDzb7KPGpPogQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e1c29d3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"fc152a3fb327f26659461b6b80810f87","sha1":"ba2af8eba35c5a62e58c025b8507ea60b9c08d19","sha256":"c0089e3a90b239bf4c17a5fa2b222d9b87a0b44f2e08d4c8c0fefd6e972a5264","sha512":"fb76b6592d78d41193ac00722e59edc5bb48b4a1d567b08bb32eb364a2705e58e9581ea50441485541735f727d60d1ab3f91da60481322767734b3b600affcc6","ssdeep":"","tlshash":"39310c73a172167c75b63d62f69b00511cb2b0951e372f05ffc78a6449e2cc60447c5d","first_seen":"2023-10-14T20:01:14Z","last_seen":"2026-05-14T13:09:06.799074Z","times_seen":86,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/ButtonWithAction-CMXROGdJ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/ButtonWithAction-CMXROGdJ.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"10b-eXiXj8eKnnTH7LYARpecfsMqjug\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkEBITfcckIo6GIxoWivYI3oXGAlWILWeC3ibVBrMwlK7j9UJumGUVub08Twzw%2B5rIdzFIGI3oVIZoleEFx1Vj%2Fn36awi3NYkiloxm8SCg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ea95c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"bf13c23ae777d4ece9a23dfcef5f8289","sha1":"7978978fc78a9e74c7ecb60046979c7ec32a8ee8","sha256":"19d6a58feecc49b55a1436e210bd8ca17e7780ef68dc2a3ca293af206cf4e296","sha512":"4c2c9eb3a48494f7983f30743d92ed973b84bffe515172c826831ebfa850de894088e30b0a294a845ba0ffb278d2853b40a5035198d4925c83482e2a33a3dc11","ssdeep":"","tlshash":"67d0950f98c1d2f503c1ff90512bc1112e16ada0f7e4c551c08d54543e3165ac42e637","first_seen":"2026-02-24T14:23:51.062944Z","last_seen":"2026-02-26T17:03:57.797516Z","times_seen":4,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/useOpenLiveChat-DW9DTPvg.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/useOpenLiveChat-DW9DTPvg.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"247-rmFrwy1jZK2IkzLjPuIguAtMyFQ\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wWGpwxskFyzkCmJjdyxdV8GcwxW6I8jx8xX%2FkUcKLuS7CD9bjSsVPz1Lb9dkZSPk2xV5CkNw5jGnWOLGuSLjGam8L4npTeKfS%2BWpsqV5g%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ed96f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":583,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"e9ab582a29b68015b7e4ddf4398ef218","sha1":"ae616bc32d6364ad889332e33ee220b80b4cc854","sha256":"0f2ee7cc918524f36e5698ff96bf1d9a671b9cef7dbebc73cd1434e9e8cbd7cd","sha512":"ea403228177e00db134af06a47eced70c0a176ba505a98d37d158056b49443531257168c5aaff6e57543baad9cad1e990f2a9c29188801d9bae9ac5eaff1b3de","ssdeep":"","tlshash":"57f041da86804fbc81c0cec1405be5f45b2c0ae4700dc480a43fac985824c00467ac53","first_seen":"2026-02-24T14:23:51.066851Z","last_seen":"2026-02-26T17:03:57.79217Z","times_seen":4,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/DepositCountTracking-De1I4Mce.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/DepositCountTracking-De1I4Mce.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"285-1SQwAyYPW8GxXr0iZep8jn2Uz9o\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTmnLlTpN4xkbkpc5KsH89IvrRzNObSEGvXX6jUQmQoyjKbgOjk2VraUUN%2FLCV8GeWL3QGzFJaRshaJqw2WP198nhFGgy%2BKeZNpn%2FJ0xXw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ee9801806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (644)","md5":"2045707223a5f38768732a2b5bbd3ba2","sha1":"d5243003260f5bc1b15ebd2265ea7c8e7d94cfda","sha256":"7c77670e6513887e7a5d0931da2f6cd0c40820dc4f6a04f9dbc342ffbb83901f","sha512":"4369d6ce9fb4b1abb3b82c1679590f2293e7953da296dc18c75043818c4245e43e04df6f825843431822700cc874e547399839227d5630bffebe1da8bb36e106","ssdeep":"","tlshash":"6ff0dd576878e2f58a892a8472c6a8a367f0a55cb956c8c381bd8d4a0208002e4dcd1b","first_seen":"2026-02-24T14:23:51.429292Z","last_seen":"2026-02-26T17:03:57.814227Z","times_seen":4,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index.6hr6LgI6.