{"report_id":"ff974e23-05a3-49f7-9ad0-025d66dc6e39","version":6,"status":"done","tags":[],"date":"2026-03-22T00:22:52Z","url":{"schema":"http","addr":"galabet116o.com","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"galabet116o.com/tr/","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"title":"Galabet Güvenilir Casino\u0026Bahis Sitesi","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galabet116o.com","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T00:22:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":40}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"dataspot-bucket.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"rgs-wss.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"rgs-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"rgs-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"rgs-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"dataspot-internal-wss.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-internal-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-internal-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-internal-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"eu-swarm-newm.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"eu-swarm-newm.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"eu-swarm-newm.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"eu-swarm-newm.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"dataspot-wss.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"icons.galabet116o.com","ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-22T00:23:06.773895Z","last_seen":"2026-03-22T00:23:06.773895Z","alert_count":188,"request_count":47,"received_data":4776499,"sent_data":29689,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"go-cms.galabet116o.com","ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":40,"request_count":10,"received_data":59067,"sent_data":5491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-03-19T19:11:33.176966Z","alert_count":0,"request_count":8,"received_data":460878,"sent_data":5058,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"galabet.winwingames.io","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-01-16T16:03:38.346691Z","last_seen":"2026-03-21T17:26:27.22943Z","alert_count":0,"request_count":5,"received_data":58113,"sent_data":2345,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1337software.com","ip":{"addr":"104.21.18.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-03-21T17:26:27.907413Z","last_seen":"2026-03-21T17:26:27.907413Z","alert_count":0,"request_count":2,"received_data":42604,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-03-15T22:41:25.364766Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"galabet116o.com","ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-22T00:23:06.801247Z","last_seen":"2026-03-22T00:23:06.801247Z","alert_count":632,"request_count":158,"received_data":6679088,"sent_data":105395,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-03-16T03:50:54.290602Z","alert_count":0,"request_count":9,"received_data":680593,"sent_data":4239,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cms.galabet116o.com","ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":20,"request_count":5,"received_data":29841,"sent_data":3885,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2026-03-16T11:05:46.49512Z","alert_count":0,"request_count":3,"received_data":99586,"sent_data":1874,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dataspot-internal-wss.galabet116o.com","ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-22T00:23:06.768268Z","last_seen":"2026-03-22T00:23:06.768268Z","alert_count":4,"request_count":1,"received_data":1427,"sent_data":889,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"eu-swarm-newm.galabet116o.com","ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-22T00:23:06.76684Z","last_seen":"2026-03-22T00:23:06.76684Z","alert_count":4,"request_count":1,"received_data":1450,"sent_data":845,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"events.eu1.segmentapis.com","ip":{"addr":"52.51.51.56","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2018-07-31","domain_rank":186340,"first_seen":"2021-08-11T00:43:45Z","last_seen":"2026-03-18T19:41:22.426378Z","alert_count":0,"request_count":1,"received_data":260,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-15T22:23:30.202114Z","alert_count":0,"request_count":4,"received_data":1800242,"sent_data":1825,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-15T22:34:11.913686Z","alert_count":0,"request_count":2,"received_data":124139,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rgs-wss.galabet116o.com","ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-22T00:23:06.782696Z","last_seen":"2026-03-22T00:23:06.782696Z","alert_count":4,"request_count":1,"received_data":1321,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":2,"received_data":5296,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"crm-lib.fasttrack-solutions.com","ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-28","domain_rank":1905587,"first_seen":"2019-02-04T20:13:24Z","last_seen":"2026-03-19T00:07:10.558163Z","alert_count":0,"request_count":5,"received_data":2940995,"sent_data":2412,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"dataspot-wss.galabet116o.com","ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-22T00:23:06.799863Z","last_seen":"2026-03-22T00:23:06.799863Z","alert_count":4,"request_count":1,"received_data":1416,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"geoapi.21btcoservice.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-03-21T17:26:26.445513Z","last_seen":"2026-03-21T17:26:26.445513Z","alert_count":0,"request_count":2,"received_data":2310,"sent_data":934,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"dataspot-int-bucket.galabet116o.com","ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-22T00:23:06.780717Z","last_seen":"2026-03-22T00:23:06.780717Z","alert_count":8,"request_count":2,"received_data":257046,"sent_data":1452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2026-02-04T12:39:13.107167Z","last_seen":"2026-03-21T17:26:27.896294Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1182,"comment":"","tags":null,"fingerprints":null},{"fqdn":"statistics.22btcoservice.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-03-19T19:11:31.281073Z","last_seen":"2026-03-19T19:11:31.281073Z","alert_count":0,"request_count":40,"received_data":75942,"sent_data":18328,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"cdn.segment.com","ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1998-07-06","domain_rank":9348,"first_seen":"2014-04-11T12:30:48Z","last_seen":"2026-03-18T16:50:27.809257Z","alert_count":0,"request_count":2,"received_data":111165,"sent_data":955,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"dataspot-bucket.galabet116o.com","ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":8,"request_count":2,"received_data":103076,"sent_data":1444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-03-18T16:10:57.776455Z","alert_count":0,"request_count":2,"received_data":2114,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-03-16T08:24:17.268159Z","alert_count":0,"request_count":3,"received_data":5940,"sent_data":1553,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-15T22:42:33.164796Z","alert_count":0,"request_count":5,"received_data":2702752,"sent_data":2416,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dataspot-bucket.galabet116o.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c502cf55b2a3f78e648f2bf2b2eb6582","sha1":"cd87424dc2922aaedb4d7418e581a1419e8ae5db","sha256":"24f898e9c39f054c6511010c44744db4702dcbf9c75ae5cbacbca2fd852f50bc","sha512":"ae83a469460b683155b1c51ce1309db2b9324f146a6274fd33a18d7b5e2f6807baa4c9d049ae330e03917b4bb85ddaa33122250a7e286aa541fa0fc60cf7ad97","ssdeep":"","tlshash":"0221e49664d8bf7706f01ef8e3156a48b4567f487031c849529fa89d6c214c24579f8d","size":1150,"data":"","first_seen":"2026-02-24T14:18:16.940585Z","last_seen":"2026-05-22T17:22:58.22331Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/walletConnect-CiycSUBb.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","size":1998,"data":"","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d894772cc8ebc08c554e305272fb743","sha1":"9630696cfb8fb02d834b6c2d590ebecc9e4c1971","sha256":"8822f04d16fcc6ebe390ead32df5d08238c7c383f466f401ebd9d235d32f434f","sha512":"20c22c322a8e6d0cee22113e4bdef0fd06e8b21ab65665bf648a3dcbe3857fad121cce2043bc46551247f2f88af76efcbc8f3ba5053a820439d0383342fa0728","ssdeep":"","tlshash":"5e511f3506b31521036b206c3babe316b23ad2433548f5457e9d93015f45f79d9b2bde","size":2492,"data":"","first_seen":"2026-02-24T14:23:51.4869Z","last_seen":"2026-06-03T04:20:32.028973Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useJackpot-BDZnzus2.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b91eb26317c6780c283223b75661a38d","sha1":"a0914abf4e0d8af2b94ce95c878e0a49ea138cdb","sha256":"0c253d85994a8748550577e8079833492bdfd33a1b82fa7314770e22f81bc51e","sha512":"410c33c726832bb0286d9a569b16e16b35697721b3de1c84f4ed5c67e60a40e5671c281a1a57639c6341c438efc5477beb869b37b08a8f69748cb66dd2830bde","ssdeep":"","tlshash":"46211045c069e5f8f48d8cb10177cb2a1b3c3f7a7440e0a0a0ba5ebd57a8d41b6a0f92","size":1419,"data":"","first_seen":"2026-03-21T17:26:39.469762Z","last_seen":"2026-03-22T00:40:17.938534Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoJackpotPools-fAp_tFNt.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5918d349ea75aa702165e8b092d3b0fb","sha1":"753be348a9b1bd9cd842c8d6a3df0ecf613f9226","sha256":"7a95ae3b8b2ad563cdfd333ee422aefcf2307238e68e01fc031003f559450718","sha512":"de4df633ef185ed57d2964b09d2bbaa88b47a08b90463bfd9677bb3c6bd777f4961ebbe889a80df9636576890ff9d1bb27a2e052618458bfe4b1960a5e9fc248","ssdeep":"","tlshash":"0211008bf02bf3f4c88c08e14079495a073e2f7af71181c0946c5a285b66847f5a87c6","size":881,"data":"","first_seen":"2026-03-21T17:26:39.606633Z","last_seen":"2026-03-22T00:40:17.962048Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoGame-ltYKuqgq.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9e451ef9a803c3f7b894af280148f56f","sha1":"8e10a59fadeecc945cd891c09f4b35cfcb109ed7","sha256":"ccfacd7e71cef622fd86d8549b91f69eef2eb67ba6604f9e7117a03d58a4e8a4","sha512":"4e025ccdc94278573d5a9df211da737ba379dbcee75021e6607a73f599fdcefe50af54c76174bdf4f6c0fb0ed1a66d3b4dfacc75d5f5854452e1b77d3a16e8b1","ssdeep":"96:jL/bVqh2iJMeVZhL+no0JzxF+zZZ9Losc3MM+xA5Z9gvWUwBVTCV+xRbK:v/xqhCex6rGFssc3MFxABtCV+xRbK","tlshash":"b7c1b445e024ebbeb83a08d9982f102574192fe5de198076f4bda839323c15d7627bde","size":5870,"data":"","first_seen":"2026-03-21T17:26:39.386441Z","last_seen":"2026-03-22T00:40:17.789882Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useSportData-D5mIIwaP.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f7bc8fc6052d5a655061f7542db1202c","sha1":"aab80cd0d185ea5888d946784ec94f8eabca2227","sha256":"d61d6440417a3709d55589c4c2f270ad4bc8a5639a7d27a9c0cefaf90a5212e2","sha512":"f783b09da3370e101d9e384a486d58f3bfde3019d730eef3934a85e1118b581dda88ecbe89de383af7011cf602f7c77da49aa063faa46101b264cdff3a3f36eb","ssdeep":"","tlshash":"b131874cd074b070953944d5d1ad6e14e434191d3b32eed1e85c0a197b6368e027ed7f","size":1770,"data":"","first_seen":"2026-03-21T17:26:39.579526Z","last_seen":"2026-03-22T00:40:17.780877Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","size":60965,"data":"","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-06-13T16:30:41.608267Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/69bea1f2efc5d11c3692a406/1jk8ah7la","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e8e6631b293049f55352b5e5492b4ba","sha1":"ee9be49eec7f43b089ac853978f0377a57ad5a2d","sha256":"2ec1cb58fd0928b64b3224ff49738c4532b6cd33520c3437e63c6c48092c5311","sha512":"3910b58cf5331520c72a2b38d1019c15ffa9b596e0f4147777552a8361ef2c8e34014ec0707e2bef3b13ec1bf6bc534dc8374efbf635d4a801dd573121d690e4","ssdeep":"","tlshash":"1d41eeea5b4f2c56b22410d90ebef90ef47721f749da5892870c085272657ad2f8de38","size":2123,"data":"","first_seen":"2026-03-22T00:23:19.308753Z","last_seen":"2026-03-22T00:40:17.989707Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/WagmiConf-B0zYIpvp.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffc7f8013321c1fcfc6d9055babc05f","sha1":"f2b3ff148c33a75074e577fe689c3a7e07791157","sha256":"233f2d1fe68f5aef052bc5e2ef81a7663782ade365249e40d628f8f1c6e82879","sha512":"1ac7b4df1da940a29ab80541089861f322f6edeb46925d8c5075b01c66e5dd4dcb39349ba4814f5262b6934b7afe14b68d172595066334dd94364782af886a51","ssdeep":"1536:892Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPYE:hCaSlx5xG7NU+WEy1bPjv1K/XGd","tlshash":"67a34ad07196b46103a74ae008bf440bf139ac34200e565cf269ecde79b96ea9277f7d","size":100978,"data":"","first_seen":"2026-03-21T17:26:39.449607Z","last_seen":"2026-03-22T00:40:18.116093Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useNotificationsProvider-B6RWZkIU.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6a107b604ba11023c433398a7069f684","sha1":"530390a2949705378fcb2a483d2706b3de06d63f","sha256":"3261bee16420406d05ab5271fe9918ae8c11452027b028fbddee83b242e8c5b0","sha512":"fbb4b371e140541e0af34872e340d31d851f73ddb1b6731fed79b3baabc34f36179628277717b3d6fe082d81f0e2940e4d4a551a1ae0e1d89f4937a0ec0c5dbc","ssdeep":"","tlshash":"5bb01213485053f1210108ec12264c290e30083d3381cab11030414811e40c5930e905","size":92,"data":"","first_seen":"2026-03-21T17:26:39.536834Z","last_seen":"2026-03-22T00:40:17.926035Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Odometer-DagrzJgf.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8a74ad83f4d1efb621438d7021c4628a","sha1":"120a50a42082236b3e09009ec567650ef3fd9347","sha256":"dc82bb79f276cb80002d3acf0030ab12ab8708a6c49ccd3a6efa43f016a699e9","sha512":"6b1f7dc97e1051af90eb7b72e4c5858e98aa819f42e7fa46c45cd42eafa7f088d6bd156a5880dbbe207de909d54a5dc2090721f104153898bb4029ae8c05525c","ssdeep":"192:J9d7KNJtQak5S0CGvDF2pXokmkvm6HjI7kauLPH7BNeSYpkYxSBrC7TlFa4PBD:sVQak59CGbM1mem6HjLPyFtUhkNPt","tlshash":"43621a897922723443a3b1e055bf4609773e5d6a3808405db67caedabe32c09d12bff5","size":15624,"data":"","first_seen":"2026-03-21T17:26:39.710671Z","last_seen":"2026-03-22T00:40:17.816907Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/SliderMarket-D-md2TM1.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32d5d2bcf811f8d4c6b3a3871683304a","sha1":"b6ea75c35f6dbf3af65fa63667aceddb2f465e11","sha256":"eab3a50aec4e7691d32944dde37807869bc419ec8e7bed97f48c59acb0d85d60","sha512":"58163a7ecf99035db9755cb25ac4cbd82340113e82d909b582607517919cb9123bc734e6a0c7d0330e86cb9d1982b3f6ca7c1307bcf5d40eccbdc98a000a3f82","ssdeep":"","tlshash":"82211059e530e6b837668ccdc134172231351aa39bb4e2c1e06fcb111b38245b35fb26","size":1282,"data":"","first_seen":"2026-03-21T17:26:39.451705Z","last_seen":"2026-03-22T00:40:17.815239Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","size":60965,"data":"","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-06-13T16:30:41.608267Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/tr/","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25968e8050b03a228b4d547826b098c6","sha1":"b15ac3dce03be69ab8e198afebaf9cf761cf9da4","sha256":"583e20359cfc6a64154b601fc47309be1e57fc2b89434d8a7649445fc66af0fd","sha512":"d2256261787b021c3ef34b69e3509640f04abd03353b7dbea1d8f07211764770e8b0a4a1ea015475e3c326d1fc797d8191b87834550309076754f8b1213dcab0","ssdeep":"","tlshash":"89e0f1e77817486a749f01bd6bb5902431832119640dc922fcfdd4241f60693cc0e88c","size":435,"data":"","first_seen":"2025-12-24T22:39:16.413128Z","last_seen":"2026-05-22T17:22:58.341014Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-06-13T12:48:43.86992Z","times_seen":78129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-06-13T19:38:05.166897Z","times_seen":59581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cac4c4586e27f267ade4724967f5b30d","sha1":"c1e83db39eb9780ff2bd5f4c9d9783c6408ded1c","sha256":"624c5bac53e7c25f71d531bf50cb6310ee536e489f381d0f761ea7a82e01b0c5","sha512":"db0c6f8bed323a959ffb887cf06bc2f1f83353d20a088d8df1f9f81b10d5c935bafcfc0493af52877315b2d60de89788e6301e4316b32cce94c7b3f4816a8832","ssdeep":"","tlshash":"8c7000882e0c3000002b3020c20b00888832080000280c08820080a00e3000a0a2380a","size":22,"data":"","first_seen":"2026-03-11T06:58:45.753523Z","last_seen":"2026-03-25T06:58:25.076171Z","times_seen":1423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/SystemBetCalculatorContainer-Bzc0pnS2.