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index.6hr6LgI6.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971147; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"4e4-6s/qza/fhzjzJcukzZNSutKCmk0\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNrLe785Uxh5wRDfWhwKnbqo%2BBFRUaWsSL0b2A4mi%2BwRZZbwNkzfSTCmWARiJiv0OzwmkHrtkM4wLEylVEH35RnUto85QBKhqxNHBnuYlw%3D%3D\"}]}\r\ncf-ray: 9d2f9e12ba5c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1251)","md5":"d03ad7d634db584e4aed770123954f9b","sha1":"eacfeacdafdf8738f325cba4cd9352bad2829a4d","sha256":"7dc01c1d9e89862143b3c4cc81a2255e63cdb8412bf7421061819919fc2c6bf5","sha512":"e4641ddc5f100aec535f0f87f4b4cf617ff4fe450de4ed993b3681bec62023646689f9f12edc7b03c4dbf21e0b98081e4e8dd5b0b0a13970fd25946f953bde37","ssdeep":"","tlshash":"f0218ad7190b14feba73a6bf454346ebe5238c5bce63114ab6c21729c4827a2422245c","first_seen":"2025-10-29T09:08:38.623149Z","last_seen":"2026-06-06T11:08:41.314001Z","times_seen":1230,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_1e0032d5ab6bc47ae0ff53da48c1e21a.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_1e0032d5ab6bc47ae0ff53da48c1e21a.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18886\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Oct 2024 12:45:34 GMT\r\npriority: u=4,i=?0\r\netag: \"66fbeeee-49c6\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=t60tfsxlmZPCy4ol8f2ZSFZWQ_LF5_sFpI01g0Vnpas-1771942972.1232598-1.0.1.1-ofSzUvIsTn60yAuxRB98sjYZrHNIxXpQa3RH9rzWoS4aii4OZJWI5eq_GKmvyZhtQSzBCdhJdbsWS5ozisGChAwmJvWMcj0bcO.5f4QmLd7fw.mCtgU_D1vWyYFeq8mP; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nf0Dn4bG3r5vn7IEod4csxMvtS7746si%2FjBYexz59F6dqslfrR0ZAUfM3rrBaC0grRlwNMsncnVf%2FOFeRORFNwkZbrKwh14bGYgenTbRrfHrJBu%2FJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17cf062efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa5bb675b18fb9ff6ebcefc6c52b2b80","sha1":"aef0af185eab795ed1e66b6fd386bb2bbdf99a51","sha256":"9e57aa30fe310aacb3a5660d08ad36e93609014c63ab91e2674217cc81ebc5b5","sha512":"bda4926c3f51a68f3466aad782bb0e212b59ebc698591699ce3927038ba8a8dfbd52ae66535da875700c6ef2cbbdabb67fdab3a92629c17cf2bdd2d909459623","ssdeep":"384:uTMJDMzfI4dhbysbrfdO/1rYKo5nvpEg8SA21BvLQzOSMGz:XJozfI4/ysbr1O/1AvlD1LQKMz","tlshash":"4082e1099a7934e9329308fe1b21614d31f03ab66c405758db7ccbe410c1d956b6faf5","first_seen":"2025-12-24T22:39:16.22703Z","last_seen":"2026-05-14T23:49:57.376625Z","times_seen":52,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472751\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e18d9f24453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-06-06T12:51:01.652187Z","times_seen":43445,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/0/1524.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/0/1524.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/custom.css","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:48.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /custom.css HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:48 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"4468-ZESovElxZOGjxoB0wPUqlNZPl68\"\r\nage: 164\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDoo4gbAPOSoMre1h9uaA9XWMAFLJxZLArRmR%2FocDGNjwegknv1CEMMnXWBNDXPCAcfQ2ySh2geq2ISfI00jjNXvYgsjOXjgJsMS%2FuD8cQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e016ff51806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17512,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"741b7cd90b7cd424ad0398fb6fe8bf7d","sha1":"80a5432576df3683b308a9f324fd4af1b411b90a","sha256":"00a82043b8355ad2a5108b951b7381610663a316af7c0282b182b50d5f357143","sha512":"d1c30de5f1a3a9a8eb4931633e5ccdca464dc2794eec42f6c9278aab6d40fc38d239f5e80af794edf3bd51245478a3e794add9618074241e029295ce9716b4e8","ssdeep":"192:52SyYVVLN2Ns2hamJqKbEiExkouE20i62UYx6lY9qywNqVh4P02pHnNrXoV8ICNP:wYUrhaJRW6bLpHr5p","tlshash":"d472a553fae31999716b8198666bb3fc7e7d404387099d787b94b3748f837e28031a48","first_seen":"2026-02-24T14:23:51.451664Z","last_seen":"2026-02-26T17:03:57.892159Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/InternalDataspotTracking-DB2Ht68F.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-DB2Ht68F.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"f66-7nzjmPMHKKxUpAXaSrEXvMWmk+k\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H92m6nFnBQt9BNockvYKutCdd8WCu%2FbbU3SGHkmjQ5T83n%2F5gVCvSiYg0a%2Fr2kZFMd6lAoLNmuzWWnisVdBfK4%2FrEFz%2BfDZce5HdPlb7xw%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ee9811806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3942,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3941)","md5":"28d8d80edd5ad66eefb0fc684755c355","sha1":"ee7ce398f30728ac54a405da4ab117bcc5a693e9","sha256":"2e8b31d05474087678a43335a1ae8e9257fe9a1a690b7d7fbe36e74c4d12c5f2","sha512":"c7a4ae165f4e0f5bf2b1331d3881ef08b3940022b8a5a9319657b7ede16edfdb12b37f16020ee2bb3ba6f2e1e7a7ee9064c197d5c51b121be530edba74832e5a","ssdeep":"","tlshash":"f681741fd83c08b070a0cad9583bc957857d3cc9a590d8f06037de6a660fe09d6f1a9b","first_seen":"2026-02-24T14:23:51.294039Z","last_seen":"2026-02-26T17:03:57.827934Z","times_seen":4,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/translations/tur.json?v=1771942800000","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:49.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /translations/tur.json?v=1771942800000 HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nCookie: TawkConnectionTime=1771942969674; twk_idm_key=t9C874Dq41eGy2C191AQv\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vXDItqDshmNVwqb7Sq5BzlTWEVaNkO6fuTbsaMAikpjdA%2F2%2FGXaS%2BthIEs7rozNnY%2FDXhasG8ZPCfSwfIWKr8JQPZRoWFKv5J9Sle%2BrehA%3D%3D\"}]}\r\nx-powered-by: Express\r\nx-cache: HIT\r\netag: W/\"30c1a-Whn6k9xJu4dunB9ToCJFKZVWTek\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e09d8b31806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":199706,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (63257), with no line terminators","md5":"029606a7f1069136f51f80f476c1c68c","sha1":"7709eebfd2c6c49ac4e83ad8eb06c40409a5db47","sha256":"065caa49055e2a089664330f921ea9ccc4b7aea7c98cdcd9115482b3e7d18219","sha512":"39f1075e31aab267a347b86698990991da938b8749ebc6956f7d5f9da47c1524766c804345b5619d08ede9ce52b9cb5d4cdc15711d988735acca8e568708b04b","ssdeep":"6144:6u+P3k6PQoW83TX+oTo2MDZwVcOwqHECKqdpxyKjscQe:b+/k6I0DMZwVbw4ECvdpwe","tlshash":"a6144c05586e3cfd976207ce74de9e66b0fa0283d150e426edadd63a138c767d22b90c","first_seen":"2026-02-24T14:23:51.45379Z","last_seen":"2026-02-24T14:23:51.45379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_4c091674cc1b8a757edda70f9a97662f.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_4c091674cc1b8a757edda70f9a97662f.