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b4940b55d134e31fa03de3be679852","sha1":"127e610a7ad135553e3e7ff1719c5dd9f1c75006","sha256":"dec35ad6b839e544e8099d7d818aaa3a88db1ad559420bcb20f658e6baac2683","sha512":"b9020ec0e2690c517e86236c6c6d27f0ac074daaa07089aeadc99f8ab99c465223f5067a1ff613bca023113d204bbdf8242ddc2913dc11b38ab1d96370e65865","ssdeep":"","tlshash":"6c11cc566329cf70c49e0ee20a06a4540df50a29694cf628b6f18c38e01408243eeffb","size":888,"data":"","first_seen":"2026-03-21T17:26:39.405862Z","last_seen":"2026-03-22T00:40:18.114421Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FavoriteGamesButton-CYfYTrLX.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a565c8afa2e2ec3fb7c9744f2b8c63a","sha1":"41e7243f94d4d2ec8d2f5f0c53ec8478d6bf07f3","sha256":"9097c3310dd046a510dd2fdc578c8d96061c1b1c8cfd91725c61b39b36574553","sha512":"52e6ec9255825251f43fec7a6e3dce10e459c123e1449d847e14f3b4e386293dbfefc4d5e586497b58e2a205d36e2a590b29af027ae89fb33fcf4e89788d5847","ssdeep":"","tlshash":"02e0fa0bd059d1fa2b436fd01107c8243436b47cf79cd090408918503d70597c54ed6f","size":427,"data":"","first_seen":"2026-03-21T17:26:39.361872Z","last_seen":"2026-03-22T00:40:18.081875Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FeaturedGames-DmW74qti.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d9e6b05b0ea4c2aaf5ff097f62ec60","sha1":"74da87d2807e21cbebe3f99804c583b50dc62a6e","sha256":"1008f34230526be542075acb3e641fda44c1617623c017461ba74c923b97e742","sha512":"c59507f99048474eb0597fcc27a39d06f2b2d9231d85354a2d78d12c6ca76c71b2a90f1d4d56984429591c0cccefa143a20eeed9eba60200d42da244f93e5375","ssdeep":"192:xPV9D3fNHnEUDuHDY2bBEoOhC62JmMwL4Bflg2yD+l:FXVHnWHVbBE3hmS2Sa","tlshash":"69f1fa0ae015fa7de67b49e7b53f5108f47a0ad0e7280890d07e5e1919e9246733ef8b","size":7902,"data":"","first_seen":"2026-03-21T17:26:39.389562Z","last_seen":"2026-03-22T00:40:18.039261Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c95c276dd26ae680ceaf31d168d64f0","sha1":"0e7d39f3b467ed3ec8a74928027bb1c061fcb752","sha256":"ea34db2dd7928b065a6bfe5171d849504db51bf730a5d82c850d7d652752916f","sha512":"a9058cc64544efe7af26ba9e09bdb5c7d8bc7c77ba377e080f49e9237a7ea315588643c34bc92c76528b158850c2efe666665ca9ff1e4c3e4f619a9680e7ebc9","ssdeep":"6144:VoJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:l4RfICAbHm8eeBUX","tlshash":"2ea4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","size":465712,"data":"","first_seen":"2026-03-21T17:26:39.643432Z","last_seen":"2026-03-22T00:40:17.988837Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-13T19:35:30.28644Z","times_seen":86094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","size":870949,"data":"","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-05-28T06:01:00.163084Z","times_seen":12910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/events-CcSKgVKr.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6fc0eef96fad08bb59201d62b01a05a3","sha1":"70b77730ce38865b4743bc672d001253ab6f2840","sha256":"a47b119988977abcd7e45234a7b28325876a133c1b5acc203fa7dec725fea22d","sha512":"75496f580eb9eb357e8bbb21a32ac3021a3c8289ec816b96f412047d8ed05915fdb06a40db5af941985f0039d0ff6cdcb2b99f3ca5d222041be0b647caa4c816","ssdeep":"96:0d9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:03IM2sWMtBq6n3PzH","tlshash":"05c143ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126fb8","size":6141,"data":"","first_seen":"2026-03-21T17:26:39.445809Z","last_seen":"2026-03-22T00:40:17.797546Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Tooltip-BFFrse_o.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5dbd6b1605963511da70c190fb431076","sha1":"32b83b773ff51e26a8bd8f6aeff9240609693883","sha256":"f8a2abd269bc866e1a5ae41159e53934a8d94ba6f6f8492eed8485e7e3d4ea31","sha512":"d09ba6a204efe8e82fd72310385d53c4c6fc14515407c0ba66c041ddc19ba91768fa100d5ad439a6362d8a263c8610e9a5bf86cdf8310dc55ddd146b64c2b9ea","ssdeep":"","tlshash":"0f01c246e032fbf4a17654da142e856d7153266c7e2f58f16038058e0ae4984d317b8a","size":820,"data":"","first_seen":"2026-03-21T17:26:39.364122Z","last_seen":"2026-03-22T00:40:17.826468Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/HorizontalSportsList-DFiYn3iS.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9e97ea9cb856db5aea93097b24ee839a","sha1":"3216ec0dd353cfd8cedc5dcb9bd06e0e6c04dd2f","sha256":"f0d7ceae5b03c9848b3e7891ff4b73462b8aaba69044516382b1a93b9369f97d","sha512":"14d66003f13803ceec3064b27084a362f95a796ae8724feaaa0596aeac0f16141f26adf5660e396af9ea9fff16e3d322c005a133c116c489f80f414be0fc1850","ssdeep":"","tlshash":"06e02b81d8618ef55a2a88efaa5c24846122087cff47a6b1d29492182b7508bf72a40d","size":422,"data":"","first_seen":"2026-03-21T17:26:39.547601Z","last_seen":"2026-03-22T00:40:17.818577Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/HorizontalNavigationListItem-C9W5wxFK.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ac06b8982ccf6ca471baa48a0c19c40f","sha1":"2beae61a21fd2d59f9f03a8795d2efb19aa6baa2","sha256":"9e4e946f9caf7daf8a634127530fc8588afa0ed9668f7c6bea709315c09f99d2","sha512":"5f0361d32bc8cc698b97e0c47b49f3de892c438447041a8eed5c71097b6e390f96a6759981c40b8f446f53ccd31c4af978881cd7a86261306a6034d18552fe67","ssdeep":"","tlshash":"a701c001e014db7c9a2b55c86b9e1089b1579afeef382cf1a0f4e11209344593646e8e","size":728,"data":"","first_seen":"2026-03-21T17:26:39.54095Z","last_seen":"2026-03-22T00:40:18.030844Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/tr/","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-06-09T00:47:26.343556Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"873c4df16225d1aff13e0cfde2b77590","sha1":"8e2af7ba18054becea9f8d154e61f523ec8d8336","sha256":"f33a56938e000ebe0e6c1bfe86613dca49faad36a8b87405558fcb72fb641f0d","sha512":"ecab6c4120df0407d7421671addbe86bcc6c96b04957c9b2ee3fb73ebb033ceba9eafb8fdfc6eea6511e79e369ab3fd78bd9be6ac01bfe56d273b0a2f34f8eae","ssdeep":"384:PE4U1NdzaA2Xub3Ormktio5RNLmMxSDymnaeXDxUpT5RJ6B:cVNdza8bNSRp14DvaeTeto","tlshash":"1aa2d7e975a1b526c1e3b0b0513f0a0ae1fb1951680c287ce641c5e47e70a9e982bf7f","size":22097,"data":"","first_seen":"2026-03-11T06:58:45.768481Z","last_seen":"2026-03-25T06:58:25.063456Z","times_seen":1424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FacebookTracking-CT90FiR5.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0d0301b2eca6fd01c8c09252d6d09e6","sha1":"ef908a1000f37352b6d4953e7c167a79b92bf5ab","sha256":"6481d9f40bfbfe3c886be16fa7c69fa8857ddd75866b867992f82ad05ea17071","sha512":"e76daf2ef88da9da386b72ea073a4c5b5d62606628fc178d1b5237675b33cab92443f01354e8ad9fb130f419fbec9a44119c02e3105d229e1c18cd644e4e2681","ssdeep":"","tlshash":"ab01fe0f2c45b479167c18b8d3bbd81425ba590a358f84a5c6c3cda5262458640cdbcd","size":680,"data":"","first_seen":"2026-03-21T17:26:39.417431Z","last_seen":"2026-03-22T00:40:17.952753Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/InformativeWidget-DPp1w1VJ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ac4a8b46bc7ec9221ede066013b02dd","sha1":"0e4dff7ab9f997e52c674c55d33eac8bab2a4c93","sha256":"2aa3b96dba14088b2890089781fbced38f7874ade1a0797b3d7aa6992b8e5827","sha512":"323c5f306e6c5ea9d47a2243d3cb77f379e0cf43ffb3ae53ce46493a3df5d01a1266a4b023ada516e1b93b4405f86c94e4fbfda17ebe5f7ef1c0222f6c53167b","ssdeep":"","tlshash":"c2114646f594d57db0394dc44257809169312de4df7dd4ed98617408983010776dbbec","size":1087,"data":"","first_seen":"2026-03-21T17:26:39.371175Z","last_seen":"2026-03-22T00:40:18.075938Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/NotificationsButton-CmZ_pc7F.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"051a83a76a17decaf79265acca3f4d57","sha1":"d7f6e37bd318580a705e97bafe6423fe59fedac6","sha256":"186e8d40128d0573379363a0f0541a546388b54f525b6da47c408f57ad8e6e95","sha512":"6b0ddf6b7e7971ef86cdc5fb4c880491532c8a50a561a398cd175d41daf7e7f72004b6a1d78fbd661d7c5c863a75f3b3f8e5e49614ea62b6436468192bb44d08","ssdeep":"","tlshash":"95f0204beaa8d4b41bc39e70633b8426383a7c2cee4a948000a62c55177015ac54fe8f","size":558,"data":"","first_seen":"2026-03-21T17:26:39.459535Z","last_seen":"2026-03-22T00:40:17.889441Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/SmartMarketEvent-BbcnqqZJ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f2e243077781c5b4c30585af2daf3bd1","sha1":"7de46f25b06f1b64016b2f8ef354ecec2ca889c0","sha256":"88032c64572d2bf0740a517c16a6490fa0e009974f8fd42bbf8882e5a4937932","sha512":"4f46dfc7adc759e6df653732f6f6f1d2ad05d75229122d62478d3840ce62813a7f9c11d5c16b23ad193f158972e0638bc3f97e587dcfb8b1e595636313672fdd","ssdeep":"","tlshash":"1911cc96e480723a0672c8bdd1109f42416812d7db20026ae58b8af173ae0fea24ee5d","size":915,"data":"","first_seen":"2026-03-21T17:26:39.407622Z","last_seen":"2026-03-22T00:40:18.157676Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/tr/","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab5194607d8db08f9abe85264322389","sha1":"105aa6a7c0d330d097cc7c9f6989d8223f23adf1","sha256":"3728c769109ca09c38155c787c6e13da31835fc34bfc842f7415f3d3eca691c2","sha512":"c48df33aa42a930e98ce83dcaf1dc59293d777ed22f746eb7ea8e299fe1622aec1f07ee914f18decfd1b998bcb691f84f58a5219a5e5ec1c230f9db6a331de8d","ssdeep":"","tlshash":"6ae0a31d1c1eb46227b419a8e237895530d5130529462655cb87d4543971cc554c6a4c","size":423,"data":"","first_seen":"2025-12-24T22:39:16.410899Z","last_seen":"2026-05-22T17:22:58.329852Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6ecbdd6e5c7c35706e6b7290b4e711a","sha1":"e7504332313b5faba158d3371019ad44fe8949ba","sha256":"1d0520b144e29124777398bb9dfff2ccf5663f45275ceb1c5f70e91dd297ca99","sha512":"ff20dbbf2ee500ce426438f4a1c77da9d52c2138d9c1ad5c54311f0670b7a4ee6202ebd366cb291818dfa5e2964647c945f8d9e5c057d32e12726b2145ec6efe","ssdeep":"6144:V/J8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:Q4RfICAbHm8eeBUX","tlshash":"d8a4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","size":465721,"data":"","first_seen":"2026-03-21T17:26:39.447772Z","last_seen":"2026-03-22T00:40:18.112422Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-D3fSQXEs.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41433d346d7ed3912f226ea164c252c","sha1":"a1409bdc0a0cd16cb984a1577d3cf1c4322f6b69","sha256":"6eac4a01169d0718b30556d21e9b2ce8a89a6b560bf33a2af211e551c7450669","sha512":"ee2f8262d50c92c4d2d85889f641d506c01435050922f5b62eb21b3fdbb1eb3fab95ea2cd24ee5fa6e8f5ad492182a0aef40c188731c060139226288cf02d0b4","ssdeep":"24576:5Dauc8xbGV0CzrP4e5DkXfhPy6L2Zmv6IoVxZK+inbuVIXEt70V/vazSCMlAjRB7:5Wuc8xbGV0CzrP4e5DkXfhPy6L2Zmv6L","tlshash":"cc358d85b145b8799bb709e560af1006b1391e00f80dc4a0f57cddad29bd849a2b7ffe","size":1128997,"data":"","first_seen":"2026-03-21T17:26:39.744438Z","last_seen":"2026-03-22T00:40:18.221566Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324696,"data":"","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-21T03:41:36.073067Z","times_seen":12668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/DepositCountTracking-CxmA8res.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d4ba86dc1f2979b2061087e4b65ae2e","sha1":"c36d25550b91506c59fc28a1c9b6b59a818cb8f0","sha256":"0b444453f7ba634138131d4bab736e6d47b934a22a327e836cb1e4cb7f40d07d","sha512":"f5430ddcb6442609556f2f0d0aa7898a44c81b15386b06983ea5d12509976d70f1a6586b8c6510362579762c4634075f1db1171cf6679776be80b3aa1601efff","ssdeep":"","tlshash":"7df0dd5768b8d5f589493a8072c798a362f0791db906c8c386b98d470208042e4ccd2b","size":645,"data":"","first_seen":"2026-03-21T17:26:39.534402Z","last_seen":"2026-03-22T00:40:18.198864Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/GoogleTagManagerTracking-DAQdr4EP.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1851f665ed369b09c168336a0dfc7620","sha1":"56104bf45809c75b4adc2c608aefe6cf8b84bbb6","sha256":"278a0f52fbce8ceed2a9b0a736b6ad7b2d4229c55e7546093d62a9a550d265a6","sha512":"6c441232aeb4d969ce40dd487a293f6a0efd543b5a5f92bb46af589c9487f433f660a280888d7fa139778497f08bfe7af278653166345a79197242731ceca54d","ssdeep":"384:db3bEI5wTlaZdtdoNc5GRU52iWD+FOTVKWZxxqyuQPfg1F0TQOmJNw9vU6:l3bEeSEDdoNcwiAiWqFOTVJZnqyuQPwU","tlshash":"6182b9d7f96548e0a5bc1fe81f92428b35b1b669f48140747c9e7c0c233cc4ef2a5a99","size":18997,"data":"","first_seen":"2026-03-21T17:26:39.471571Z","last_seen":"2026-03-22T00:40:17.99841Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","size":6791,"data":"","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/GameSuggestedEventsWidget-DZ6HUrEn.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ca5db02ec6d235cd64de2a6a474f33f6","sha1":"25b848c932d6face1ad43177f53b1d3032b0fcfa","sha256":"adcca01c8b00bd4e28badc2e707aaba8b035f40cc8d4ff239e7ae508dfb79349","sha512":"76bfdfcefe35441f326e410aaa2d4a801c423edab5c999cce894894adf9aad5eb6ac478426ab9ae2efcbfbc3e97a4f75744956a2b800c1072d9671e4b16c19e7","ssdeep":"","tlshash":"6c71d75ae010aa39a13745d82bef3119143632b8b94353c1b73fca7123e11916b5bbdf","size":3726,"data":"","first_seen":"2026-03-21T17:26:39.604297Z","last_seen":"2026-03-22T00:40:18.192831Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galabet116o.com/core.js","fqdn":"dataspot-bucket.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"055db89d9f6b86d5497ec019668827cc","sha1":"a86074a3089454d5f51c83593a5b0e983610cf7a","sha256":"dae03523f64a6f242f1c2cfb89b2d39434c259c1e29e2c732d36969cd439e606","sha512":"2d5eba0dbecd7a61b9975b36bb17946ecdc4e5e67311f516f5b29b196c2dec7f367afb7be8ae64c71062627d009bda8eb21a58161a663d2b4d954ad988034133","ssdeep":"1536:xpKZqZWm6P+GgMwnm0ub2xiD/hIbq/Z3qDPAcnh:KqZYSmX2e/hIY33ch","tlshash":"fea35dc5b1a164f083939bd1d4750253e32c6865390280dcf7bcdeda6f299cab166fb4","size":99790,"data":"","first_seen":"2026-03-21T17:26:39.611092Z","last_seen":"2026-03-22T00:40:18.191048Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useOpenLiveChat-BqpHSaBt.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"681eb5126f2ec9c2aba7812d2e626840","sha1":"9ffe76ca1e901f691ac60faef61309d95902c760","sha256":"b4809c2e970036d0b7d9254d9d823fb9b020c888f18f71ed96f3c22224f9cb54","sha512":"b2dfefdd86cdd501c26c715bfd02b9f1a64a8145710d4acb1e91f57fa2fa4b0db743350947a0cefe3d5913be116aeb6c1758bd8f1cb54f07c8942c7fee79c554","ssdeep":"","tlshash":"0bf0e19e86544e7c81c0ced1516be5f85b3c2ab4300cd851a93b6cc8682484457bedab","size":583,"data":"","first_seen":"2026-03-21T17:26:39.588879Z","last_seen":"2026-03-22T00:40:17.995274Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/jackpot-jNbP6Duk.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","size":376,"data":"","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-06-11T18:58:57.27262Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-5iQrWYQ_.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31e010232dd36469670cc2df8c881344","sha1":"029d5bedaa5607a234dfaeca2c6714d403d0f283","sha256":"d880db5966832fe6c39364ab8dfefe271f514cf8e5bf8aa1b86d5875c2c591b8","sha512":"6ce98fd2a8be27394661bea778cf317e1d971c3394c71ee899cb6fe0cfc4e85cce60a1cb676d3b7ae3161e368437ba252c603b73dfa3ec77e31a9cfa7dc1c3a0","ssdeep":"","tlshash":"3c5121c76042e7f4afe748a6429b10b074374d5cbe1f84a082be58964998792e35bf8d","size":2923,"data":"","first_seen":"2026-03-21T17:26:39.375997Z","last_seen":"2026-03-22T00:40:17.988097Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/TabItem-biu5pdkE.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e572f7147d80a282b702909de3e002fb","sha1":"0c64bdba98c648a7f33e629de97d0fa6a3d04608","sha256":"4f0aee67a47ed48c4eee0cdba6b7f30408ff84fbb5023e85b2ed8963ca4a458e","sha512":"0276a4ce85222bc1c92cfe0ee96591fff70ff13f56fd7fab3d0607066f8b0ed98cafd146bf4f05d575c08da4d1b3328578b0a65ceb3c45b365215a81aa713942","ssdeep":"","tlshash":"5ae02b42b020f3f5982b94d6d27f94c7322209dcda9588e6a0a22440072e561f74ff8e","size":413,"data":"","first_seen":"2026-03-21T17:26:39.549871Z","last_seen":"2026-03-22T00:40:17.82563Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-13T19:35:30.333023Z","times_seen":86056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-06-13T14:22:10.056649Z","times_seen":25301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","size":19498,"data":"","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-06-03T04:20:31.901901Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/LiveChatInc-BwBeRgTB.