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19028\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Oct 2024 12:45:14 GMT\r\npriority: u=4,i=?0\r\netag: \"66fbeeda-4a54\"\r\nexpires: Tue, 03 Mar 2026 14:22:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=odI0WO4r95qErJPqQKDKg2PVnhxc5PIzJMGFESntwPw-1771942972.1230018-1.0.1.1-7EzH1PnF8pt1uig5gk8xTGOvwYbYF.u5b7kXc7spFRHv8It61x0v7baR0nnFFlaRLMV95M0px5hImIEFvjQbAaBoLoNL5pXjw2QYsIe.F.EtR6zO4lvVH2IPsOZPxVgf; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p53WPfuiZZ0q1Hadlx0BTQ%2ByQSWgPQW%2BtPBEa4TP8jVwzfpYUryB9AuRJAah2IZiefXNC0qd56BhOxS1he18cd2E4RPouRKcihmujYwa68YBC%2BcwAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e17cef62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":19028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"470ce435d160ed8e1bb2c716c12f2bd4","sha1":"42647d800b75281936e1427193e663f6c6aea371","sha256":"adf12d4f2eef34d98c80198b305fc79522cef8ffe98b36263a852afe7c7d3a54","sha512":"03487ca714d93651cc162135dfc4558db1a3ed137e1386aebdf37fba4957861664f6461c2ee462ad22e21484e3e8d4c87286b1935b412972047668e6a063c396","ssdeep":"384:TTMuAQQFE/lQynoYVSZv8D9gHyuiL7vF11TN2pWeLTmSdF//xIjYhop1uCCKEhN4:8u5K2o0WHNiL7vF172pWATpdNxS5pxEc","tlshash":"d582d13a8138838b86d7388ad4dd1964ba674a4c6d2a3815d37c6f8fd8f114d137587d","first_seen":"2025-12-24T22:39:16.382831Z","last_seen":"2026-05-14T23:49:57.401613Z","times_seen":52,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.btcoservice27.com/images/e/s/333/666624.png","fqdn":"statistics.btcoservice27.com","domain":"btcoservice27.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcoservice27.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:41:42 GMT","end":"Sun, 26 Apr 2026 10:41:35 GMT"},"fingerprint":{"sha1":"81:21:C1:62:6C:B3:8C:D6:3B:78:1C:03:98:EB:E4:B5:0B:08:13:4C","sha256":"86:BF:9F:A3:FE:30:F5:BD:7B:AD:63:3C:D7:11:72:E8:91:A7:06:23:A8:B5:1E:96:CD:28:18:3E:4C:48:4C:86"}}},"request":{"raw":"GET /images/e/s/333/666624.png HTTP/1.1\r\nHost: statistics.btcoservice27.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/games.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/games.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=n59px84NEFqTLeyWfO0.Tga40tlTHSvz4gfUJi_vvSA-1771942970.696727-1.0.1.1-gCr64WZt44S1qghnuavVUlsXuUsHaxNPZrj2btWLulwOHDdAZRnSR7AIft5ruM_T7jOvDiX4MmkiunV7ZeX.Zfo6ORCVjX04nxyrJ_NvVt2qAGZnKL46J_VplfRSjSsX; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLEtN6KVyg%2BDDRMbo4nN0PvLsX3F8Ix1Hn%2F4tnWNtctD%2FPJ2X0KMUwJFu5jcGphNqzuf4eOE9xy%2Fx5B7EdbNS90YMILVjfCuXc4KW8tJiv7tDymsIA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"6862707f-525\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ed94476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1124c704ce353b78a51dd2190edbf761","sha1":"969751af8092f4dfa4450def11dc616eff99a8e4","sha256":"02b58d0aaacddd78f61fcc4a92e72d8526294443ec8e695fe41a763a24d873b7","sha512":"62371f1a27dc5a9f43dc9d738c81641e16ad577f02a50973cd1515f41053160ac5286128dc60ba13ce57271eb462d1f258f830125048ecaad0944f9f5153e39c","ssdeep":"","tlshash":"fe21e14c573150fcfd4fb3e9a32e6b787449f2156823c878c05e45cc268aa4b64dc861","first_seen":"2025-08-01T03:40:47.562391Z","last_seen":"2026-06-04T16:23:58.094965Z","times_seen":1058,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/SystemBetCalculatorContainer-BmSNbe1d.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-BmSNbe1d.