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad95729555f741c465445ebf3651cf28","sha1":"35cd25bbac874733d0a3858af8b224eef62c8201","sha256":"50bdec45d97816d59745395248bc7435f2d1da33aa11b764e9f933c1f4d5c4ba","sha512":"79a4e2988c4d3515744af4888469b744d228f5affdaeb7716bce28e24fd9e26cbbfe20cb40095ddc128d26f953b50616470237d22bd98d2131830798ed737955","ssdeep":"","tlshash":"e95124dec43cb4b192ae67d1323f7b5f71165b1aa4048d31656c4f0af62a0cbc467aca","size":2920,"data":"","first_seen":"2026-03-21T17:26:39.425495Z","last_seen":"2026-03-22T00:40:18.011274Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galabet116o.com/configs/928de3c284a560a4ec2990544700741b.js","fqdn":"dataspot-int-bucket.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2a6c49770a52100388701459104032","sha1":"eb58c40e53a15e3b55fd60c07276e5479e07a89e","sha256":"161586af456353acc3ccfa1748aa3886066bf8f3c5614a5c4db0e4df676adb2b","sha512":"b601200e6ae6894ca67b3afc195d37fea9db1864900cb63b60428df3f106c70ea2e379566d43c326c3b7d439895f609866b2c4a54d77e7a2697f066c05db6a8a","ssdeep":"","tlshash":"aa51f31578e21e7300751435a55768c0b422bb47152ad88c3bce760c4f7db7995b5b8d","size":2471,"data":"","first_seen":"2025-12-24T22:39:16.396562Z","last_seen":"2026-04-26T13:53:22.552111Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ccb6bcbb859a74eecbf89903848518a","sha1":"76bf9404414341288fe2ad96c60ddc820bf9223a","sha256":"ebedfc94b8f12e28cd661e7da5820d9a1a89e1167e66b1d84852f065f7f047ae","sha512":"d7e1515a733637da536bfbdc8bfafae9e0162c9c6fbae1ffc62fbe0d401306ac7d47e131410bafd5082c488f985b714ffe16e16c5d596dd68cbadc6676f1d866","ssdeep":"6144:v4BG6hIFyKht23cw3KH4V8qCxkur5/wPPAPH8tiBM4QuAX7qO4UF:vyaygCcH28xoH4vi","tlshash":"28a4f9ceb3d670265396f478903f018ba57b28a2b45cc899f189cce42e7465a4277f7c","size":466095,"data":"","first_seen":"2026-03-22T00:23:19.338282Z","last_seen":"2026-03-22T00:23:19.338282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/gameDataProcessing-Ks6c2N4W.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"562c976b249b698e612c65de5413894a","sha1":"97d5db7493db7fecba8fb8a6bd98788914477ce3","sha256":"aff1e7c461a2b4748712c13290cffd9c9cb82c20a5a3ca0cb69daf518b4259ad","sha512":"964c4854f9ae661cd8b9d22989cd6f6cef23c5ab7d06878f74436c982f64d30bce6680eb383af7636984a041791658ef520bc9e8f871c182b9231d24fbc76c7f","ssdeep":"384:7wphrrZxhxlVz12awqhvTXDsB4Pzenac0aw5K4A1nV:7CptXDe8QiAX1nV","tlshash":"fd72750b8a024c12c97e4639c0aa15f1b9781b32e8b8cdd51a555c7afb5fa5b31f173c","size":17258,"data":"","first_seen":"2026-03-21T17:26:39.382141Z","last_seen":"2026-03-22T00:40:18.016304Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/tr/","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"932d1c008400401a55681904391c206c","sha1":"7cc9f4d6461805e1878406a830a785ed08d9adbb","sha256":"24cbc4e4b2c15b32036fbb84d653cb480e0818fda8318d2a806d8c3e8666dcdc","sha512":"06be73e2b9709f0164075b7fe30d5f2c03288af4d97b5eac9c0d77cd04b238efe0bf6dd746c6c9063b2f2edd00fa981d58769f76a1439687e7b0582a4d78167c","ssdeep":"","tlshash":"b421d6e238630473061625f7a93fb188b479341e2e0dd821c04fd9a839a9fdf81a3a08","size":1405,"data":"","first_seen":"2026-02-24T14:23:51.476805Z","last_seen":"2026-05-22T17:22:58.331427Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","size":870949,"data":"","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-05-28T06:01:00.163084Z","times_seen":12910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cc4c79f869f2d2c8de02700130947305","sha1":"2c7eae0dcb3e67fadd61a6971d49165477e588fb","sha256":"6b0f59a985ce574fe2f65a705cb7f2fec20f7935f0440ca4cc718dd5cb25165e","sha512":"4a0476a39e87e56247fbf951808d612e1c13da2ba2ddf4c7d9027913c227a498e74b11ae42a127d90abebbef736ebe2949366b685cce5f800594dd5c3ac8f769","ssdeep":"","tlshash":"f6a022200c222f000002ec30023b20082f2f088000e0ec008c82c3003330e8fbcc2c23","size":64,"data":"","first_seen":"2026-03-11T06:58:45.739537Z","last_seen":"2026-03-25T06:58:25.080586Z","times_seen":1422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"02a51d1f766c38d9246465172698bbbe","sha1":"48e347f3e0b8f74cf5dfe4fb3b7f822d20e9ba3e","sha256":"cd65422fce6f46218cd4e916596ba59af10707cc1f80459e6ee9cf34b7dffda7","sha512":"7d3d31d9a778f520af54eca591789e880593b84940b4a42b64695d5a2463e619649ded6bbc5fdc2bf4b389f8bcf2336f66c28860998c400cd804fd176e9b959f","ssdeep":"384:yE4U1NdzaA2Xub3Ormktio5RNLmMxEDymnaeXDxUpT5RJ6N:HVNdza8bNSRp1mDvaeTetk","tlshash":"31a2d8e9f1a1b526c1e3b0b0513f0a1ae1fa1951e80c187ce641c5e07e70b9e956bf7b","size":22846,"data":"","first_seen":"2026-03-22T00:23:19.379956Z","last_seen":"2026-03-22T00:23:19.379956Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/AppSettingsButton-Z8Uar99K.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89a30a627156dc5f5d2c27520b8dda1a","sha1":"7b42b5f3a628661504fb78adb51f204d573e286e","sha256":"622f3d41c1979a9d6e6856504b9bc1c5f1afeb02f3ca7c0299060843da6d581c","sha512":"46e969cd79931186b55227bfec7a5bf3eaa2f2a2538d294727796d70f30f17591ee2e676ef5695a2b5f163073d8124911f6257167d7c1c16baa75bc2e666e921","ssdeep":"","tlshash":"f5e0c08b91c2d2fb07d27ed1c11fc50179267c38d788d94140bc649176f02c6d14ea6f","size":385,"data":"","first_seen":"2026-03-21T17:26:39.599828Z","last_seen":"2026-03-22T00:40:17.805928Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/if-defined-CWaLTnLW.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","size":53241,"data":"","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/getLiveGameAdditionalInfo-B63DAlG1.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"81ebe665808459b6972bd41e409d2812","sha1":"aaeb597dde98ffa62584343db6067d94ead9998f","sha256":"7009459d3d46221c69360e4b75900b5915e58f769e93042ce6517ee95c856afb","sha512":"5fa482fc2763c005e76333b79999e5a4115fdd63a3472b1328c7700eff2291336c84f4f12715b6a0f2f91faa6ee1fb363bfe313b6edc5ec36ca16740d5b12acd","ssdeep":"","tlshash":"c72114b6707e92bba5d94d9457b01b31e2b5ba05384485ccbb3cc91918774c4a7e203d","size":1150,"data":"","first_seen":"2026-03-21T17:26:39.478099Z","last_seen":"2026-03-22T00:40:17.778154Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/usePriceChange-DGCuPhY8.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"985c9befee4d6eba2e166d88af88e692","sha1":"613a85f6f6f82454339d05b495353d2a2d82b9b0","sha256":"4eebab780e6e5cacf96c52faf820d5e0e49b9d80b7aac3bcf1dfaeecd2c342e6","sha512":"87b7284f4b4786f6d426342c1285b6e7fc8b539c311551cb72f12da1169e5954b28d2644e22e4f62e7e05740663a80852ce88b3ef1fe8a8895b86f19d66a6c74","ssdeep":"","tlshash":"e2f05cbd24901823545f0cc4c26585571fd126d56bbdc31eb230cc2d37589af066ee6a","size":470,"data":"","first_seen":"2026-03-21T17:26:39.72857Z","last_seen":"2026-03-22T00:40:18.012304Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","size":75107,"data":"","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-04-15T01:21:42.632515Z","times_seen":11130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/___vite-browser-external_commonjs-proxy-BvjNEVMe.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0453c525f1f5a151cf277c20b691a2fa","sha1":"a708a4aacf7fd35cb4a8e0123fb8f1a61c37e8d2","sha256":"c59d3f5325da91eea5c987c2e77a946acf12669640c1d2de58a18d9704fb914f","sha512":"fbbe4db43256f047f5b6ee830b42799cad28672ed2b6966ae31f586386e67e4e13ff6c003dc1778ab408edd0f562e5dd3670a5a296cd7136061447180425afb6","ssdeep":"","tlshash":"dfc080491694dcb0525b1d828615d402d55c4d6e73f8f5d0bb088d51020158b62b8f9f","size":178,"data":"","first_seen":"2026-03-21T17:26:39.615425Z","last_seen":"2026-03-22T00:40:18.04969Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FastTrackTracking-Dwszikk4.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af41c045995fcfb27926ad6c22ae3283","sha1":"da167a71a31cd4d9b19e13d37095544f149ec6fd","sha256":"81450ecc7999e92453a3446ee6b61a01893fa5e85735a4ee749d9f9cf0c33bbb","sha512":"86af573598eefb92f27bf94d1c58424af046dd8ab98fc108284ccbecbb76bd74555dfeecb9148d10e40dcdfa1fbe53c6f0255669964d7a2d353fdb9bd08cee2c","ssdeep":"","tlshash":"c321750f90e443b47c804e8da3e7a261953d5871711ec4e1f0760bad3f0ca6583dac9b","size":1322,"data":"","first_seen":"2026-03-21T17:26:39.373556Z","last_seen":"2026-03-22T00:40:18.035421Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/DataspotTracking-iQyfe7l_.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1553761c57f3fe8977e11f9a5acbcb2","sha1":"0428d0e7de8fd59cd72a53c25c6d1646dbbbcd2d","sha256":"14ee5210761d6fceb87796096a7b97d4bf6dc77c671b081746ccd47d6b96c94b","sha512":"d31f722b3000e1fa4286ab76fd77cc4d84cce25893da33e8315bb220f0ba8103120a06a6577becd1654cf17895d99a128a4fd6fc3b4161f0a1ab8dd37dd4a805","ssdeep":"192:cEwDqXQcaXE/ucCOi1Kb0cHHnBxCHenNvuvXvqvxuhqVeDt8VZuS:TAqXQcaXE/QAxCHen5Q/0gh8k8juS","tlshash":"1bf1f455641e68bc7033c6ad0d5721a248387051e2329de076aacf5a9e3d9c28ff77cb","size":8166,"data":"","first_seen":"2026-03-21T17:26:39.500998Z","last_seen":"2026-03-22T00:40:17.814005Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/AiPromotedGamesWidget-Byj5O19S.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84edef470c315c31d3de5ed0b5105d95","sha1":"635ea115da194dc2ab021eefd7e1bbfefc98e181","sha256":"1843bbc55023e4f235458fcdaa749beb69d2142f16b74f6e32a856dfab2b77be","sha512":"696adaf49f0aedb5ef049390a5c7df027af83e4c4454986f813d7604bfbe26337ce2e3a64be60378c83f166536ac28161aa909a88837dff435e4d6719699beb6","ssdeep":"","tlshash":"8741642bb019ca7cf22c06a05294f745a42177bdd769a0ecbaef1900731409d337df85","size":1924,"data":"","first_seen":"2026-03-21T17:26:39.577171Z","last_seen":"2026-03-22T00:40:18.077623Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/tr/","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-06-09T00:47:26.343556Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"795d84654feb099eed77d853a9826bac","sha1":"9d1bb066ae472d0b589ebd3c25d1cd2125d9173f","sha256":"ff8a7dfb26de0d9a412cd185e33fe73639c29abca50700e11c3ad7480de7c09a","sha512":"75a841715cc1b55c0c1b1508d8977d36d54e715de6da9d58ea5bafcd7919a297aaccc79fb458dffc436a063b646476d66fb78d0c570a9d94423d12f30ec85555","ssdeep":"6144:FrL5bRuPtxA5oJ8T4AfICc9JKwpm8SB2S5K2wzO3F1n3wRXG:FrL5bRuPtxAbTfICao8Md7","tlshash":"388419cdb7dab4664393a474903f018ba27a28e2b44cd894f086dcd43e706aa5177f7d","size":399907,"data":"","first_seen":"2026-03-21T17:26:39.641488Z","last_seen":"2026-03-22T00:40:17.783218Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1337software.com/chatlar/84503772f8e0bb632ed456a62768855749bf973a5aa1e31ac1f74231a7e8416e_638-chat.js?v=1774138922.657","fqdn":"1337software.com","domain":"1337software.com","tld":"com"},"ip":{"addr":"104.21.18.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d30ca961e198316b4b800307d3cb0d","sha1":"c20765aaeac3164a526318f9ffb3fa2e970df1af","sha256":"77debc53164bfe9c5e4203c9036c3faf7fd875ce295153b9a9ae5b412a57b60a","sha512":"0148a9c667c8f94c5016db0630dc76b830c8bc77da717dc610ae8a4a776da2403932afa0d279f54f96fc5cf5cd4117b422b7d9347401e48f8260bb582e6e6aef","ssdeep":"","tlshash":"c8c08c83a7623d00480911e1c7c26dccf1df9f7cbc9a21c129160c6001c78ea3fd1c19","size":157,"data":"","first_seen":"2026-03-22T00:23:19.311237Z","last_seen":"2026-03-22T00:40:18.070767Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-04-15T01:21:42.763559Z","times_seen":11136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-CUbLXDx4.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f6345e5eb50070d1207ee46af95b1cf0","sha1":"8f5cfa73b1aab00daee26489e596300ddccf15f1","sha256":"ea360197e86b31d860efe7abfa07659d673d5508072c4a9f9494a0893921c804","sha512":"99726a9e011902acc4873e4538ad29c6b47f34c6e64550a2d9d37c97ee22c9d772544d3f33fcfa9c6eb16cfab541e5ac981fa61b9875a8bf8b54298bb4e6df05","ssdeep":"384:fvMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ6:XMci408FFnJrIjE3D/OY2E0xqpc1NKkT","tlshash":"818209d0e2b4f7a642e8aadd80392074f2208c2c347dd0f1b6b6edd974664ca956dd37","size":18027,"data":"","first_seen":"2026-03-21T17:26:39.594746Z","last_seen":"2026-03-22T00:40:18.08786Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/StatisticsOnHoverContainer-cJKYZQf5.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5094d6cb1adb9cffe4cc19bbd41805d","sha1":"a966fcd915c9800719d4ee6d1db7c56ee305f79c","sha256":"c9483c1de5209a20f3506b47f0bf734708a6c375dd49629abb1e8c91f4f17b9a","sha512":"3ab0205957724986be26159446aa0be8166bce8507f971fd0352cd66da9cde2244516f2e9ceb1b48a13c3093426f72a036aae6297ad9fd6e08c4f55c19b6e38c","ssdeep":"192:Zzn2zkXAsarXDxLwxGEE0D9AOgzmcj/e0R:ZzBParTxLwxGEphAdzmcj2q","tlshash":"1e12736c118e5f6af41a8240b4202d35bb3a3877958d66f87ebc440fd3ce444bb9cb18","size":9780,"data":"","first_seen":"2026-03-21T17:26:39.498002Z","last_seen":"2026-03-22T00:40:18.104764Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Firebase-diKvNL2_.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9c96b15207b33ce41c266eb191479bf","sha1":"f3a296de9fe8c5443c223461091bdc8a52c0b6c7","sha256":"a541d121f4449536a19127ae7c01559eba206cc71f0498a5a1038437a937ace1","sha512":"2ace56c3aaa190691316c2d9469f3a2b785d4b8de5cd20f39fd17e9da4275c2b33f4fd7fae089cc692004d9066d45af1f0e3aa0e3e4affe9a7c3314522077e35","ssdeep":"1536:s4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:ss1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"8e83957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","size":84095,"data":"","first_seen":"2026-03-21T17:26:39.602259Z","last_seen":"2026-03-22T00:40:17.843659Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-BnlPX2hH.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceba5fdbbb3a97901b9dc8c2ad5b13da","sha1":"34eb6dde8211dd82b04e0b064b89fd42c9347721","sha256":"ad91370fb603d1ae1fb182b1dbc011d8371c2d98850658bfdd0177eeb6d693f2","sha512":"e971aa680fdb7fdcf8ac304ba0062cb5cd618a9c2b95eeff80250378e39441a1e4098440a3c80ad3f6d6e0ee54f37e54aa74ff34b2f200af61b68f72cdca9c45","ssdeep":"3072:mbwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:2whFHU4HNwFH7MoOWexZFHV","tlshash":"02f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","size":157556,"data":"","first_seen":"2026-03-21T17:26:39.513457Z","last_seen":"2026-03-22T00:40:18.06025Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index.es-DXJtvHoT.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f5a29e9b140d89b45ef6c2dc1458af0","sha1":"d3d5fe3e4254d00e2b6c0321d24cade44f2359dc","sha256":"7bca838c2ed01b7b467f932df8f019f4ce70b01e018595eb6e01f08a1c826261","sha512":"74fd665894507bec47587bfc1fa7e1356b66e4b0efc0ee8bfeecb69331bde3cd559aa2583e98d0065525a79b28fea6568904e71d580aa5caed815377063d9703","ssdeep":"3072:AzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6Ubh:Az77jdU/7sJJMcvYisoljSFN1Nd6Ubh","tlshash":"c554fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","size":295236,"data":"","first_seen":"2026-03-21T17:26:39.597293Z","last_seen":"2026-03-22T00:40:18.118105Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/DisabledMarketEvent-CPPtnhoy.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1ae7d8c222219b66a065ab6cd12346b5","sha1":"cd4e545ab58eea2dfb81e019db83b0c38aa163b1","sha256":"91e1c015e24443ecc166b3c80d23084b7202fc955efb7babbd75894b28316f08","sha512":"ce552e1c0f5315387462390ae80e21eb8ac37a8f52c4ccfc4db8b5a9ba3cc9f9b59c4582f2bd40031f7e198335795efef3aae2da13ca499359d5447a527b322d","ssdeep":"","tlshash":"cb51846df290fa7d993a04dcd23b1f1f601913e2c6590992d0be8c29151c0ee326efda","size":2717,"data":"","first_seen":"2026-03-21T17:26:39.419582Z","last_seen":"2026-03-22T00:40:18.068229Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1337software.com/jsler/84503772f8e0bb632ed456a62768855749bf973a5aa1e31ac1f74231a7e8416e_638.js?v=1774138922.657","fqdn":"1337software.com","domain":"1337software.com","tld":"com"},"ip":{"addr":"104.21.18.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d91726555fe07a1154fea1c30ed0f40","sha1":"782ee20411bb074f0b804890c10d37180c3a8d4a","sha256":"74b494f7884e3ef32686d6c63285fbc2f99e2e5064f35b62e49bb8f6975b20a9","sha512":"2d43a74f22230385e6467c7f86e2c785192c6e83dd2651dc12a005ddb36307620e5e0802fa7d799c5f05d0c5b35d877ee88f3ee68aa36caa14ab83ac5213ef42","ssdeep":"384:Fcdbl8dYsbOSLiwi06cZTfwzHzbllIZVHHxGCEfp:FcXpN03ZTfwzHzOVnxGCEfp","tlshash":"3103639b707244e10a723770be929eacf7c2c12b92444d52bebc415e0fbbc25a5d5a7c","size":41061,"data":"","first_seen":"2026-03-22T00:23:19.335183Z","last_seen":"2026-03-22T00:40:18.140868Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"383b0ea01b33567b53a79051a169e4c8","sha1":"48210a781c5b0e44fa32949a209cf7671c8daadb","sha256":"5790df718df4241261c16ddf7796fadf57d33a04c16a0a795138ba9f424b0b73","sha512":"c9e831055aef8857f5f3d2b54008d695982bd69160d9869123b19191cde633568b9b1e6ef6d1af915b65f35318594b1c10d8daf729b093dced8f4f263e88f622","ssdeep":"","tlshash":"7e113eb22a06b0350b7209e1e1ffcbb5e852741cf15c89d8a912cac42faecdbcd05685","size":1013,"data":"","first_seen":"2026-03-21T17:26:39.652855Z","last_seen":"2026-03-23T14:49:47.264151Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b105b9d1c817d1bba91c163aac4581d3","sha1":"c22908ad81be0a8e388a40eb1e251cec4abb6092","sha256":"6e3edc344d0220e455f2aa549e20a36ac03f5cb02ddd01f318d9f7d3265c2970","sha512":"a468fd003fd463ec56511dfeedf72a9b06a95e17f3a6aa9dbef93e99c2444addb4af59cbc7d35300e1fd95c28b8c60b4d88d025b8a1cea8ba2c6862de9769f60","ssdeep":"96:5SubClTBeLPTGNlTJC6YacmDD+oXtPeYFaOatTz8:5bJYE684KoXdroz8","tlshash":"04818617e01ab3fce8ad04a2503f910e377e0bfdd75604e4d0ae09240a7d85af259bda","size":4122,"data":"","first_seen":"2026-03-21T17:26:39.427542Z","last_seen":"2026-03-22T00:40:18.100275Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/tr/","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f941adb2ce1c3c336f01b65e00b5b9","sha1":"225bb5c32199edc5a116b0b6108c4e5308b28e58","sha256":"3131d130bcb57e9c2593c009769729464af0ba726b8821274bcd76e44e283f56","sha512":"995db58cf4462f52c3f124666f58d5ad9725f77b17342864521087a05333bc53a776ce1c8d2d194b5c5880ee09b72f31aeb536258aec48b96a4de62adcc013d3","ssdeep":"","tlshash":"9011147d3ce76848d60e9bfa356f978d20b7b8155d40cd90c189c498a555fc800a5bbc","size":926,"data":"","first_seen":"2026-03-07T12:53:25.05797Z","last_seen":"2026-05-22T17:22:58.364344Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/tr/","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"73b8b49b4f5dd8adfdee877cd58546f0","sha1":"9f41caaee4b514ed017a6258c4a2166e6df5fad8","sha256":"b8ac084bd8c078db89ea019d31398c712a77cf27480be3b2aaaf7754615679ad","sha512":"b0dc33f21d8d930095dd34608c4cd501b4cecd139e1854fb636bb4e0d1722b22bda57425ebaf257860fc364a6ed9935865d391026a55c36bd7cbad695321d11e","ssdeep":"","tlshash":"6e4120b937867cb200f96633d6af771734f5d071d4018c10272adc896ab9d6a41a7c6d","size":2178,"data":"","first_seen":"2025-12-24T22:39:16.422871Z","last_seen":"2026-05-22T17:22:58.334241Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/firebase-messaging-sw.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b92a7d10cb0970ced5798c2eb1b8ac","sha1":"819f60615624f025d1256efc408d8e576a909c7b","sha256":"a87215bfd90d96fb55335ce2b2411f38074588149c9e896505cb10b250e17e1e","sha512":"75c55da9e8afbd96b6219292c91fb88e01c15d20bafc974028763227220aa042f4b761895d44b0394baae53c225e9b0c109d2eca333aad6b382951a60448e8fe","ssdeep":"","tlshash":"5121cb124be2f8231e4104c7679f32186e290d2507b0f1de61bf56b86b0a57b206bbc5","size":1125,"data":"","first_seen":"2025-12-24T22:39:16.149326Z","last_seen":"2026-06-03T04:20:31.962446Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/tr-vKvB_tcp.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"029e4708c52bb4fc1e7f00b3414d9537","sha1":"bb8e29f589a2f69f1a05f0388800ab447040e565","sha256":"07583a599196f96701dbae948953a539fe0b88fd9392d57e2dfa3466663d01ae","sha512":"4df8c5c71ab5f560a88a315c5b0983c2f6b968a7d32a6c0cfa9491c1a9e26496882296b475411c288734d01b03c8e7c70bf9a0ad11976bfefd11b20fb30fe3f3","ssdeep":"","tlshash":"1f31a44c2906eab28b016887882f5f04f81c2b087136f1719ba0c861ba709ed807eb3d","size":1459,"data":"","first_seen":"2026-03-21T17:26:39.379575Z","last_seen":"2026-03-22T00:40:18.189259Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"be46b42db68a0c432250a9f01755df48","sha1":"aa379b154f95f538bd0b141a2720ce8173371f8c","sha256":"184d8e540ea4050c49a8c70209f1d2f86aba093550c9fa43ef3b6c69ccd47169","sha512":"03d7a04eae06ae0d14c0c69e1582926ae266c813473181f83c94cec21eeef5be731e416d95f1243fb95f6df63e184be9fc07c6bf606ae46f3a82cdb8cd7262af","ssdeep":"","tlshash":"a1700088ae083000002b3020cacb008880b2080000280008820080800e3000a0a02a08","size":22,"data":"","first_seen":"2026-03-11T06:58:45.741374Z","last_seen":"2026-03-25T06:58:25.104351Z","times_seen":1422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/LiveChatAdviser-D27OhzDI.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f2f2d7d30934cdc6d0c21e68d266516","sha1":"e2f9d76a03d3b6486f98e28063874aed70597f6e","sha256":"c0679235f12e7fd2c68602e19e347b02bfef3b2294537a021c919947c34ad810","sha512":"ccfbb78a037b16838f08bf177af40478c903b90d8625a5ce72007afc3b19f6afd999668179c42580a4c0116dc034fe2b3ff63a69f1c48a6bba666596391e3836","ssdeep":"","tlshash":"4e115295f0c2e3fd6667284dd7ae2043700a4fb5d22d4db6807b19601a2ce09e30eed8","size":862,"data":"","first_seen":"2026-03-21T17:26:39.544297Z","last_seen":"2026-03-22T00:40:17.804736Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/BetslipButton-CNMBkbkj.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"249176655ccc714dff62a32ca7344125","sha1":"b2405b4b60d6bc4ac573b2f02a73ccf50fb95d6f","sha256":"55fbe0abfc99ec5c3486183b6cccac4ee249dce7d36664b5fc8cee69ecef62ea","sha512":"29545a89b954d8bd838e455af8c8ff502c6cdcee4283698ee957784188664cb775b081edf08664d5fe201a8db623035e744a105952a58a07402ea03407da783a","ssdeep":"","tlshash":"40e0f1468948c2fe07465dc121078502343269bcb340e5d280a92c527fb4689c45fa6f","size":418,"data":"","first_seen":"2026-03-21T17:26:39.706598Z","last_seen":"2026-03-22T00:40:17.78654Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/userJWE-DjlZLNdN.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"508c7f0a90ffbb5b03c98a9a7dc24c36","sha1":"b9e31f5961c5466efe981d1e76f0d812c251d678","sha256":"8deb2e3f97ba996e49168980142a357c49d4641bb9e2278358c5630cc64cfb8a","sha512":"a6bac2efcf8d93fc449c37c3606834bd751181d3ce3381429e8c5f955c263a4d0f582e8a0e13a584fbe412848395e8ae1f730a2255ab5162e4c53c81163a5aa5","ssdeep":"","tlshash":"d5c0c0db0cd411f7c5583c501007dc138230391473d8d3525b08c3ea7e5104bf10ca14","size":193,"data":"","first_seen":"2026-03-21T17:26:39.726618Z","last_seen":"2026-03-22T00:40:17.996301Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/PromotedProductsWidget-Cu6mpMj2.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c3153e4aa4ebdfb11edb1ceb74721d7","sha1":"63a1c4e73b113fc5a7cf75360a42fa5e1d09007b","sha256":"0efd8b0b27b02dfddaef49296858ac0af81408ba031a3ecc38d2362f5b57f851","sha512":"31680001416098b2b40a7dd8905262064badc782cc6f7c7fc22afb10da2e29273384113d1b522894f476cf38f68e66ada739b7e8b3d94ad2fe13cb74e2086723","ssdeep":"","tlshash":"5a4175c2d838b2baf63e5cec214510c838267d18d96589b56077bc1a9139812bb57ffc","size":2125,"data":"","first_seen":"2026-03-21T17:26:39.657319Z","last_seen":"2026-03-22T00:40:17.80938Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","size":108916,"data":"","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-05-22T17:22:58.310306Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=galabet116o.com\u0026t=1774138931442","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab36d6ba03220f8ed8807b6424822280","sha1":"3c00e656ad89f892e1f68369656a231ff5dcde58","sha256":"15df31091b00093ac8503741e767f90fd0b4eecf581bcb2f9cd8a33712b72382","sha512":"ff73efcd4471511df2475c0806cc16582bd55904a079010f054a5419cbbc51624a6c115ea3cb51e34ef1f72e50aa6e394ca21c825499fb430ec10d6bdcca4888","ssdeep":"","tlshash":"d45164ca6af081ed379a89e71b25b3cdd12f84873d850716746c78a4f605a1cd337278","size":3049,"data":"","first_seen":"2026-03-22T00:23:19.360957Z","last_seen":"2026-03-22T00:23:19.360957Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/InternalDataspotTracking-CwhbtXjZ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6501d6c8862a6d97a90d85ed74fe01d","sha1":"f129d89747618d4ff3906dc5c64cdedb38fa4b2b","sha256":"33b71cb4a506d6d28328cd654361c176eb5182f35f87730ac6547db66d7ca1c7","sha512":"eff2e7892fdb17f40b5e9e45327a5c82e65915865d019ba3e80189773fe7d2da285496dfa7565e3014fdd56081f51cf05f2cf453f2de37b86e86fc2be81a3994","ssdeep":"","tlshash":"7381731fd83c05b17064c9ce5977a997c6a83c8e51c0c8f0602a9eaa561be04dbf6ed7","size":4061,"data":"","first_seen":"2026-03-21T17:26:39.587133Z","last_seen":"2026-03-22T00:40:17.831434Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/bookingBet-C2_396gf.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"382e197b84b36c2e881c5ad55ba49ffa","sha1":"f53385f540d98c26b3acd7bfe2a714778a3cfad2","sha256":"f49f90a92b84092e924250b9ba4c6d9ba49f9e1a5b7cef9c2cbf1ab9267eebd1","sha512":"ebd00bf5073c899966d24da20876fdd2296b624901691607e3e3d5dd0dd682ea0d751500286ec765da9763dc4a150be86735c8d08548888228cd3f7cb648bce2","ssdeep":"","tlshash":"2271e664fd30907e67f2317df4de7b426b2c4ba871a19a40fb6b5d0841848cbb534638","size":3796,"data":"","first_seen":"2026-03-21T17:26:39.649126Z","last_seen":"2026-03-22T00:40:18.176308Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492816","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a90bd08562c2b9ffa19b9fd0c10a8790","sha1":"4417a4b58c1bc7a7ae0609d53ff30d14d99f586d","sha256":"a1193fdc8d0ee22d154c5fa8476594c51162fef2bd7ef36f50b6a9639055e481","sha512":"e1f04b124317829cc29540ff65b30f690410765717d284c6a648b045839501c084ed4addb13b3fed885002456185297a31d0148976f553a9398c056c213f4a68","ssdeep":"24576:PlkKatcX3lkC8MLdI+hRInTp9Km1rHOm+QToL2nlkxaCnTzbF6P37Bh:PlHatcX3l/8MLdI+hRInd9Km1rjToL2h","tlshash":"bc257d9072567534c3b795a260be050c723c5b03740ac5a8f2bc99a92fd7c9a627bf7c","size":994390,"data":"","first_seen":"2026-03-18T12:31:46.587385Z","last_seen":"2026-03-23T12:48:40.312382Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2363889186e23777b4b704661794f3d","sha1":"7f50ba76565cbebe1ce54ed6e30f3794fee96554","sha256":"f71def488c2fb369e417b84e2088a8c9c21a59a3d1dffe4a43f4dad196460b8c","sha512":"4fb51fd523149c9cb04134a77d41461736a1e832dbd48af01a71d47843a56fed5a4474275e8752a2460c3cd7203bbbe9fb897a4c027d81a6b446973169d3eea4","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJyO:xGBzd6BgJn+wT8ZI3I5Z7y+","tlshash":"688533582a6bf3849409d0d7f9373d84c59ed19aa44764d24fb24bf31bb2352eaacd03","size":1831195,"data":"","first_seen":"2025-03-04T03:23:02.060485Z","last_seen":"2026-04-13T13:13:58.719874Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FavoriteGamesContent-c3zcF83Q.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e29f6fd42cc0e7d08454249b8d89109e","sha1":"89670d6405e765f3e4c1cd7c85802207a0cdf2c5","sha256":"c7f4ea3c2548373b3ba229583feff8cb4210b7a73bca5591238e0326ecb6a6da","sha512":"c89f9878f8930ee2233e1a29e1fc7e09d538d9d9fdefb58d62c1774716de04c01ba6226c2b9f0ad60d0ca89839b107131872c8bb6a0fc6e2caa8442ce9b6ecdb","ssdeep":"","tlshash":"0051840050415ff9bf8e9eea6f2bd1941979034c6686c17da8784f3d2429a41713bff9","size":2785,"data":"","first_seen":"2026-03-21T17:26:39.612494Z","last_seen":"2026-03-22T00:40:17.793637Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galabet116o.com/core.js","fqdn":"dataspot-int-bucket.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1a23321d0a7b81fc124eb474f519164","sha1":"7302a4790a11a55a39af27b5c5d95391f36c7449","sha256":"ce157be72b0feb99d83e0ecb45dee49f9e8f69330da84cf33d65c8a80c297a63","sha512":"d6277696b3f9808906a75fa273e27c5777028965b625be99a466119e25cba96e635598bfa686bcfc065bb901db6dbeb2262b56012d65014d784bebc2382b5815","ssdeep":"6144:D1Osubz6j/kbklCp/5Kbb09tg8KSFO6JxC:BkbklCpxKbbCtg8KSFq","tlshash":"8e34944567f11c2752f6b0f94b0bc1d6722ac003251a9c8878ad73b85fcea7896f5bb4","size":252431,"data":"","first_seen":"2026-03-09T20:13:42.687398Z","last_seen":"2026-06-13T16:30:41.661759Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"08397d6e88093d11c11fc3c646f46d87","sha1":"34901b1793e52775aa571a0d7755016cc6f870a7","sha256":"3952fabffc8af8a6abca24de73061831a3fa74fe8481c55b5918a4971595c1b7","sha512":"3a221d9efcd2104a660a798eacae655d87fab36bf3f72e5a70d53716ab6658a45df821bdcc96e24cf61a18385e46fd7b458702b3d160b20441d32b50540b1cb8","ssdeep":"1536:ufCnu9Hy7ugIHUk5ea6Lqy8vfo9CuRvU007OsjYLp9MxhFIPZ+g:SYMUk8IOF8FIPp","tlshash":"4373c027e34320fbdfbedb615ad9b7ad107de097219304cc15aa14c24a79957b7a80cc","size":77435,"data":"","first_seen":"2026-03-22T00:23:19.382744Z","last_seen":"2026-03-22T00:23:19.382744Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/ButtonWithAction-DLXWMp1-.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e89d4b67c0ce532f32cec3235e50823","sha1":"cd66782d133d21562bde53ab4bf77c8e3753728d","sha256":"d8c3af745c755279a4955eb849c11298796114efe59606016a33e13402edc40f","sha512":"909db2d090af51aa3edd713ba8c6171b576535f7507409d5af21c8735726120f3812da1c036c9d58f717c15f4dd2b1321bd4ac4658db2883c6ad48901aa138bb","ssdeep":"","tlshash":"0cd0950f5451d1f603c5fdd0a22bc41139257d60f7c4c451804819403b7179dc11ef2f","size":267,"data":"","first_seen":"2026-03-21T17:26:39.607991Z","last_seen":"2026-03-22T00:40:18.009198Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/GoogleAnalyticsTracking-DzsiAHbD.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c30b07b6e6d96a02961fa121d936f2c","sha1":"b9a4142d99821eb90ab286e8accdd5d8cca5497c","sha256":"3b654664159054341a4e796d088aaa15d5b0ae7a460e47c74748a3768db23406","sha512":"f10646c49bb35a7ce60f4021e5671e9bf71ca8e2b1865132dbe0b0c70794ed01afe084d178b81be5435d1efc99ed275c78aa0afaaa2a94d4b5eac54c79d694ed","ssdeep":"192:sWYceR0SE+m/CTb3bHXCT76h1QxGE0VK7D6L7kBNrnPsh52Lz2PM7mBE:1YcoE/CzCuEP3Bky2PdBE","tlshash":"7852b55c32adb0b682df6054587f720bf1755910a458f480a265edf46ef8caf02abf36","size":13704,"data":"","first_seen":"2026-03-21T17:26:39.415393Z","last_seen":"2026-03-22T00:40:17.807909Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-BgO3MW-h.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"21a327b0619c3c1a324057951bbd14ab","sha1":"4f00a495a58ee62d19e6b5849989cc5618177634","sha256":"f69a26ae2b8c112785730a553e7f2b7d2b41ae889627f26f0b866746c536b6d6","sha512":"b0b3795759a6c3180fd9e4fa453572caf9644e0f2dcb10b11f1b5e526ad304a6fe0011fbf80296459ff6e8c516f52aecfad1f5ef58be025985b6c9c261bc7841","ssdeep":"96:q1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:R+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"16c1a65631907530c6d244a6914f42aeee3e7638f00f50a0b23f9c6d3ba1525daa3ebd","size":5948,"data":"","first_seen":"2026-03-21T17:26:39.40142Z","last_seen":"2026-03-22T00:40:17.987168Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/UnavailableMarketEvent-CEcm-hzZ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0b0ac8ff4ea1cdf1c6e3218d90af5f8f","sha1":"560311f83f0e70f7915a340a709fe175752e98a3","sha256":"7ae2345a86ab8a00f2b0a3019769022692d90986cb2a311f42aacf61a63cf460","sha512":"3d2d8cf095d4b2a186b587501f0908a86da704cfbce63b6f5943da761aa4661d7c352d57164d1ea49fbbf8a17c0668bc008b062f0fbf409e30b41ed85dedbd78","ssdeep":"","tlshash":"bce07d09b004bbfac02518ccce3e4f0d541207a5c7e945d391a910181b34261350ebaa","size":308,"data":"","first_seen":"2026-03-21T17:26:39.660084Z","last_seen":"2026-03-22T00:40:17.841734Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoJackpot-B9xPGuUB.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c681dd00011ca8f396b64d03b78c8d33","sha1":"984d629f7a1c2f7d57a81c77cfeeb02d6d851e53","sha256":"cc99cd3a07b804e7ce37254db7c6bebf70961a2a0284038437e5dedda04b7279","sha512":"0fddbf82b4c4250aaae9c53cc10ba58e7909eaed6003bf15e48780bee54835b67ff55a40cd92ff4cdcdd8d8ceb6e786ed4b3f85863ccc23d29b3a37a5b402742","ssdeep":"384:bm6srKqqF3EjFOFEGOpOpeHMtGRxeG/Pcy7x299pP8FJgr:bmB7CEGOpyts/U3Qgr","tlshash":"19525c05f012b7edbcad54f7887ee0297a5e1aa9c71808b8d1bd6c313c2c855760b7ac","size":14339,"data":"","first_seen":"2026-03-21T17:26:39.564114Z","last_seen":"2026-03-22T00:40:18.034532Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","size":697,"data":"","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-05-22T17:22:58.055376Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/lodash-kwDFPdct.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"12e56cd99d8f0069e4ee81a372fe541d","sha1":"44e49f0b5438f713c4e9cf76e3659a00ffd35e87","sha256":"d77e40234c5d8cda5978d85ecd94a77ad1231619bf0b371d67fb2f3074e96425","sha512":"69908919839d062f0d861cf4591600c01193ccc7fd4438009bafeff34258217d381b6581a2142725c495a3a1bdf7937964c90108d0a6fd6e01ce2b90a854e9a2","ssdeep":"1536:RU70QnXcPZMTC7X/7crNuU0OCbgjE3mhgELujQjEO6epU3nddIIBQoMbPDFLufvn:RGc+rh07XgLujGEOtbavkeLkDYlwMh","tlshash":"74f391c835d7f4a183a7287440bf084bf23ead65a84cc550e1aae0dd7db8919c277e6d","size":165397,"data":"","first_seen":"2026-03-21T17:26:39.43969Z","last_seen":"2026-03-22T00:40:17.967811Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-WIMCHaiu.