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"378-C6Zo3ldTKpnUnpq0AXY/6IvtP7c\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcAy8%2Fz6fWXJxDworYD5kGs6L6iykHUOwfwefeyx5dRxpplVuaCG514LUKKONXCEMNa1diLtbwem3jz2zyHZk9fH7Lfn6hke0YRg5CH8Pg%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ed9721806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (544)","md5":"690145235a675d77bd5d22c88fdecc1e","sha1":"0ba668de57532a99d49e9ab401763fe88bed3fb7","sha256":"de4489e163ab1a989441ebac43016178c8c04ab7a9915ca5bd58da750b0c8caf","sha512":"e788679931673924ed51a6cf036cf5edfce7f1c8f4d6c13f36176b4400cc89b91e51b0355acd38c7706775f1569c52f84f6f21a06bb9369eeca5ea85a3957593","ssdeep":"","tlshash":"a1119c539718ce75848a0f660945a0541db54618a918f668b6e58c3cf51408387fffbb","first_seen":"2026-02-24T14:23:51.314888Z","last_seen":"2026-02-26T17:03:57.912547Z","times_seen":4,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/events-Bn7gRKKo.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/events-Bn7gRKKo.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index.es-B9MYE6-3.js\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"17fd-tS/3I7ybaX1JRyB4J25+x9y/+PQ\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ds4QzIhQCCriiZeDTmOExVMGO0TvWHDpplZVC7wBAnn4SXpXfIn%2B0eEsyrdNKSeZgWG%2B79f5yhmTO9vjyusoRTVdh8F1tBV8zPC04g2umA%3D%3D\"}]}\r\ncf-ray: 9d2f9e119a141806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"090be51e82542a30e21e332ca13babfc","sha1":"b52ff723bc9b697d49472078276e7ec7dcbff8f4","sha256":"75312eb0c62a763d09fc4297b47a9432ff15df3e82e2398247716855e7d21583","sha512":"b8b9804b08e0ca7f898643e26e9277b1273e6a53b8a6dfc29f97ca560c5d4f91e23527d7120989911d65fdb3cfa467ddb2ae4986cd90f6adeff0cb8e406d66a1","ssdeep":"96:Pd9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:P3IM2sWMtBq6n3PzH","tlshash":"27c143ccb38578b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126b78","first_seen":"2026-02-24T14:23:51.051447Z","last_seen":"2026-02-26T17:03:57.746676Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/FavoriteGamesContent-BWhyATt4.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-BWhyATt4.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet2647.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"ac3-8yWCTrNLVrF3D4CWPHctjyMyETM\"\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2uEKFgHmOriB4hXj1kTMTsK5PdZA5VVAm65%2BjRdNKsxVSUb940OanRbZSTP2Hh7XGrQzpFRrvffgPPksEte2a2U4LB5iqBgsAHqACeOCw%3D%3D\"}]}\r\ncf-ray: 9d2f9e12ba611806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2755,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1704)","md5":"520492d6f1f44fba5d1f5afca843fae8","sha1":"f325824eb34b56b1770f80963c772d8f23321133","sha256":"c7d7349a97d49fe38ecb60e29f790b95bc64e28929fcaf25d26507769c95df54","sha512":"5e4491318fc800e80ae25f817e14c02f4787708539b9ef5ae96597170f432fe6a924209bbd0450631434b4c53d711a93ed68c09cca99a30f893e60eb80d54508","ssdeep":"","tlshash":"5151c51140415ff8bb9e5eda2e27c064196a438ca286c17da87c4f3e3818640713bffa","first_seen":"2026-02-24T14:23:50.928734Z","last_seen":"2026-02-26T17:03:57.788556Z","times_seen":4,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/index-BiJIhSTW.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/index-BiJIhSTW.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942971489; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"b6b-1Bg7yjdoLwUGDo0c5teGj4YMq4Y\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tji%2FZ2rtb6N4gJI5ZudeVJWIX6kI7SBXaNzrrfXbUgxZTru4kv%2BqX%2BRDt%2BkMbX1IHxUceA4iIEUUgYmw%2FgW1m1TxqA4Yib7x%2Fp14IpW4RA%3D%3D\"}]}\r\ncf-ray: 9d2f9e14aab71806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2922)","md5":"290dcee25f8e870092e0107cb9f53b29","sha1":"d4183bca37682f05060e8d1ce6d7868f860cab86","sha256":"0ef379043ea494139dc0f9b188aeea5e4a27103630a8f5fc565f4ece328dbd3b","sha512":"ebcb68e4da4f4a2a0c0f600e0003a5cf9a682273ffeb2352ed169c1e539a082b0c906ad037c92633945224fe94adcc66992a58eb154ffbdd8f137b841c348f30","ssdeep":"","tlshash":"ae5141c7a042e7f4bfe708e6429b10b074378d5cbe1b84a092be58964958752e36bf4d","first_seen":"2026-02-24T14:23:51.440572Z","last_seen":"2026-02-26T17:03:57.799137Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/content/images/casino/icon3/092ecb3b7ee85637e033dafa52be419b_casinoGameIcon3.svg","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:56.