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9b2782650ec3bc7acdc4746a40024c65","sha1":"6eff74730fa0eda9e5abafaa734c505751244788","sha256":"156c9584ae57455fcccc4ba27c44cf9a380e5e904a06092bae04b487ff57ca69","sha512":"0391894fcdf91d6ec313cda92e3af9aa61e90a611157bdb38e1853002c4d23cfe88693ab8f96be3e5c8a70d6290e505cecafb89e1279d08fd59d3addd635a4b9","ssdeep":"6144:MfeL9y0h4R78o8e4YaIALoh6wj9Sd51jjVvFavIRcDGRD6On:MmJy0h4R78o8e4YD/j9e5xavIFROQ","tlshash":"6e240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","size":221144,"data":"","first_seen":"2026-03-21T17:26:39.395349Z","last_seen":"2026-03-22T00:40:17.969853Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/withPanelButton-Kc5QyNkV.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"716c41abf4e6c14cf885b87aeed6613d","sha1":"3284bee4f3fe8a1474c6fd5feb8aa09a3f8725da","sha256":"9a4fbb219ee8354bb94cde371f38b1fee6544c9f2b29d7549e60961847841485","sha512":"58d7ffd4e6f156b5d7b0138ae3a19ac35e0eacf9e1dd19fb3259989a19041331796417a74dfe218105cbc286386470c1cf38477e105107362cac2b0f032ebaa8","ssdeep":"","tlshash":"ee1112e4f5c4a9b2f4c41188577b2cb2759f32d9dce114d031b2c8da5fe8048991e9af","size":1089,"data":"","first_seen":"2026-03-21T17:26:39.44375Z","last_seen":"2026-03-22T00:40:17.873544Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"galabet116o.com/assets/DisabledMarketEvent-CPPtnhoy.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/DisabledMarketEvent-CPPtnhoy.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-a9d\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Uqy5p5Si.Uq5sTJf2zcLCyk7NjkfU3y4TrDywpOfgOM-1774138932.5928662-1.0.1.1-IWsuB.pVUeVLxwc0vvP63GQ97PUOOydLIgl3SF5H_ILdQ_hSJ_E9Tkp8aEOf6sGu68vifsykO3vrkrpVqpOcv_w4ksnuCMbgYU1KMfWCN.H10lWlm6VZBuCnBo4k4.E_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ke5EVLovAEq1bqlhfwP1TmooPQcYVn0vo0ciL3ZW7nu07e%2BQWCDPdAwAMUJoKkYAxoN0cvhmYuVValtdgqhYqjp82sUylejBH10KIawOBJ7COaM%3D\"}]}\r\ncf-ray: 9e010a6779d3a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2717,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2716)","md5":"1ae7d8c222219b66a065ab6cd12346b5","sha1":"cd4e545ab58eea2dfb81e019db83b0c38aa163b1","sha256":"91e1c015e24443ecc166b3c80d23084b7202fc955efb7babbd75894b28316f08","sha512":"ce552e1c0f5315387462390ae80e21eb8ac37a8f52c4ccfc4db8b5a9ba3cc9f9b59c4582f2bd40031f7e198335795efef3aae2da13ca499359d5447a527b322d","ssdeep":"","tlshash":"cb51846df290fa7d993a04dcd23b1f1f601913e2c6590992d0be8c29151c0ee326efda","first_seen":"2026-03-21T17:26:39.419582Z","last_seen":"2026-03-22T00:40:18.068229Z","times_seen":4,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/jackpot-jNbP6Duk.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/jackpot-jNbP6Duk.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-178\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Zji3D7Q08P6T9B_Q_p8Z0DkfRE5Y9qFxMYcwAmdkRFw-1774138932.682515-1.0.1.1-3yG09G.XcDgxoDeuAzIKvsLKdL7T2CPWBuibcLx2g80ei3bm9sDas9fSJSO3Gocl2_e_aw_VwN9YmSgemGk_.rPyH8vFa5IadE1hWtP467.fKeObMBkBhK49ezgWsee0; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uryzgXd03cqzFn8bE9Ei6IVFYUNjUCUTKXLDz0duHV6Zd4r2%2B7xPwphITIU4L9TEJ4%2BHuDHqFJNdZJUuLNbxIOe5cJbIw6meQW2gGVle2ctbZEQ%3D\"}]}\r\ncf-ray: 9e010a680a15a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (375)","md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-06-11T18:58:57.27262Z","times_seen":102,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/cdn-cgi/rum?","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 637\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BkFQHj8gJSUTUQdw8LBiHm9Eh2VsWjIDp4qJJtKvLR46FG6IOrtLR1H0exqwv19rGgeB4ywnMo5%2FLb0PWnHvMUfObBJsrqYGxCVDhHxXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e010a3bd8f3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-06-13T16:30:25.249463Z","times_seen":18786,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/events-CcSKgVKr.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/events-CcSKgVKr.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-17fd\"\r\nage: 406\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=o.WwiCZIQj1SOGsxNzpYakzO3cnnatLNq.LjUgroOsI-1774138930.430601-1.0.1.1-A7c_.MmaGHpMZtiCgODEnnKqQYOfzjvVPLRqW4UzoE16i3wANqQc2j7Wd71JAlG61.yUF9SzVHO50qM6q4qJ4rXGHhX2KsbnlkGbvtCVABzafQzwnnqzXO9EeD21yM8Z; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLSTdjvs4V82o%2B5uqFx7IMsBdVlWqWRal2fCbNYpEv%2FgTlHMdRvBsXVFl0wyYQNeYvRJX7k3pssifh8aI9dEk5zzcVVHcfOp4%2BrxVUkhvJuoWAc%3D\"}]}\r\ncf-ray: 9e010a5a0f04a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"6fc0eef96fad08bb59201d62b01a05a3","sha1":"70b77730ce38865b4743bc672d001253ab6f2840","sha256":"a47b119988977abcd7e45234a7b28325876a133c1b5acc203fa7dec725fea22d","sha512":"75496f580eb9eb357e8bbb21a32ac3021a3c8289ec816b96f412047d8ed05915fdb06a40db5af941985f0039d0ff6cdcb2b99f3ca5d222041be0b647caa4c816","ssdeep":"96:0d9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:03IM2sWMtBq6n3PzH","tlshash":"05c143ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126fb8","first_seen":"2026-03-21T17:26:39.445809Z","last_seen":"2026-03-22T00:40:17.797546Z","times_seen":4,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/463.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/463.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1215\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 06:20:21 GMT\r\netag: \"212f16fc1f6dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 09:03:28 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 227925\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=2Y4kjGmrOK_m4SUyixKbWyzDW1j0kyhI8pKANiz_uGE-1774138934.2555013-1.0.1.1-iXCef89ObBsRQECAHlaIlHDL4eHw4cXTZ42B4hjQuPyFPNOPFyJVSJeRpfPKP.uftZBdGkLKMQmZNvfxYEfpZ5rIo8hceXfBAcg1XstY1YovNWf1FKPVWqXGeLhQqTn.; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3EkrzpxKPOppoDjlv5DawSy80QJFqJFvkFKjXrTK5cL63KqKvOWsky%2B8aRLq5LsCAORkWRrROdoPCcH%2BX8gdaHbsLnx90T%2B1yDRdQUDDiLBQdAyhb3EqZYmSQY%3D\"}]}\r\ncf-ray: 9e010a731e7d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c1b16501fbda8b3a4ff56043bb548b34","sha1":"8f444c5629dd947da52453fce945a6336d1448a7","sha256":"f8774ab1284ea6891d6156e1d8e62ca5689e9f604b59ef79bb47657e89e236dc","sha512":"ff430fadc875455b963f6338b9cf38f4972147f9c7ee11891f6b3552abee2c30177b7276c917702f1ae34390af3cf2f8bb4ee88d428e267716c7343e679a2972","ssdeep":"","tlshash":"0a21dabfccbdc5bbdead3aa457975b00bd793666910f231050f85650116426cc4d2e41","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-05-16T13:14:11.782595Z","times_seen":268,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FeaturedGames-DmW74qti.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FeaturedGames-DmW74qti.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-1ede\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=CI9iyOFdkfw8M2wCG0VBAjKGvcaQ0qbWpGCG.O1BWYc-1774138932.234609-1.0.1.1-yO7fFYysrRbA5JE58nYSWDH8jTokPNZfls3ZrmrTOMC0sPMY4ChfE2vC4PnauvDGL2Aub._nRKxkJzbKtRRSXfFtdH4GBhqA9H48PM0ZobOH6op77aSfodB1My1jZyT.; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T96JOSbCAD7yRIJ3Tz2zyxI46ItK5UgdwUxmbXGvkRq6NWGPXmTzqqBFz553V6G9eEUwF%2BuhWzt7xzP7OXmGbP1wUSuYF%2Fh48j8mpeBSwo%2FWpnU%3D\"}]}\r\ncf-ray: 9e010a653931a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7901)","md5":"19d9e6b05b0ea4c2aaf5ff097f62ec60","sha1":"74da87d2807e21cbebe3f99804c583b50dc62a6e","sha256":"1008f34230526be542075acb3e641fda44c1617623c017461ba74c923b97e742","sha512":"c59507f99048474eb0597fcc27a39d06f2b2d9231d85354a2d78d12c6ca76c71b2a90f1d4d56984429591c0cccefa143a20eeed9eba60200d42da244f93e5375","ssdeep":"192:xPV9D3fNHnEUDuHDY2bBEoOhC62JmMwL4Bflg2yD+l:FXVHnWHVbBE3hmS2Sa","tlshash":"69f1fa0ae015fa7de67b49e7b53f5108f47a0ad0e7280890d07e5e1919e9246733ef8b","first_seen":"2026-03-21T17:26:39.389562Z","last_seen":"2026-03-22T00:40:18.039261Z","times_seen":4,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/events-CcSKgVKr.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/events-CcSKgVKr.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index.es-DXJtvHoT.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-17fd\"\r\nage: 407\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=1w5oWbK78K6ujU.TbaobLZ7GI2yXNYkbDt1RbkRRbdA-1774138932.2824168-1.0.1.1-Q9.MAQxqt1.GF5rrzeBv35oIgLe7pMqcpt.xArrgNyZhURbNHf7x5u9TToCWMOBTp6rHhRd.cTNO8NCw256vLtZR1IrocNpu5kPKb_tetoE1_j431nfoIJhKYYpC2Bxt; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNgBHfCE%2BgKNJoYKDwtYkujeG%2Bm%2FwPzEhrfouGX1mJMfswhM6Wu%2By3z1uU0Q%2BNOWvL%2FhZ5ZQt6%2BGVSZunDT7PHDxozo6CeAsf%2FN%2BZc%2BCRH0uQWw%3D\"}]}\r\ncf-ray: 9e010a65593da0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"6fc0eef96fad08bb59201d62b01a05a3","sha1":"70b77730ce38865b4743bc672d001253ab6f2840","sha256":"a47b119988977abcd7e45234a7b28325876a133c1b5acc203fa7dec725fea22d","sha512":"75496f580eb9eb357e8bbb21a32ac3021a3c8289ec816b96f412047d8ed05915fdb06a40db5af941985f0039d0ff6cdcb2b99f3ca5d222041be0b647caa4c816","ssdeep":"96:0d9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:03IM2sWMtBq6n3PzH","tlshash":"05c143ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126fb8","first_seen":"2026-03-21T17:26:39.445809Z","last_seen":"2026-03-22T00:40:17.797546Z","times_seen":4,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galabet116o.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /configs/d212f7f1f16e55d50593214ba05a0f99.js HTTP/1.1\r\nHost: dataspot-bucket.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 17 Feb 2026 18:00:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 00:22:13 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\netag: W/\"6994aca1-47e\"\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=GwlA2sel3pP.h3ANMfzjpraUYr0Og53knEwWoL5hpkE-1774138933.5639906-1.0.1.1-TFo.4m1myehBGUV51EDrJVfr.LqHqjnuuXPal1_haCXBcxPxY9ZiHv1cGqe7dRJknwUNkEv9ggvdLTgaX.b45eU0UKPqAsuvRw3Wnw8ZkShGSSmKqYYx4cvxvrRthzx7; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8WQBmj2axz6aiGJjYPNPNuaVeTjlpIAoLtJKgzGRj1UmCtQuOl3Bg4eFjogYoRT5A5HSJU9rC2Jm3F1oS82JERlAu7Zmy9Af4tiidX06oohsy00I%2BR95sY2Y8S1c88%3D\"}]}\r\ncf-ray: 9e010a6cdafca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1150), with no line terminators","md5":"c502cf55b2a3f78e648f2bf2b2eb6582","sha1":"cd87424dc2922aaedb4d7418e581a1419e8ae5db","sha256":"24f898e9c39f054c6511010c44744db4702dcbf9c75ae5cbacbca2fd852f50bc","sha512":"ae83a469460b683155b1c51ce1309db2b9324f146a6274fd33a18d7b5e2f6807baa4c9d049ae330e03917b4bb85ddaa33122250a7e286aa541fa0fc60cf7ad97","ssdeep":"","tlshash":"0221e49664d8bf7706f01ef8e3156a48b4567f487031c849529fa89d6c214c24579f8d","first_seen":"2026-02-24T14:18:16.940585Z","last_seen":"2026-05-22T17:22:58.22331Z","times_seen":46,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"dataspot-bucket.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_e2992c962b629258e32496488e343bb8.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_e2992c962b629258e32496488e343bb8.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18922\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 31 May 2025 11:53:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"683aeda7-49ea\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=n_1AETTfNWvlMsZ5cgy90Zh8W1uQIzOz60sEOX.mRZc-1774138933.5522122-1.0.1.1-24SxQY2CnAs4U9zdhV9hXYopjwoJY1XP0GOInqiFWNcpoxl3WqZT8Krju5s7UAugk3C2ALuVsKnvfq0t27BA3coL7VrOxZSzVi7Nw6QXOd2sJEdhyGtNmHUrnK1N1iTJ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Il9qO0xqyaA3%2BMOhjiKpaRx2JBVeW9taGvwszu9TpOhQAnk5FH07WONDGjM3cU1XmFbl375ePL9nEAffsx6wICzWT%2Fl7w%2FoRjfC805CS4QMbytKrUQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d8b1ba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"903c69c562a0cbbf1c19ffb312754ab9","sha1":"6b4ec5970d79a6e68c3452ed6216390060838a25","sha256":"0e4d56e0eeeba1be555347bc03ed2125cb792ae75f2ce14668b360230c341f18","sha512":"5b6ebcac994b2e1c2544a910a711bfc046d701704b371d62732b1754bafa403e5486b91eaafdae875d752b7e3122fc33e7f22a463e581b4090d2779f80ce34b8","ssdeep":"384:8Iy4zvEFK9vUhGAB466Z1W042wifdTAyYQiai1i23xB:fzvEw98Q44R1WmwifdETQiXDBB","tlshash":"2782d0a6787d1671ef46e14583b883de87210a0d9b91878d1f18a420dd3d72ecab51be","first_seen":"2025-12-24T22:39:16.347068Z","last_seen":"2026-06-06T23:43:56.135269Z","times_seen":54,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:15.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 22 Mar 2026 00:22:15 GMT\r\nexpires: Sun, 22 Mar 2026 00:22:15 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154182\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465712,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"7c95c276dd26ae680ceaf31d168d64f0","sha1":"0e7d39f3b467ed3ec8a74928027bb1c061fcb752","sha256":"ea34db2dd7928b065a6bfe5171d849504db51bf730a5d82c850d7d652752916f","sha512":"a9058cc64544efe7af26ba9e09bdb5c7d8bc7c77ba377e080f49e9237a7ea315588643c34bc92c76528b158850c2efe666665ca9ff1e4c3e4f619a9680e7ebc9","ssdeep":"6144:VoJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:l4RfICAbHm8eeBUX","tlshash":"2ea4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","first_seen":"2026-03-21T17:26:39.643432Z","last_seen":"2026-03-22T00:40:17.988837Z","times_seen":4,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":38,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/menus/header_menu_751_tur.json","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /menus/header_menu_751_tur.json HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:10 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:10 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-3c7e\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=SqVkg_fJXy8jO.15qXZwjVCWnFWsi3RWCJTK6Vvq2HI-1774138930.470322-1.0.1.1-6n3PSW85q9S1E28Gn_ClMo4LCpMEMB7RHvVWF_Fj6N2ec4.Vk3_w5n.wWheyWQohZfS7I9f58psSMj.HEJYHYGlCj5ht2yQ.tgPHD5IdkxA.ixDFfYP2EHguijLvfpmR; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VQFh5Rdl6Ghdz72uFhXXX9zA9XeUBCMXa2DhprbmH79zqsEmz3bmHGl5XFNjObpErdAND%2BFaNpSoRXf5dykMwgULIDQxWChrFWWHpfE2gstllPc%3D\"}]}\r\ncf-ray: 9e010a5a1f0da0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":15486,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15458), with no line terminators","md5":"f950052e4f7908e80dab1b18c4d9bc22","sha1":"b207ea46255abcb9d33c6feeade70c839a6f01e6","sha256":"c10a74e63a100f832983312c21a61f14ccb42f3f1c20e035c18222379d817325","sha512":"bafeb511eace49af68577fce7c189f2452847b6c3e1571135ea81e2afbb44f1b442172f29727c85a3f370b0a10986311293a374511dcee70f418678f7bb59612","ssdeep":"384:McwDCO9HzZmN3RpQ6evgsNnNTiAO2Ba3rqpm+x1A7TENAzgO+jKelF:McwDCO9HzZmN3RpQ6AgsNnoAO2Ba3rqj","tlshash":"3e621602f01e5976d3183e007cc76d5b98cd509d6c9d49409d4e8acecbda4af8eca6eb","first_seen":"2026-03-21T17:26:39.441607Z","last_seen":"2026-03-22T00:40:17.799173Z","times_seen":4,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":446,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoJackpotPools-fAp_tFNt.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/CasinoJackpotPools-fAp_tFNt.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-371\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=trNmbgcybKZMRirc9P8t2.kXfT_O38vKga.APtxsed8-1774138931.6843557-1.0.1.1-IgtHCcwQ9rytEN2JHqWRLCeGQoz7ebZNYty1dFtomSobIMqNClb9nZNgJNnNyJyIO_.FbFcbjIEywNLMu7cwsBFld71NyZ0Cn1DwmhcAaYpasHd.7dASM8QN2C3sDOJ0; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmfNDzFVCDnNaM3pjIoE2ASdly%2BeuYIO6AaFe9SB5bN72Jc93oj1bfIWimwmgxeYr4UMbZcZpI%2F0D8LC5bRyFCVaoK66iHBfG1573RTpT0%2Bex6Y%3D\"}]}\r\ncf-ray: 9e010a61c8b9a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (880)","md5":"5918d349ea75aa702165e8b092d3b0fb","sha1":"753be348a9b1bd9cd842c8d6a3df0ecf613f9226","sha256":"7a95ae3b8b2ad563cdfd333ee422aefcf2307238e68e01fc031003f559450718","sha512":"de4df633ef185ed57d2964b09d2bbaa88b47a08b90463bfd9677bb3c6bd777f4961ebbe889a80df9636576890ff9d1bb27a2e052618458bfe4b1960a5e9fc248","ssdeep":"","tlshash":"0211008bf02bf3f4c88c08e14079495a073e2f7af71181c0946c5a285b66847f5a87c6","first_seen":"2026-03-21T17:26:39.606633Z","last_seen":"2026-03-22T00:40:17.962048Z","times_seen":4,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/401.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/401.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1425\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 11:33:24 GMT\r\netag: \"5532ebf9d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 11:27:43 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 219270\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=VIIiXA_xdZyx8ldLAvu94ffPZgU.I.aVKL16AQpQE1c-1774138934.219923-1.0.1.1-5T_6Rs4uskJBjhAO08OJbv.AdHebKV6vfMtQU_dih1S1oZZJTf2k5GSXwJFlTTOV4iBoXUTqyUPavTtswFJUQFOw3.bLzr_c6cWqh2abIBbf4ydh11qYDpDfaVXbkRWv; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nr9vpCVnzU0G%2FL%2FCxttCraj1VoURhTmmq5PUyT4YlEtSzZcL4LhyQjEioSFbkwLjghiz9EcEx24I3Dwg7vsIfTfQnO9GkCYElTThqX9tcL0nL3Ujo4KnO7KXGX4%3D\"}]}\r\ncf-ray: 9e010a72dda4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8cc4e1601b8a75ae9d499e4a0e352b0f","sha1":"87031934720034de74987df9aea1bd94813efdf7","sha256":"c9533f86b377a63e9568d35b40836f86966d477596704315d90e2a07af2e5c7e","sha512":"6a28c9be4e0a3ef7e699b61356d58d39dabf3112c5eb210a38b892d784f4a5fafd77b19c194b394bdc3db5f25f65ecc778d667eeb4bace4576ad82ca1410b17e","ssdeep":"","tlshash":"72213ef1d456572fd79e90deb47f67e1f6cd751d000542da00496c45c4f6548044c512","first_seen":"2024-09-19T20:43:47.556193Z","last_seen":"2026-05-22T06:52:51.847735Z","times_seen":256,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2Fgalabet116o.com%2Ftr%2F","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:15.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2Fgalabet116o.com%2Ftr%2F HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08830182bc634a30e1ed838d837e66b2; expires=Mon, 22 Mar 2027 00:22:15 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 9e010a7dcdfbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-06-13T19:14:00.410296Z","times_seen":101300,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.21btcoservice.com/?type=json","fqdn":"geoapi.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:06.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0RZNI%2FB28stOkyrW3VLSZlmL1T3M6fyq7KhKhHl%2Fnx8efWN09h2makRX5OiP0BrbnzrZPpFrpx3%2BYYbZyoDHzt%2FuXQasX2RUU%2FHy7JqWVLOp%2FsrEUlrSQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=st9El8s9hRyW5EG4.dVg4NU5eN9WSt_lEdnE6n1dN.4-1774138926.6731343-1.0.1.1-7diharbnKp1eR5_Q0PuB.zmY2KF6WRrrEIF4le3oYIW2LpMJ2Kmo3VqY5Rq2t660vMBOhkqgKWmwMcvxckearscmEWo4zGE1wj_xk1PAvohPnA3rl026pt.ZfYv8brrQ; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:06 GMT\r\ncontent-encoding: br\r\ncf-ray: 9e010a43b8425fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":75,"dns":47,"connect":1,"send":0,"wait":111,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/tr-vKvB_tcp.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/tr-vKvB_tcp.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-5b3\"\r\nage: 405\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=GNhABVCg4nA9aAOOfmT8RBJ6PkP9QIhpEIzTYB9eGqc-1774138927.6157622-1.0.1.1-s.4xmWmpOaj8cTK7.q3qpbCwy6J7YB4wBnwio9qOi4AfliV9u2uYo9myQWgLDHNJMYY5CCJJ4PWvbEuc.2SElOpPkz.ovPOBXffoY1GbU_NQrtydjdfpueqCv.aEgo3i; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O383M2MmUM3hZKp9caX8q6JXdqMbnruWzQ5Y3fUwW7HacthUgQkioCoAjR7A0kIH9yMdcN371aQ3OX2ogl9bMR3g1QvX4j2tE4akdhg3F8Fn06A%3D\"}]}\r\ncf-ray: 9e010a45ab26a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"029e4708c52bb4fc1e7f00b3414d9537","sha1":"bb8e29f589a2f69f1a05f0388800ab447040e565","sha256":"07583a599196f96701dbae948953a539fe0b88fd9392d57e2dfa3466663d01ae","sha512":"4df8c5c71ab5f560a88a315c5b0983c2f6b968a7d32a6c0cfa9491c1a9e26496882296b475411c288734d01b03c8e7c70bf9a0ad11976bfefd11b20fb30fe3f3","ssdeep":"","tlshash":"1f31a44c2906eab28b016887882f5f04f81c2b087136f1719ba0c861ba709ed807eb3d","first_seen":"2026-03-21T17:26:39.379575Z","last_seen":"2026-03-22T00:40:18.189259Z","times_seen":4,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/WagmiConf-B0zYIpvp.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/WagmiConf-B0zYIpvp.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-18a72\"\r\nage: 404\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=flanYjx9gDLtRZmryzxoE0JtfNa91Ke0rSrGm9D_lCI-1774138928.1395392-1.0.1.1-y5Qks6qFsarHyzBTdPdpR3_tTnvAA0U0OWVwEoxxS8V7_6ulkCB71dOqsDzwRumT9ik_jeHKSpTEg00xlTEyLd_Z..VMjGgbR3.fTNiiT8kpWtLCqILmJaijXqs4zvx4; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIN6QchpSZy3ONge0EgwyhQULbr7e8zuNM04wudC4AkxmjGeALRZBprsqrMQD4IMj3RSKC%2FX0VG2v2cNV5ELodwa0rQ5Oe6iVwVseJmAg46FAvI%3D\"}]}\r\ncf-ray: 9e010a4b0c69a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":100978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48214)","md5":"9ffc7f8013321c1fcfc6d9055babc05f","sha1":"f2b3ff148c33a75074e577fe689c3a7e07791157","sha256":"233f2d1fe68f5aef052bc5e2ef81a7663782ade365249e40d628f8f1c6e82879","sha512":"1ac7b4df1da940a29ab80541089861f322f6edeb46925d8c5075b01c66e5dd4dcb39349ba4814f5262b6934b7afe14b68d172595066334dd94364782af886a51","ssdeep":"1536:892Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPYE:hCaSlx5xG7NU+WEy1bPjv1K/XGd","tlshash":"67a34ad07196b46103a74ae008bf440bf139ac34200e565cf269ecde79b96ea9277f7d","first_seen":"2026-03-21T17:26:39.449607Z","last_seen":"2026-03-22T00:40:18.116093Z","times_seen":4,"resource_available":true,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/withPanelButton-Kc5QyNkV.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/withPanelButton-Kc5QyNkV.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/NotificationsButton-CmZ_pc7F.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-441\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=n8ycBQbR7RlloNzRpc6ZzAf7zIsdbqzhLBd8pe69R2M-1774138931.9958646-1.0.1.1-31TfnS2qhIh7qVP7TYkY314V5ft9Ne_t1gv7U5LFBIU75BZqvWAf_HiUBrbZd7n3qMdvCuZ8XpM.9JkTNmTuJsW_3.DyvXgAJtgzFnfJPvOP.iqKSR_XVOajntm9v8eU; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2FXEZc6eB3mShQEugNkB5ESW%2BJNPtVlTdTb57rBsL64jmyiiU8mxcdBJ6HR2sRgwVCBKp2T%2FQ843ukZUgn%2BPVI6ZtBQ1mkgnvs5QUDrrKE4zDvk%3D\"}]}\r\ncf-ray: 9e010a63b902a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"716c41abf4e6c14cf885b87aeed6613d","sha1":"3284bee4f3fe8a1474c6fd5feb8aa09a3f8725da","sha256":"9a4fbb219ee8354bb94cde371f38b1fee6544c9f2b29d7549e60961847841485","sha512":"58d7ffd4e6f156b5d7b0138ae3a19ac35e0eacf9e1dd19fb3259989a19041331796417a74dfe218105cbc286386470c1cf38477e105107362cac2b0f032ebaa8","ssdeep":"","tlshash":"ee1112e4f5c4a9b2f4c41188577b2cb2759f32d9dce114d031b2c8da5fe8048991e9af","first_seen":"2026-03-21T17:26:39.44375Z","last_seen":"2026-03-22T00:40:17.873544Z","times_seen":4,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"d9deabdd1848c34f3ab46722f446c153\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e010a3b984023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-04-15T01:21:42.632515Z","times_seen":11130,"resource_available":true,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/logo.png?v=1773142319","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /logo.png?v=1773142319 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/LiveChatAdviser-D27OhzDI.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/LiveChatAdviser-D27OhzDI.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-35e\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=3Mz05Pc6HsYSLd7vlIGmqEk_.iew6GpP9pAqPXZLT7w-1774138931.2639625-1.0.1.1-2FpGNoe1RGuj6N6UNqgqvLlRURDOry_mtfSnVqkW7TXYgQ_ZnazsbO9gMNMXvwv9.xOafeZuQdVHhnVyxd9WdPFyCkwedQOJR465oI6aopUPOjewyXYH42G8_l56an13; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4sn9%2FEHTtj31%2BE6Wgn5DOmbJbdim%2BVA8ygZMIDPrXLYRQSbW4zPKnoCGDha%2Bvzq4UJDnDaxUHJo0uXb65%2By8iO%2F4E3S%2FvSw6vZ9dxgXk3uPYwU%3D\"}]}\r\ncf-ray: 9e010a5f0ffda0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (861)","md5":"3f2f2d7d30934cdc6d0c21e68d266516","sha1":"e2f9d76a03d3b6486f98e28063874aed70597f6e","sha256":"c0679235f12e7fd2c68602e19e347b02bfef3b2294537a021c919947c34ad810","sha512":"ccfbb78a037b16838f08bf177af40478c903b90d8625a5ce72007afc3b19f6afd999668179c42580a4c0116dc034fe2b3ff63a69f1c48a6bba666596391e3836","ssdeep":"","tlshash":"4e115295f0c2e3fd6667284dd7ae2043700a4fb5d22d4db6807b19601a2ce09e30eed8","first_seen":"2026-03-21T17:26:39.544297Z","last_seen":"2026-03-22T00:40:17.804736Z","times_seen":4,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/fonts/default/RobotoBold.woff2?v=159","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=159 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-f250\"\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 109\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=c8wX_7pLHF_EM7gWWuRykV0yTe4m8W9g5nj35PcoslI-1774138931.4716444-1.0.1.1-WWXVtZtCVCkkDxf13vu.hepmx6VSe9uvnGVWNQcSh8.eg8_zdW.MorfSrTZ_AVfMvjBYYWI.jGnUv8vKPKY21NNXkJxUrFLySlsesyzvz__1T773LQoQqKya09jXMyFB; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIAc0JtZ5EXMAPGT2Z2SUxiBend5ambKHyQuMCyTE4ICmju0LvEHPgH7mYkIN4FKWvrqyHYFhU3eed55suSO0hw2lFQQ5e4K%2FbEpmvrVg2tRPTg%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a5f8841a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-06-08T13:19:39.297237Z","times_seen":2663,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Casino.BjyJcCbk.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/Casino.BjyJcCbk.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=oPbgYoissTMuIq6uR1AFhee9y0xHKPe9KR2Di98zoXo-1774138931.781346-1.0.1.1-FjNNgOAxUNUR3K_CO1MFcQ3zc4AOrXMEScV.zDK6iGxL11Euify_lbMZZqwc.10WUabg8_06y1cMcwMgDJHacDT3_8bdAxNPv0ynQNT4FrtO6r3ExqBKzCNCTLj1p4kH; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qRnO49AVlCWmTuivXuFbb3vlCfc7T7wp56TZaSG3HQFiJKhPTm%2BJkNK4ViLa%2F2gEpowsogt0THO2I0kW1hhEPFw3G3MkESWbngV0gLyyOY1mY20%3D\"}]}\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-8bc1\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6188a6a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":35777,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (35770)","md5":"f113b1c9638ce76e385e727e0ea46694","sha1":"277195ae07e5e5e6bbb4b6732c3a04d41af04eb3","sha256":"5365ca88751244c00948d0275a580d625398578985219c10ab31efd9f8289c35","sha512":"768492a4bdec3871cd5e1eba328330f381846d86c3d9a9f85adf02e49f6d53042c1846be971b332a5f73702b2351f4a048a799744993e32b65ee9e4321439c15","ssdeep":"384:Rpo8j6E4sa1Hk9eeGKtNyGG6PwPJwWzY8IwgrOl009Hkz7qQXFDpNDF6:RZj6E7Ie3uIIEz1XN96","tlshash":"6cf28673961923bd75b796523ac0de9ce81c48b9da232641ec967237c3c79992c307ec","first_seen":"2026-03-01T06:34:53.940522Z","last_seen":"2026-06-09T00:47:26.228896Z","times_seen":90,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/HorizontalNavigationListItem-C9W5wxFK.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/HorizontalNavigationListItem-C9W5wxFK.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-2d8\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=L8GGA1TC5TTvjHVGMeASnbY1KQD1CNsvDWEc7FzFq70-1774138931.7853627-1.0.1.1-Gpw4DFLCpDol7vCnEZisTl6fCvKwVrPdFLfkSrzDnbHAfneymPMB_U7CQMpGvtA3s1jGGWElBBBq8BseYOMa4FbqZA1cCnsVIXWguOpyEZgljE6LRnIZjt41GiYjYGqM; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MehIKbLPrieQFHqZg%2BWBgnUj8ZJCpL8A8njmshpq9nX%2Br1y2nHkD6eVAFMl0qu4DYGTZkNcHLblMyf1tubZyNXLWactk%2Fcj5JAWKEREDmdv6S6M%3D\"}]}\r\ncf-ray: 9e010a61d8c0a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":728,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (727)","md5":"ac06b8982ccf6ca471baa48a0c19c40f","sha1":"2beae61a21fd2d59f9f03a8795d2efb19aa6baa2","sha256":"9e4e946f9caf7daf8a634127530fc8588afa0ed9668f7c6bea709315c09f99d2","sha512":"5f0361d32bc8cc698b97e0c47b49f3de892c438447041a8eed5c71097b6e390f96a6759981c40b8f446f53ccd31c4af978881cd7a86261306a6034d18552fe67","ssdeep":"","tlshash":"a701c001e014db7c9a2b55c86b9e1089b1579afeef382cf1a0f4e11209344593646e8e","first_seen":"2026-03-21T17:26:39.54095Z","last_seen":"2026-03-22T00:40:18.030844Z","times_seen":4,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/PromotedProductsWidget-Cu6mpMj2.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-Cu6mpMj2.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-84d\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=kLgHifaLHyJ7mWT6ZMCru2KBLSIkeyvlSihdpeMeixI-1774138932.1232476-1.0.1.1-IlAqjqyVcxZaRuG8r9..hLL.KtvXTJg0T0XTFAyEMjVcNjMrxl4aZ07P0Rqi_aQYNW3eLJbLUejWnp06JPunqwHPDE8roNcrttV9uiCG2GtgwUF4EprPhjWiiIxvyXAM; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Np%2Bwz06WMgWAtqI9iPMj3IpCFdk29Ik5BX2gjC3SrXo9dFiyFG88gTazE6qMJR%2FMzCeMe%2FW%2FQ8JGxorySpEfvgvOfXkVmxJurgxwT2dwuZtl5M8%3D\"}]}\r\ncf-ray: 9e010a61f8cda0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2124)","md5":"7c3153e4aa4ebdfb11edb1ceb74721d7","sha1":"63a1c4e73b113fc5a7cf75360a42fa5e1d09007b","sha256":"0efd8b0b27b02dfddaef49296858ac0af81408ba031a3ecc38d2362f5b57f851","sha512":"31680001416098b2b40a7dd8905262064badc782cc6f7c7fc22afb10da2e29273384113d1b522894f476cf38f68e66ada739b7e8b3d94ad2fe13cb74e2086723","ssdeep":"","tlshash":"5a4175c2d838b2baf63e5cec214510c838267d18d96589b56077bc1a9139812bb57ffc","first_seen":"2026-03-21T17:26:39.657319Z","last_seen":"2026-03-22T00:40:17.80938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-WIMCHaiu.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-WIMCHaiu.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-35fd8\"\r\nage: 404\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=1YJHZNXHXKpRRO6l9yqxE2JIAbYyyqUvU.9XDhLhMEI-1774138928.070198-1.0.1.1-_n0mcfB_kvYwT0bm8NrDbedJ3ioMNeflhgmSsCaub_aLFb8s6zEk.WXiues5MnZcM3iohWQLiWdOW5knmdtZaR.3WUervzzwnW6fCNpUTyiEnzKECWf1mVVvTbO.C9t9; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6Fl4DBUyE38ATni17Ob56nLj2SGeQb71rVh3mIaDsxUXJJ4iEiQd9g9%2FBNm7CSKl2ujIK5r2Utx4VxRshyjsaYSHUPw1b2FzIjZ6SqMvWHD3jc%3D\"}]}\r\ncf-ray: 9e010a4b0c6ca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"9b2782650ec3bc7acdc4746a40024c65","sha1":"6eff74730fa0eda9e5abafaa734c505751244788","sha256":"156c9584ae57455fcccc4ba27c44cf9a380e5e904a06092bae04b487ff57ca69","sha512":"0391894fcdf91d6ec313cda92e3af9aa61e90a611157bdb38e1853002c4d23cfe88693ab8f96be3e5c8a70d6290e505cecafb89e1279d08fd59d3addd635a4b9","ssdeep":"6144:MfeL9y0h4R78o8e4YaIALoh6wj9Sd51jjVvFavIRcDGRD6On:MmJy0h4R78o8e4YD/j9e5xavIFROQ","tlshash":"6e240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-03-21T17:26:39.395349Z","last_seen":"2026-03-22T00:40:17.969853Z","times_seen":4,"resource_available":true,"data":null}},"time_used":933,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":400,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/live.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/live.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:11:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=d6Q.7KE2FNvfBDyWESILCyEIQGFBQV_bTi76xRT2TcE-1774138931.4048128-1.0.1.1-Kd60imFlooVrXlyJf2JoYnAsYZtffqUb.qZ7_0xSX.fc2kSvN2M0fHR09Iyn1m96r6RZ6VodHUDy82N_JiM0MfuzU609O4JU6yErvd.8FEOqwdaC.Vjk5GsajXHawbO8; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uliuCNV8nNDR2OYZgHvYOiqWdA%2BAmajIoV78ZTQLjET%2BYHkHxvrS2%2BAHT4vrPTIyoWhoVumyy5hayGG6oe8zn%2F3qno9VWc4b%2FZl93dJ5XERB5aobcg%3D%3D\"}]}\r\netag: W/\"686270d7-223\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5f0d581525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":547,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"177a1ecefa857471d64fb388cf5125d1","sha1":"726ab602ef7c82c9db251ac2a8dbdd142a28cedd","sha256":"e9bbd35f8b3d2bd962d3811c39e4cf82d2448f40576bf0e2fc495f5231b2cd1b","sha512":"b17c2fbeb47ae4e82b2e4b65e0874d54bfe07636406d4d56c25df1af1ee331f298538b63766cb21fa96cad217f86c61c2a1a3baee117ceb992c194d80ee87513","ssdeep":"","tlshash":"10f0e9e8e0b48a583948712c1b1c28952e3b32330dd18a39306be32e1f1254673cb659","first_seen":"2025-07-08T10:50:27.692829Z","last_seen":"2026-06-11T20:16:20.719542Z","times_seen":1698,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":103,"dns":25,"connect":1,"send":0,"wait":515,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/eSportsLogoSportbook.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/eSportsLogoSportbook.