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /content/images/casino/icon3/092ecb3b7ee85637e033dafa52be419b_casinoGameIcon3.svg HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Feb 2026 08:16:25 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 03 Mar 2026 14:22:56 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=RTH3GinKJxoz8to9Oyk7ST2FDKiIbjfHwaxIZ6uBWMQ-1771942976.796289-1.0.1.1-Ehs47ayp0M2Fi3klcJG637FdbqSA9ay9IAmf.PEjJlhH6DBYpRXAYtmslX7ikEkNdjE0QXHruDiPRZkBEu9VXX8LRLt7v4ueXWCgmdOdeCebqOZFehPjuR0mc1i5k971; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgO8XDGn5olXuC5S6%2BVT7Po2fRky9kvKABhHV4zggPqPPFPPjMb3W5j58b5GA3vC5ui%2FgmnXkDD0mmeVVDtUw1NTc0sLvBpUQTluRynRO5hJ%2B0P3ew%3D%3D\"}]}\r\netag: W/\"699c0cd9-3d6c2\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e34f83a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251586,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c20a1f03741549ae782ac42336b5009a","sha1":"bcbac25eee0478af61d33694c5eba601b90ec630","sha256":"798fa80dce22184d619a93adf6d6908be1aa29cc21c671bcd4158f6a5ff07cc1","sha512":"2c5147ba27e7dd41806289e99c9d067987917f85842abb18674586e899cd5c8f338551784d5ad64383256b816bf4e39618b810bfee78044f703ecd4e42b5f91f","ssdeep":"6144:2SxopbSdd6SGRuvMKy0pE7FMqEE53iJP1rbv+:jCSdc2pboiTE6dn+","tlshash":"1a3412701c2539420e94c104c69bb92f1d259ed3e5abd183fa936acf66ad5810fff236","first_seen":"2026-02-24T14:23:51.458986Z","last_seen":"2026-05-03T01:07:30.254536Z","times_seen":7,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/svg/Predictor.json","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /svg/Predictor.json HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet2647.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=kRqaR.v66mN_RI056Tmkr2TgAorMgSbGv2KYJgUkvCs-1771942970.6887512-1.0.1.1-SVf8gDX_b6d7fwK4SuAZ1U4hIyUmZ_zScBDIqhnCSlTP6MGlYwTm.FGPep8xbA5xhrEr1wfu6n89rPe.nKpfHRsTVPDNrWC86Qt78G_KrCFOLdxWcqBF0e1Asl9zCI02; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:52:50 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=md%2FCSaPJU2BnPm0GjWNyKidsHjzRz9QyoxFB4cAqfHaAHFZ%2BpHeOjlk6829VACh7TREL9tc%2FDj%2B2ByAaTGmGyXwBfpl%2F22NkJ6Gs11qiPRu6s5udqg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"6862709c-2ce1\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f9e0ec8fc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11489,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9b3949596034c0e170589b0d298d8d80","sha1":"3ef85a6cf846b4e3c0453652cd192a92db48165c","sha256":"14ae74f8558911ae15ae063621fa5b3f92699ca40af8034feaf7da18e1c5b5f8","sha512":"cadc1b604d9bbb9116a00b9cae1c19156c46103627ff76f5040c8f249ed6f0215f662f45a25d9fa1654671e8c6cfa4b258cc01d7f165f4a6d1c443671b91f68b","ssdeep":"192:IDzUUkrlb5YU/aMstNifMcLwW/ykO8piJesLUoyua7aASt5KsM50FgJGPbdGl+Jv:Ehk5b5LCNi1LJ6gsM5KgEPJGl0v","tlshash":"d2322fe7cb30c0e038de25bede2a5ed93a1ab4bd5ab1d044536dbc09d6c3dcad628540","first_seen":"2025-08-06T06:15:59.472831Z","last_seen":"2026-05-14T23:49:57.427522Z","times_seen":97,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/assets/GoogleAnalyticsTracking-DmBvxHyZ.js","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:50.