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=IyHMdV5RxwYZ5Df1jI3jirMqj4kokjjAIfyn2p8TPDo-1774138931.4104636-1.0.1.1-E79R.DImuVbrkyjHblX4l7i8dSkBqatrscSj9sWx6YJbWH67ct6ciPlEBYytAdrpTNJxAw4NChL2AoCpm4OMq2SmUooOUv8dRew_ilLmKji4ek1W6hBWVT2iZaqQBk9i; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsyUjTTpLs561Cb3DR8EYb1su6nVuOvOZlWVm4vAcR4B9ecbxwIg0t6FfsF%2BLWRU0Wv0hmmSxqrsR46OkhhhrV6becrRkgLSXi2it3gCyr%2B7L%2FlYsg%3D%3D\"}]}\r\netag: W/\"68627053-43a\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eecef1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7947853d1ed29dd8dcd4f9f507e49866","sha1":"cb30cb5a0f55083522666ec3424780ddf247b264","sha256":"676e17bd005b7d157e248a40b8b8d0e1009615e5b426510dd0f5d8a158fedf9b","sha512":"0c46971a79be56e827f5df0f1f3bfa7583bf8a9b273075894c07378b3dd0ecf6800426cc7a9d5833626655d9f0958aa57eaf50ec7bcdd726fd78f3176efd9290","ssdeep":"","tlshash":"7c11d82cd3d8847cec39e3bc51356ca4704a48daedf6d275e25b89b05713758065cde1","first_seen":"2025-07-08T19:55:59.718474Z","last_seen":"2026-06-13T16:03:38.850717Z","times_seen":340,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet116o.com/api/public/v1/tur/partners/751/seo/page?platform=0\u0026country=NO","fqdn":"go-cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/seo/page?platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5H5%2FhyS8wyVupiHGY%2BZuXmKzVY2ccehrIvBulitedrGW4rocp76k14BjBkAPNaQ3iV8OPxC8sugPP3pd0TNk0Fw%2Bc7bya%2FXM3h3ZWzAFh3%2F%2BWjOvwvI%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=whCbuQaQIl6.Bi3Z92HBIsxDfbLGqQNVYqSQzal1khM-1774138931.452397-1.0.1.1-3EZ4DzpmKYwvJ72yqyqBE7pb3unsw5Y9p9P7m7O3cB6tHsXYP7.jz7V5XLqmCshomW.RT5HJo7xLA5X_cEAyYFB2BaNomhEnqFTmrUiTCqPAt8gQghNmVeuVO73H2Kge; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9e010a5f0d561525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7671,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c3cb355e0745f8d403e214af1595e2e","sha1":"ed786d0ae61ad6adce28150c04a932c4e9bcd6da","sha256":"2b7c48aafa192476fcb639519893f40c28c1de98bd5e66b84769edc55b047be2","sha512":"1c1840626aba24469d43e66cef0893e9627c25afee6ab6a955e6cebf21946e2cf3514c9587cae3c5815a3b7b5ceabdb18cde0fc4b6d5cc52e798e14c7c456b62","ssdeep":"96:E2K/6TXWpoS1kKXplSunUVtRQl8bqOHEyj7fuSE3Ytvkeu5Jbrt:E1yTXENDplfnUtQyDjJE3ovy7bJ","tlshash":"76f10f0e37962d9f038a5fca29564d3c4fd55386fe41a91c8d63ce1e2bcd278d22ae01","first_seen":"2025-12-24T22:39:16.082152Z","last_seen":"2026-06-03T04:20:31.887932Z","times_seen":73,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/NotificationsButton-CmZ_pc7F.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/NotificationsButton-CmZ_pc7F.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-22e\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=mdSs9z86Ucq8BCPd4ECRApOeuxhzenvyUvP.vS6bPXg-1774138931.2414148-1.0.1.1-SbSyTAJvv0JPlS_qBETCZPlJrIfG.fBFsSr88VvDR1vKXT8rN52LEwA24LpPWj3r1AdmSxuqiHN.34Bsbk8iSs2BVr7yN3K0bJshv5jNZBqO.sS5G.E3x.ogPn76Lppb; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwgYJSIHH0hrO0XLitICcjtUdn4qz%2FznsRCYB7or6I6tW9B4SLS7CKMQu118OPw%2FMNOUFzcNpYcmOR0ahzR%2FDIM7D3YgHkV4YjBFnnT54tRgr7g%3D\"}]}\r\ncf-ray: 9e010a5eeff6a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":558,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"051a83a76a17decaf79265acca3f4d57","sha1":"d7f6e37bd318580a705e97bafe6423fe59fedac6","sha256":"186e8d40128d0573379363a0f0541a546388b54f525b6da47c408f57ad8e6e95","sha512":"6b0ddf6b7e7971ef86cdc5fb4c880491532c8a50a561a398cd175d41daf7e7f72004b6a1d78fbd661d7c5c863a75f3b3f8e5e49614ea62b6436468192bb44d08","ssdeep":"","tlshash":"95f0204beaa8d4b41bc39e70633b8426383a7c2cee4a948000a62c55177015ac54fe8f","first_seen":"2026-03-21T17:26:39.459535Z","last_seen":"2026-03-22T00:40:17.889441Z","times_seen":4,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/InternalDataspotTracking-CwhbtXjZ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-CwhbtXjZ.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-fdd\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=5.hDJ8AIDUJaRElr2d5mHiDr7pa6vbZHRPmwHDUout8-1774138931.7336912-1.0.1.1-6zCuqGKdyPu1UmnMHgLllBYR8rE_mt9ewTZmVxIv5mc6e6c7YIof3ExO1cK_iR9QikBZNB2xYmzcfC8xswFdEyly3Kv5uElNYDoYbsS_BJF4jBE6B8GjJce8J_XPNQqe; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBVFVlGLPtjqiKrMvSTn%2FEMFzGZod8RPIEMfOyvGHW9Q6kYtb0E9%2FYZ5gR0nleuZIIjAmDeZu3ipbbiIdAg8WLAMTIDGnrt7bMZJR%2BcvCMjbEmI%3D\"}]}\r\ncf-ray: 9e010a5f683aa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"e6501d6c8862a6d97a90d85ed74fe01d","sha1":"f129d89747618d4ff3906dc5c64cdedb38fa4b2b","sha256":"33b71cb4a506d6d28328cd654361c176eb5182f35f87730ac6547db66d7ca1c7","sha512":"eff2e7892fdb17f40b5e9e45327a5c82e65915865d019ba3e80189773fe7d2da285496dfa7565e3014fdd56081f51cf05f2cf453f2de37b86e86fc2be81a3994","ssdeep":"","tlshash":"7381731fd83c05b17064c9ce5977a997c6a83c8e51c0c8f0602a9eaa561be04dbf6ed7","first_seen":"2026-03-21T17:26:39.587133Z","last_seen":"2026-03-22T00:40:17.831434Z","times_seen":4,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_0c89eafa1fbe108a67b08009c9857d1f.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_0c89eafa1fbe108a67b08009c9857d1f.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 159322\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 11:29:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69bbde36-26e5a\"\r\nexpires: Sat, 28 Mar 2026 14:44:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34657\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=vo4ScQXnfwZ2nVycAa6vnaUE6R3P2R6Yy7eBPyNF81Q-1774138933.903738-1.0.1.1-.Iyl0tG8DhN_3SZxDAlxTzkrCNfW7TWU9y9K0KchJ8OEUNEAEknzj9wbns9b8XumO6hVm.vgypNtxk4.Hu149TOqzu3U_..SQPqzgY5_Asigufd869pljMj7el40En25; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EL50SkyAm5Zig4%2BiHu%2FnLiWB8%2BCfdeF%2FETX4%2Byk5mX2kZletDX8hCv4u6uhn7%2BDrKhANB3ugxG4obu6zSw01wP0IffeGABtXIK4pY33gRsR7T9JojA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6f8b92a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":159322,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be08cbac45a16c1e1f9a62eb5279e612","sha1":"4473945d2f43756f58ab31e95f170109226c4ea3","sha256":"30fe345879b06a35bcaa0fc05effed868c151f8817465b38577041962e65fa1e","sha512":"8c7b8a176e8fc496e5a89a32420a4d08acbe28378c53a62e074f2bbf33d291978834778e4559904a5e05b39e84f454b0b2798a66e81635efc6e3145ea5ebc368","ssdeep":"3072:2+ha+m7tQBjehg0RQ567AeGyAfyrZPZ5sjpffsZzMZspE:2P+m7tQ5IhQ5SEyAyrZRk8zKx","tlshash":"39f3120ef96a87da7e597adc0eb13ec63a0c57a380a045e9549fd45b4cc57f327220e1","first_seen":"2026-03-21T17:26:39.453347Z","last_seen":"2026-03-22T00:40:17.828488Z","times_seen":4,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galabet116o.com/core.js","fqdn":"dataspot-bucket.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /core.js HTTP/1.1\r\nHost: dataspot-bucket.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 21 Mar 2026 14:13:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 00:22:14 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\netag: W/\"69bea7a4-185ce\"\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=UzmERop6FXBjzIxijc7r3lWFfFtNSFT7.0l1DrPF1w0-1774138934.0620039-1.0.1.1-LQxkH1MtxIKwBlzY4LGGdY8TWThxK8Os8vMVw7q.IXeygzGr6Q8uIH.a9c2oMqiOq7WVH1ao.ASj52ek9wr_uJoyQvssTs5UwtjONxihM1XlSQuwvm08AXM1mLLSuLNE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJw9LMTAC3aNpypbRldozPQegQwrZkyKV%2F%2F1qpIOBlgSwLorPzZ%2BL4DWhUZwFb6cR3%2BVuRlhg5klYutABzeXDIh%2Bnufz4GtOIa5rr08Kp8ox7cYQPbyHgwQg1n%2Br3BY%3D\"}]}\r\ncf-ray: 9e010a703bb3a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":99790,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"055db89d9f6b86d5497ec019668827cc","sha1":"a86074a3089454d5f51c83593a5b0e983610cf7a","sha256":"dae03523f64a6f242f1c2cfb89b2d39434c259c1e29e2c732d36969cd439e606","sha512":"2d5eba0dbecd7a61b9975b36bb17946ecdc4e5e67311f516f5b29b196c2dec7f367afb7be8ae64c71062627d009bda8eb21a58161a663d2b4d954ad988034133","ssdeep":"1536:xpKZqZWm6P+GgMwnm0ub2xiD/hIbq/Z3qDPAcnh:KqZYSmX2e/hIY33ch","tlshash":"fea35dc5b1a164f083939bd1d4750253e32c6865390280dcf7bcdeda6f299cab166fb4","first_seen":"2026-03-21T17:26:39.611092Z","last_seen":"2026-03-22T00:40:18.191048Z","times_seen":4,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"dataspot-bucket.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galabet116o.com/configs/928de3c284a560a4ec2990544700741b.js","fqdn":"dataspot-int-bucket.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /configs/928de3c284a560a4ec2990544700741b.js HTTP/1.1\r\nHost: dataspot-int-bucket.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 22 Dec 2025 14:02:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 00:22:12 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\netag: W/\"69494f86-9a7\"\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=GMnDoUz38IRzJ6mba5fhAaV64HZojqWoqZIZHbYIIRw-1774138932.4499593-1.0.1.1-sPIlUY4ea4zsw0al.ld1BOlLwadFXIY2ZTQp7pYv3Rqf_bkh7oZs1wqwBBblGuRTLCajb12CllVAqi96pfdKsNyj.oCH0ikoCPxireyKiUingOdZsDUmdUgvzpn5pBi6; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DgJr%2F50JppBAmlW5lR9yvfaNMoCrXaG2rmuSyGpFS1ta%2BXxnvG6BGj0uUmoDF%2FwMqnxXBfCJK6ZsjIvjtccBgdvno5crYQwtq9S2aMW9CKkj0PG3bTIP8cJbEpALtuixy%2FXa\"}]}\r\ncf-ray: 9e010a657947a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2471,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (399)","md5":"1e2a6c49770a52100388701459104032","sha1":"eb58c40e53a15e3b55fd60c07276e5479e07a89e","sha256":"161586af456353acc3ccfa1748aa3886066bf8f3c5614a5c4db0e4df676adb2b","sha512":"b601200e6ae6894ca67b3afc195d37fea9db1864900cb63b60428df3f106c70ea2e379566d43c326c3b7d439895f609866b2c4a54d77e7a2697f066c05db6a8a","ssdeep":"","tlshash":"aa51f31578e21e7300751435a55768c0b422bb47152ad88c3bce760c4f7db7995b5b8d","first_seen":"2025-12-24T22:39:16.396562Z","last_seen":"2026-04-26T13:53:22.552111Z","times_seen":29,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/AppSettingsButton-Z8Uar99K.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/AppSettingsButton-Z8Uar99K.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-181\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=UnOy9eGr1Gi2ccX7O42J_tdbPuSs0eVkicxlj_4XYOE-1774138931.3273351-1.0.1.1-GuthjnBCa.jzecDpMU8A4mxct95kJzV9_6PxPv9W8k7YPf.5YbpF72Af9jEATBALvWsVaKaZ2SupoRczZmWLKILjoA93Nn3e_WpIwYFKB02ERr6MqbES8jnvsrQrrdUd; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EWcr4XADSYX3q6T2%2FIFAIiR102fVeHo6N6Ygk98rYej9IsXkToJqMcdNcUvbjSjA%2Ff4CkJYwXh5dIMLACuJw%2F6%2Fr%2BNe9VzPfNfygVaVuDIQ7QQQ%3D\"}]}\r\ncf-ray: 9e010a5f0ffca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"89a30a627156dc5f5d2c27520b8dda1a","sha1":"7b42b5f3a628661504fb78adb51f204d573e286e","sha256":"622f3d41c1979a9d6e6856504b9bc1c5f1afeb02f3ca7c0299060843da6d581c","sha512":"46e969cd79931186b55227bfec7a5bf3eaa2f2a2538d294727796d70f30f17591ee2e676ef5695a2b5f163073d8124911f6257167d7c1c16baa75bc2e666e921","ssdeep":"","tlshash":"f5e0c08b91c2d2fb07d27ed1c11fc50179267c38d788d94140bc649176f02c6d14ea6f","first_seen":"2026-03-21T17:26:39.599828Z","last_seen":"2026-03-22T00:40:17.805928Z","times_seen":4,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/NotificationsButton-CmZ_pc7F.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/NotificationsButton-CmZ_pc7F.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-22e\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=TfEDg5k0A_O0LSkNA0tPPFO2zopluRpaINWDgxprRko-1774138931.582784-1.0.1.1-3LG8puNi.0IevPkvD0wuVWlQBbms266nu9eJWbQ7zjdpbVp2hEDmlBMWTZLhx4thue1Lhl_g8VpWmRaYQuF.FqyLm5jwaPTh4KgvKg9x7mDhm7YvNdPmoW5mv2kVKB05; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mU5ITxFR4FVFvr0y9YTCRC5qHopgyM8uUEj%2FCWJVxjzH5%2BYKbVBIf72Shu0k0kpl%2FdlibcsY%2F8kuh%2FC8LT%2FbaL6UDR1%2FgJz1Zn8F82bYbejSgR4%3D\"}]}\r\ncf-ray: 9e010a5f4828a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":558,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"051a83a76a17decaf79265acca3f4d57","sha1":"d7f6e37bd318580a705e97bafe6423fe59fedac6","sha256":"186e8d40128d0573379363a0f0541a546388b54f525b6da47c408f57ad8e6e95","sha512":"6b0ddf6b7e7971ef86cdc5fb4c880491532c8a50a561a398cd175d41daf7e7f72004b6a1d78fbd661d7c5c863a75f3b3f8e5e49614ea62b6436468192bb44d08","ssdeep":"","tlshash":"95f0204beaa8d4b41bc39e70633b8426383a7c2cee4a948000a62c55177015ac54fe8f","first_seen":"2026-03-21T17:26:39.459535Z","last_seen":"2026-03-22T00:40:17.889441Z","times_seen":4,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Odometer-DagrzJgf.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/Odometer-DagrzJgf.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3d08\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=NoD7qmTNP2IxeYl6KhTmQ5O7VPz_gQH_aXmd0_kWmls-1774138932.7045364-1.0.1.1-0UvsbjmSE4XGfJ.rrRlsWGwrQ9Cb5lodyCzDiDj07agoytmRALcmQJnTEEuZ3w8.p47Ciom_iWbXua5UXQKCvW57bZ3XyXl0ogB5t.EzFYG3CxV.Ic8Fh007ryLBKLZ9; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F65qg6u%2BX3oQ7GDHEbN61ols5w1UMfpI1TkRJzssrI4%2Bf1PW6fUqiaKmKpwMUSs6qvTA7aC0YiAMYc8rBQJg8fov0PqAtbQ%2BARn2cF%2BI4xFCIEw%3D\"}]}\r\ncf-ray: 9e010a680a17a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15624,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15623)","md5":"8a74ad83f4d1efb621438d7021c4628a","sha1":"120a50a42082236b3e09009ec567650ef3fd9347","sha256":"dc82bb79f276cb80002d3acf0030ab12ab8708a6c49ccd3a6efa43f016a699e9","sha512":"6b1f7dc97e1051af90eb7b72e4c5858e98aa819f42e7fa46c45cd42eafa7f088d6bd156a5880dbbe207de909d54a5dc2090721f104153898bb4029ae8c05525c","ssdeep":"192:J9d7KNJtQak5S0CGvDF2pXokmkvm6HjI7kauLPH7BNeSYpkYxSBrC7TlFa4PBD:sVQak59CGbM1mem6HjLPyFtUhkNPt","tlshash":"43621a897922723443a3b1e055bf4609773e5d6a3808405db67caedabe32c09d12bff5","first_seen":"2026-03-21T17:26:39.710671Z","last_seen":"2026-03-22T00:40:17.816907Z","times_seen":4,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/489.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/489.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1284\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Apr 2016 08:12:02 GMT\r\netag: \"aa95c7ca59bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=UFeRUA6DCHvOvX_1.EQilZoEgGZA8WsIWtvBJ9jM_ko-1774138934.2600646-1.0.1.1-P4J.GI93b5B_qo.3Hc8ZrC3pAE8JD3qbCXvsS1I72ArO1ZV_idareJmNOW3t0UTF9cJNaE_d2QOWrizZbQCmeUVxp_ILNPSms40ZLB8jc84feYPdjR0pQ1i2gaPjgPft; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FAEXn381kUgn8D40fx9fIRk1l0q9nXNjGPy6b52yctwvxA%2FL8VMTfZWEhDYJj5CmBNpO1y%2FCYi%2BMHp8PjcueB50muvBVDMHbQsCJObDh0ZbtY3Lf7E4Z2uPiqmE%3D\"}]}\r\ncf-ray: 9e010a731e9a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d82ff322d525bbf2856d9853fb270b74","sha1":"8e6e8f467cdbdb47386a13a5255524467dd695ff","sha256":"54b659f5cc89b45942acdb0f6fca0978cf24fd53df24d9cb52d4cddfac3fd258","sha512":"2564416e6281f3e5729addbb30d2ae56570bb83afd237869b7b9ec2b0cac1fa0c281db00fd9d304d84f65e0f358866b801069dc3572291789b92bba05eab025a","ssdeep":"","tlshash":"e321ea7185bf312fdbf74905819c5530bf1520ceb5d4e44c9e488412947059c8bed631","first_seen":"2023-11-27T06:31:39Z","last_seen":"2026-05-23T17:36:46.319292Z","times_seen":269,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/firebase-messaging-sw.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:02.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /firebase-messaging-sw.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:13:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-465\"\r\nage: 505\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=.IjB9l5X_WXqSnGEABVU7TfaI_Igdw6nQ7tACytTZd4-1774138923.081687-1.0.1.1-RwYixw0vzu5kOCRR.Pi.GRffOcyzQCOfrkw_XyM5V2afILAGLKKkMpvEyO3clOEY0QVfoXcmpWNU00V71WhCt2S861C2rIKOru24z3VU7j_WUxr1kJ3U2m3z90w35r_l; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:03 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8OAKZ2k1fd2wuvfMobiON7Ew0i%2BUYLjzPc4ZYsOKJSUNQ53wkv%2FIXt01vOx5ZLfKoBs%2BJ%2BXQO0uAr9OhyRt3zEgtsdnQrxnkbcwFWeizWM1ZHH4%3D\"}]}\r\ncf-ray: 9e010a2bfe8ea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"44b92a7d10cb0970ced5798c2eb1b8ac","sha1":"819f60615624f025d1256efc408d8e576a909c7b","sha256":"a87215bfd90d96fb55335ce2b2411f38074588149c9e896505cb10b250e17e1e","sha512":"75c55da9e8afbd96b6219292c91fb88e01c15d20bafc974028763227220aa042f4b761895d44b0394baae53c225e9b0c109d2eca333aad6b382951a60448e8fe","ssdeep":"","tlshash":"5121cb124be2f8231e4104c7679f32186e290d2507b0f1de61bf56b86b0a57b206bbc5","first_seen":"2025-12-24T22:39:16.149326Z","last_seen":"2026-06-03T04:20:31.962446Z","times_seen":77,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/loader.png?v=1773142319","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /loader.png?v=1773142319 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 456\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-1c8\"\r\nexpires: Sun, 22 Mar 2026 01:15:20 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 405\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=sXceNI..hJHhKGho8kdbzOz1AzHG19._Ub_OVOrezrw-1774138926.0371265-1.0.1.1-KOpBGAJHJvbu_IqYtwr_a17shTOoy0Roy3WqsvcplRAe96UyxiCjh7sci46Du4PiT7Q7stQXcID7fy6LmomRRSF._kVU7ZweaZ37036Sg3qjpdw8Sz7PDZrsc1FcEm1T; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbuHmBTxwLTU12qHtwkZS0ToEkHsc6bASCgDVD4BZ%2BK%2FrtnsyArrz7itd3wtDc2hUb4nfMageZJMkivPoc3P2ANYI8wmRqNfCmy62WBJ0%2BJWmh0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a3dd96aa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced","md5":"ce13d4aab7656181924146d7eefb42a7","sha1":"89af3054ab4cf389e7e905d2ec756095801680cd","sha256":"393b5575ab9863a7702eb2a6bd7405f3118d0da53ff1a3257d1d7353a056a59c","sha512":"4153a0d45eb10ca02aa1bca3f3dc78529b3d1a23d582ab9f5831ba71b9a5de126253d469d28276160f1ed27de41049491125726144c40e17a5fe2c26a77406b2","ssdeep":"","tlshash":"14f023d69fe31ffaccc05a9a7437c3710c22824a829936149107009c645ad2f8dc4e1d","first_seen":"2025-12-24T22:39:16.322656Z","last_seen":"2026-06-03T04:20:31.988411Z","times_seen":59,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":414,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.21btcoservice.com/?type=json","fqdn":"geoapi.