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-DmBvxHyZ.js HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/assets/index-Dm17uEDJ.js\r\nCookie: TawkConnectionTime=1771942970347; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\nx-cache: HIT\r\ncache-control: public, max-age=14400\r\netag: W/\"3588-+3Qi3GVO+LuMi8G1QnpVfRZLfw8\"\r\nage: 0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peGgS8i4UxWoq4Ptv9kgr7IGPwiU7AhNAtjmrZGYUNdxmyVuaE%2FpKabYmvj5KKcBnSLL%2BphGYNJBTxfCBTbdePWDCP7ldwTHwyTsds10HQ%3D%3D\"}]}\r\ncf-ray: 9d2f9e0ee97f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13704,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10208)","md5":"8cd4ae15064f7954689f3a7849a73b53","sha1":"fb7422dc654ef8bb8c8bc1b5427a557d164b7f0f","sha256":"243564d221706adbe127ee98e3bceb0859347bb88ebafd4c342e67e1d1609b6b","sha512":"546ce01ea7b40447f0a0ae6bc1b4eebcb7d349bde18015cbc22a079eaa3d219a0f4585413a77ddd79127711a864164951fa124040f10b930ca774a14f9b368d5","ssdeep":"192:bfWWYceR0SE+m/CTb3bHXCT76hoxGE0VK7D6L7kBNrnPWh52Lz2PM7mBE:jLYcoE/CzCIEP3Byy2PdBE","tlshash":"1152b55c32adb0b682df6054487f720bf1755910a458f480a265edf46ef8caf026bf36","first_seen":"2026-02-24T14:23:51.075102Z","last_seen":"2026-02-26T17:03:57.730432Z","times_seen":4,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet2647.com/__proxy-cms-api/api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"galabet2647.com","domain":"galabet2647.com","tld":"com"},"ip":{"addr":"104.21.4.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:51.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet2647.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:27:59 GMT","end":"Mon, 18 May 2026 15:26:50 GMT"},"fingerprint":{"sha1":"DC:77:8B:C7:4D:87:66:66:88:79:6D:64:A3:3C:A8:E7:1E:D8:5E:37","sha256":"E7:C3:41:BF:76:31:3D:7C:D3:66:49:30:B5:F4:3F:A9:24:AD:86:15:00:57:51:94:1B:EE:CA:8C:74:67:3C:E3"}}},"request":{"raw":"GET /__proxy-cms-api/api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: galabet2647.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/tr/\r\nCookie: TawkConnectionTime=1771942971043; twk_idm_key=t9C874Dq41eGy2C191AQv; _immortal|user-hash=VgviqIkd37voAwgJGposNfV6_TXJd7nckIEj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\nset-cookie: __cf_bm=9T1p0SdzOLRPdzmXZK4ws4Rp8s4HkDbrHUER5ZgIFnU-1771942971-1.0.1.1-VI3WoLcLeTMwDc20F4F.oSHPdyXs37qhs.twCkwOk27J2DPLgfy2AQpF8O5P7HR081RCQfSzjKZgz5phH9vFF0r9MFHNj_DpwzvEnXdqc3w; path=/; expires=Tue, 24-Feb-26 14:52:51 GMT; domain=.betcoapps.com; HttpOnly; Secure; SameSite=None\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6qCphkbk%2FyTW2oi1qppzI7Rqb5lYDgyD0Dnvxm9sTtKiHysFegGPhcT27sZG2Bs1GOjrPDN2OjV136ICedEDTjiYT6uV4OLZ1S%2FwGsUmA%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d2f9e11ba3c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11632,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (11553), with no line terminators","md5":"72f084987dc640bda448c5b00b933ec2","sha1":"6f2532bdfa45cfe8d761b5978ba478fae07828e1","sha256":"bf8ce4b0321e05cf353f1f4415408904e2bd68005d3d6425cdd5e53d6d4cb892","sha512":"bf016886598ead5b2b74e571b913a950de9cbb832733c378db8522835e5e01267cfc2e05e522535391e2090a39928c080e126932a927f0bd55b58257ee5ea6c3","ssdeep":"192:EW/lDB/CyrUa/t8/rKRc/15/m0g/WYTJ/7p/Yvs/ZZ+/Q5/aJ/tRR/uE/56/rP/3:JllCOUitUru01pm0wW4Z75YsZZOQpaZ4","tlshash":"7d32dc23b02d9daa5b547b40a4c3394ac99d5846dc0e9670dc498f8d92ea62ec6e33c7","first_seen":"2026-02-24T14:23:51.463157Z","last_seen":"2026-02-24T14:23:51.463157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"galabet2647.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:22:52.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:22:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"77424425bd755d02077922d40a96c207\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 382226\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f9e18e9f84453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"77424425bd755d02077922d40a96c207","sha1":"9702eba70ac4506031d55a8c9cf6732a66853b2b","sha256":"1128f463d0038310bb65c71ee2bd50f52e40dd9dfc0489e127f3912a1aa728ce","sha512":"2ac723d6ab08dc1cf45141cc44966d9b0f01c892511f40148d785de61ac084e014799555bb3b574f6f8b78e9410df8c112fd437eafe0aa747babdc52b451d1a7","ssdeep":"96:zNC9Hqt7pEma7hY/rcKaJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYcLRIvgx43nVY","tlshash":"13b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077b39","first_seen":"2026-02-19T03:13:10.646706Z","last_seen":"2026-04-15T01:21:42.571941Z","times_seen":8490,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1051.com/storage/medias/galabet10/content_751_2fbcd393de6e2087aa59ff73668d3cfd.webp","fqdn":"icons.galabet1051.com","domain":"galabet1051.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet2647.com/","date":"2026-02-24T14:23:07.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1051.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:15:43 GMT","end":"Sun, 24 May 2026 11:15:40 GMT"},"fingerprint":{"sha1":"F7:A0:F6:C2:53:ED:C5:DD:44:97:EC:3C:4D:F6:AC:E7:2C:37:3E:03","sha256":"D4:D5:20:DD:1A:F5:9A:97:87:94:9B:ED:75:B4:2E:E0:FD:F3:F1:F0:3C:E4:89:88:D2:00:36:04:1D:63:88:B9"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_2fbcd393de6e2087aa59ff73668d3cfd.webp HTTP/1.1\r\nHost: icons.galabet1051.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet2647.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:23:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36902\r\nserver: cloudflare\r\nlast-modified: Thu, 23 Oct 2025 12:54:53 GMT\r\npriority: u=4,i=?0\r\netag: \"68fa259d-9026\"\r\nexpires: Tue, 03 Mar 2026 14:23:07 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=2QAUAl3XIT9aYiXsEZMvB97odSw4UTvp5Miq2kgr6rg-1771942987.6113336-1.0.1.1-JHbzhWuxVW7eyz6npPhhjED.fPFj_CkRhXB3yD_t0Cx7ZEm6wPWAwAIObtJJY1HMljMIWAUf.Dl0lAxRQnDdPLOxi6L6i8gOzUawm.xxrRByLFJDFjaKcVi5Vx4ybvGQ; HttpOnly; Secure; Path=/; Domain=galabet1051.com; Expires=Tue, 24 Feb 2026 14:53:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Gir1VWnx09FTMrWdHvc8JxDUs3vj00KZTvtphlNEx1p3a1dDX1MKlp5RJArFQmc2hMCmzTGS%2BTQAkvK8FxNqLt9YM%2FBmjwOYBKvQM50DtyfIpj0Kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9e789c742efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":36902,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9178dce074f6f5da14aa962d2d1eff1d","sha1":"afd5dedc4d9b6db21ec314a88ccf8ffdb4a7e358","sha256":"952f7cb545a4d304de18f0b58657973281cf89598d682dcca9fed33c513ce9b6","sha512":"30721d72dc204df72ad17431c1731cdc5e2f16d3d5406c3799e64872fabc9891c2028086ef9d7628b75a26fb15f839b822ea83f5fdf76b6200d7127c88bd9de6","ssdeep":"768:llaVUjckpH6fDslCO+7tpfQL3ocEvIIkr0wYhr8R0QfnAutxKF:llDjckpHyO+pfQL4cEXkrqr8KQPMF","tlshash":"94f2f18b599c03d0b9bfec30ab2983f7a45955cd44b0416abf8aee70d2135f94b86358","first_seen":"2026-02-24T14:23:51.465777Z","last_seen":"2026-05-14T23:49:57.432067Z","times_seen":27,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}