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FYgY7r1nwurf%2FnpMXO5PmyaQzUGWcgtFhf4fnmgxyzd7g4Toe0hdvpCmaf8ljGa2AHwX%2Fh9MG3eCSy6rL%2FeO9bK9UMKkzoL%2BRLgDtDJa%2FwBVVPro7qqTQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=NDUvHoyJUvdqSdFX6TKvzYJKhwhjdlUOr5qKQzsl5BM-1774138927.0552373-1.0.1.1-vEWiwCMHHvtKVDIdWvxQiydFuHVXhq9wjUyT1CZk1MSz5IedeFCMkkBDIfc2cozSSCjL5fCSQweO3UhSozc0QAme_N64InZf8jsI5WYWPyCbvaKIir.stZ7T4ii3yl77; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:07 GMT\r\ncontent-encoding: br\r\ncf-ray: 9e010a461b3c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","date":"2026-03-22T00:22:10.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:26:18 GMT\r\nexpires: Thu, 18 Mar 2027 19:26:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 276952\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-13T19:33:34.327926Z","times_seen":880598,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":35,"dns":1,"connect":8,"send":0,"wait":9,"receive":10,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/InternalDataspotTracking-CwhbtXjZ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-CwhbtXjZ.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-fdd\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=VgkHkHZv5guP8Fo.SidB416gFUcX3OrCIDocK_1CWzg-1774138931.3389673-1.0.1.1-1_7icp4rtGX_PFDGpvYF4IHtJkSsedI0_zqI585JTZjOzEH556.fZarUmJA3SjX6mP2atHCWRNlh0qLfs6dkgR0voTeHyxFmihsYdVco7enuM_pngAomQ6aD1WshR.SC; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxHI%2BoEvEcZNkVp24ji87RF%2BlGKsOr%2FfDFhzzAPJ4oVrwMoE85EjFkBPLja7govOcL37%2Bbz8ehzhFEJHWYvr%2Ft8rleU5Bt9jtsLfcpU4OCITAi4%3D\"}]}\r\ncf-ray: 9e010a5f4820a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"e6501d6c8862a6d97a90d85ed74fe01d","sha1":"f129d89747618d4ff3906dc5c64cdedb38fa4b2b","sha256":"33b71cb4a506d6d28328cd654361c176eb5182f35f87730ac6547db66d7ca1c7","sha512":"eff2e7892fdb17f40b5e9e45327a5c82e65915865d019ba3e80189773fe7d2da285496dfa7565e3014fdd56081f51cf05f2cf453f2de37b86e86fc2be81a3994","ssdeep":"","tlshash":"7381731fd83c05b17064c9ce5977a997c6a83c8e51c0c8f0602a9eaa561be04dbf6ed7","first_seen":"2026-03-21T17:26:39.587133Z","last_seen":"2026-03-22T00:40:17.831434Z","times_seen":4,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FastTrackTracking-Dwszikk4.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FastTrackTracking-Dwszikk4.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-52a\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=PfKJo83LtIZqAZijoU1BqHxbFvobw862lhk7Ij_dgnA-1774138931.6292646-1.0.1.1-ksAnPMZMZvzSjTJ_iioNKsdzqYWJ.fM8Wiqrvq2NC_3IY1c5okn2FbMxqv63LOMtIrXbhVfvSMxhAIHYPp2HcoTa.ZxDayxaRSMtaey7BROplAgFswuo3BBFbDTKfBVE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgtQ8JhoOg0NWHQvQGU1vvFgeGm60ltZRpELG4kErHiTvfR9RwS5tu15%2FSk5zyyAJ2coC40vWqy0ogDlAZtkq3PIo4kks8jxgzaUydxJXPOBzHI%3D\"}]}\r\ncf-ray: 9e010a5f5832a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1321)","md5":"af41c045995fcfb27926ad6c22ae3283","sha1":"da167a71a31cd4d9b19e13d37095544f149ec6fd","sha256":"81450ecc7999e92453a3446ee6b61a01893fa5e85735a4ee749d9f9cf0c33bbb","sha512":"86af573598eefb92f27bf94d1c58424af046dd8ab98fc108284ccbecbb76bd74555dfeecb9148d10e40dcdfa1fbe53c6f0255669964d7a2d353fdb9bd08cee2c","ssdeep":"","tlshash":"c321750f90e443b47c804e8da3e7a261953d5871711ec4e1f0760bad3f0ca6583dac9b","first_seen":"2026-03-21T17:26:39.373556Z","last_seen":"2026-03-22T00:40:18.035421Z","times_seen":4,"resource_available":true,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/AiPromotedGamesWidget-Byj5O19S.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-Byj5O19S.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-784\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=IlUZYQF7JHp_VQ1thAvb.AL3uYteiBmLYgIpYO1A7IU-1774138931.8032415-1.0.1.1-j0db4xulQ4X26YQCKRbuhNaNJf7zvIAT8TasgIZssfm3BxAW8ooKGjHaZQhbzUo3W636crVOOmec4ctVHuFBDUNEvdejxDiQmt.HnmV1V.g18toa14xYnetDIvlejsB4; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hijy%2BffKrbg%2BgpJSIY44eH8cZLI1kT5k8IAHqS5t4gNNT0VchfEklwDlCdZcMB5LyyD3M6P%2FI7qVOENNPkvSr31NWem%2FCJtGbYIpg6kBF85l2h4%3D\"}]}\r\ncf-ray: 9e010a61e8caa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1924,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1923)","md5":"84edef470c315c31d3de5ed0b5105d95","sha1":"635ea115da194dc2ab021eefd7e1bbfefc98e181","sha256":"1843bbc55023e4f235458fcdaa749beb69d2142f16b74f6e32a856dfab2b77be","sha512":"696adaf49f0aedb5ef049390a5c7df027af83e4c4454986f813d7604bfbe26337ce2e3a64be60378c83f166536ac28161aa909a88837dff435e4d6719699beb6","ssdeep":"","tlshash":"8741642bb019ca7cf22c06a05294f745a42177bdd769a0ecbaef1900731409d337df85","first_seen":"2026-03-21T17:26:39.577171Z","last_seen":"2026-03-22T00:40:18.077623Z","times_seen":4,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e010a68ee06c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4368,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1594744c430c14575dd987b06663f8af","sha1":"6ae3a00b9045083fc80dba950b908f9e7513e211","sha256":"db922d127c83813e54ac9a7e4fb61318bdc34765fde199edd3859da07f9b1a04","sha512":"6dbc4888f6eb430e5c148b063707a5488e01f7a4ffef184ac67db37cb847c0d69eff429b0c1bd3122ca4b1594229d6f4f600497011a876d5ddaada4d1fb9569f","ssdeep":"96:nNSNbh/YiOQxX+1A2teUB7SOMVMrhIa1WUqrZurozkhLQtwN:8OQVqfhSPbUK6J0i","tlshash":"ec9110b79f444a5e2b2407c9702d3e9c855e250bcbc09ceaf0c0cf2984f9eb967559a6","first_seen":"2026-02-01T05:09:11.282943Z","last_seen":"2026-06-06T21:30:11.817911Z","times_seen":246,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":72,"dns":22,"connect":1,"send":0,"wait":18,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-CnlG40EL.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-101a\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=6kwRx58FyGqjWa_s3f9iA8ir52lULu.2RqgDM8iqm.M-1774138931.70979-1.0.1.1-kxmJWhgC0OHkgDB6NJY9jLAq6n2vCvjhMPkJj4db0imkqL2r6nQCPMV9ESNIrJABeDMpskexz5ISJw5BlzL4q5jIZl88sy1r1I15FyYfHocmIwx8GNlJOxD72nrA514V; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtuvowRYszE4bdFsy6bJCcrwiyEVqsrekBdDtw%2BP9ejRuHj0bRTSM8FqOXHIz8vTrLqwnDxMJTz4cH561jNxWox9f6iwgCuksiejKWwxc0%2B3UHQ%3D\"}]}\r\ncf-ray: 9e010a61b8b1a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4122,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4121)","md5":"b105b9d1c817d1bba91c163aac4581d3","sha1":"c22908ad81be0a8e388a40eb1e251cec4abb6092","sha256":"6e3edc344d0220e455f2aa549e20a36ac03f5cb02ddd01f318d9f7d3265c2970","sha512":"a468fd003fd463ec56511dfeedf72a9b06a95e17f3a6aa9dbef93e99c2444addb4af59cbc7d35300e1fd95c28b8c60b4d88d025b8a1cea8ba2c6862de9769f60","ssdeep":"96:5SubClTBeLPTGNlTJC6YacmDD+oXtPeYFaOatTz8:5bJYE684KoXdroz8","tlshash":"04818617e01ab3fce8ad04a2503f910e377e0bfdd75604e4d0ae09240a7d85af259bda","first_seen":"2026-03-21T17:26:39.427542Z","last_seen":"2026-03-22T00:40:18.100275Z","times_seen":4,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e010a68ee0ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441060,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"163b603e838354454c1e785154ddaa77","sha1":"cef425955b1e8acec587fca01910201dfc29b100","sha256":"4c23e96b95c2a2f415c0bca4febeec378005b2853b75cad1fdc986de2aad323c","sha512":"40e42d8ed45c0405cad29997faffd4c9c165a60483ad66289d6d44c26d0fbf3fb0e707c2240df2d02fd806cced7ef9d96e52369c95694283670a0e18851b4dea","ssdeep":"3072:bnRMpaIBoZbVITZZYA5drAdZ7GlAMIDl3g4Wcmvu7IHkGOQkDWgkQ:LSrBGVIL74WHu7WOQVQ","tlshash":"749444bb8f848f5b1b280bc9212d3d6c999e298bcbc55df6f1c0cf1844f4ab92315566","first_seen":"2026-03-21T04:57:18.893098Z","last_seen":"2026-03-24T08:36:22.981001Z","times_seen":15,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/1/2659.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/1/2659.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1627\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jun 2023 13:14:11 GMT\r\netag: \"1986bc254abd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=fe5NkviUbQbXJhNch653tWAz6aUzlBQoj8cAIcDDdY4-1774138934.2468264-1.0.1.1-we5nuA1DBPuH1MuG9b.zsEKpWfCVgS0VcY1L61doFdfQ_356aAQEbURZFq8HB.KnFgbAy1pA8JxwvOJtYOidHZ5FxdYEbfgwQE9qG1FnldIiX33eOHb5Y0ac9TDX9L8A; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fR%2FtEt%2FGFEMG4q2nsz4pi4C5XD1BZy1MRhkzgGHeJ%2BuR337r2YlSB0BWGgE0r%2FF5fNJ4aysLE8NE7iNr%2FhE7aiIrWLsN6ae2E18bEVNMg0K4Yn4XXPbbVe7RujA%3D\"}]}\r\ncf-ray: 9e010a730e49120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8da8407f3b3ff2d6862b7507f4756292","sha1":"1219a96d05b20705a695f6a6ed14cd183c8b2887","sha256":"0619228d38660ad844bc103f7365929c2407ccbec264b834bab935fec6b72806","sha512":"a27ed4eaf35e4ebf22cdc44081c79022934206fc70ea9e41149d3a139e2b964994ac4ecab07032e609a695ae46f06bd550b963a160ec2aeccb4c732e9bf4f867","ssdeep":"","tlshash":"3831e8d72ee4326aa4152556a4e3c0e2470297fe3e161a93ca38d6af95ee204009018c","first_seen":"2024-05-03T07:44:22Z","last_seen":"2026-05-23T17:36:46.370794Z","times_seen":107,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/JackpotPoolsWidgetContainer.C5xbwG7T.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer.C5xbwG7T.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=zKlfPpBicTIge83ao4nuBw984966Bl6wHuoi7gJcqqo-1774138931.6229084-1.0.1.1-wqwvYwZdAPi_URWU2vGXbvSLtLXOQRBtugtuTUCUQQghJ.7CLL37mP5L9GVDIuBnnE8mM5K1xFbh4cAGl2dMu7mVQlYmZ.WOaL4zB1Pgqvh.jZ_.oUEt0.mqsit69w2M; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zk7Zwam8ozCtZkMf%2F5Q2NwnAIToJNB4x%2FQcKIICVUO8bqpGGXlT8dby09rWq1TtVaPbYkbUd0fVFk%2FziPx1HtrNjnLJdCGn7VtHA%2BwaPHjE5d%2Fc%3D\"}]}\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-1e9f\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a61689fa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7838)","md5":"e5810a6dc4d39ef75c921489cfd463c7","sha1":"5fc7f46d4da76fb2a42c52007391d21797d606c1","sha256":"152eaf9db05e66e0b7e8ad6961a68ed2bacc25204acec7a0cc81547e002b278e","sha512":"07eb19ac6e96b910645b4e77b14840bc99ed3c4be03c78a7d8af8449906dff08791eb2701c710245c329b38281b118d422921cb1a3272c97fa5ea1d1de06bcbb","ssdeep":"96:Xnxo6ZIBmmohvoDxTTFQPHf9bzsV/bV/YgV/FxV/QV/OV/tV/IV/EVSVqV0VOVB2:XnX1Xx3erZg+L8Pyw","tlshash":"bbf1651352ab33ac6eee6937a170e31c7b7c083dc7131559adaf124a4e9aef1061971c","first_seen":"2026-03-17T07:58:07.338795Z","last_seen":"2026-06-11T18:58:57.17649Z","times_seen":70,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/gameDataProcessing-Ks6c2N4W.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/gameDataProcessing-Ks6c2N4W.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-436a\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=5TxplaNvy9_cF9gs2H9m89eK1qpQlWFgb6QJm867xHM-1774138931.7087286-1.0.1.1-luA2rIIdSyJzynCXuo7U1aCmmZ4LCHim9OKcNUy8rrvSch_S1k6ithDu.voDkDxHKBZLOl9jaiNhKUUl.AOBrxAxGgbNjsV6VQ_IsLvFTVdJHKyR5Apbx.eySjRYH0a_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZbUVzpUDIFFzcDojglwoJqtcWhs%2F43klBsCctW0i%2B32jnvydX%2FQs7CSt%2B0QtwkZe3u2kdhsbF6V6IYp1M5kLQCc03mQJQBPGrZCs2%2BE3ndeHOw%3D\"}]}\r\ncf-ray: 9e010a61d8bca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":17258,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (17257)","md5":"562c976b249b698e612c65de5413894a","sha1":"97d5db7493db7fecba8fb8a6bd98788914477ce3","sha256":"aff1e7c461a2b4748712c13290cffd9c9cb82c20a5a3ca0cb69daf518b4259ad","sha512":"964c4854f9ae661cd8b9d22989cd6f6cef23c5ab7d06878f74436c982f64d30bce6680eb383af7636984a041791658ef520bc9e8f871c182b9231d24fbc76c7f","ssdeep":"384:7wphrrZxhxlVz12awqhvTXDsB4Pzenac0aw5K4A1nV:7CptXDe8QiAX1nV","tlshash":"fd72750b8a024c12c97e4639c0aa15f1b9781b32e8b8cdd51a555c7afb5fa5b31f173c","first_seen":"2026-03-21T17:26:39.382141Z","last_seen":"2026-03-22T00:40:18.016304Z","times_seen":4,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index.B9WK4fdv.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:02.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index.B9WK4fdv.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:03 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=HmMggeSNo9VDi17HOa6XuwTBT0UbNUbUEnerudsNs.Q-1774138923.1922593-1.0.1.1-E4qo3Ty1.zXgCpXd3_A42_mSEKpDD5WORiOV5tb5btdxjw5JINQQ0mrvw61DNSnaV2Fmq_890LwcYZXongjAioVzHWOdh.8S0GysF6Ny.FtI40SxcH0yji8R7cv1d7Qb; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:03 GMT\r\nexpires: Sun, 22 Mar 2026 01:14:41 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNkK%2BEOj0r5rEbskIkajdBUYFG3ZM8mnHCe3D4GkS5vryIPFbcIiTqYYm%2B0V6fk5AsD%2FV1l8N7DxtQe%2FW4HxzT4iNwkTKmp7rD9w%2B2xN9B%2FQp4s%3D\"}]}\r\nage: 441\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-7d760\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a2bee8da0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":513888,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62128), with no line terminators","md5":"92412ac8e9e15476a0fd14d21bb3bbd1","sha1":"c40b881b940d28223f8c7ba7beccea0ebdfcec80","sha256":"c936c7dd72303538e72d1db97ef1d56d701783d30a361b387c5b555e13786b26","sha512":"4110af8167ab6bf9f3a97a7e388cf3ed35a86963247e24842712475de7240bf92c76d5735a00df6a7fda92f72c6e460d901f4aba8d17c8ca6af29e989568bacf","ssdeep":"3072:NT4qmID/L6Zt4llM9b33YIZpbLjGkUVDseBrJSaQFr:NUqmID/L6Zt4llM9bHYXkcnRs","tlshash":"8eb4d9a2968822f87b33d61f93c5b39cb014e061d9621e6ff19a612dc6d77900263f7d","first_seen":"2026-03-21T23:21:16.871508Z","last_seen":"2026-03-22T00:23:19.271741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":988,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":539,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/SmartMarketEvent-BbcnqqZJ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/SmartMarketEvent-BbcnqqZJ.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-393\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=tA.ZqnkwT0EHX11ehoztJg3FwPrqaYeI6UEnqg.unzA-1774138932.5795808-1.0.1.1-TmFKBzWuFkIK3M4yZso_uksc6Ae5nDUbEhOnG3td7YQAbO_0ZJjuL8ZNSwZl0qhokXoNBOTBrqi.j6D716t8D4kTpb87r2sI0v8qt7lhJ6yxb9Xd_UNmQR1IcG6aovnt; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=15EOyqvKPGqz1%2FRmY83bHItxjVBUtUr7h7HkcIUeBc0RUiwHIgxyr%2Bj1Ie8OEgqrRQN1aqxfnlZcOmj8iv3SSvVBLXP%2Fynh377WBwf2jurS5QqY%3D\"}]}\r\ncf-ray: 9e010a6779d5a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":915,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (914)","md5":"f2e243077781c5b4c30585af2daf3bd1","sha1":"7de46f25b06f1b64016b2f8ef354ecec2ca889c0","sha256":"88032c64572d2bf0740a517c16a6490fa0e009974f8fd42bbf8882e5a4937932","sha512":"4f46dfc7adc759e6df653732f6f6f1d2ad05d75229122d62478d3840ce62813a7f9c11d5c16b23ad193f158972e0638bc3f97e587dcfb8b1e595636313672fdd","ssdeep":"","tlshash":"1911cc96e480723a0672c8bdd1109f42416812d7db20026ae58b8af173ae0fea24ee5d","first_seen":"2026-03-21T17:26:39.407622Z","last_seen":"2026-03-22T00:40:18.157676Z","times_seen":4,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24730\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:02:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694014ef-609a\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=DlFWMsuwBS5dTeYZsRSvbc5cAg10eNSNqkzf412Ttyc-1774138933.540629-1.0.1.1-GJbbrr6tv0fUiwHi_Qmlsb0vKuzrjcrez33NB4vRrVOO2aN6Wrfe1FOxDZjj1YHjbBWMHHh_vVmuzvSNA2J7JjgZoejKN.ixX3U1YGXrSC54QJG70oKGaEqNpKeBLJ6C; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgsZgmRcixbUs0%2FtZO3Gg76SZIAEfcMOE%2BhbdRFzAvuXMbnc5o7pIYCMQotUhxejvL%2BUQLUjpIps7mJlHQEvKqrihiryeWUJJf7O%2B%2Fr9vyMrM4a0%2Fw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d7b13a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a684d3e1bc93c1bd3a25d9983b83c43","sha1":"716d0144a9feb5a701d5eb48133f155c97a47946","sha256":"8b8e3b62b691c235c3aa5aa0ca6bd0eaea4a188271006aa9b8fdff49c9a06f94","sha512":"b66cfd7a78af400a5375c747bd08f6d230798eca3fb7fb7e623a10694901475ffacc21eb5c6edadbecb1234bb751d2c62f06eadc0192731abcb5422d13d18980","ssdeep":"384:pFhktnLa9HrvO+y3t9oDMTjRsENmQFyUzDm8kNRfxv/xvr5c8JPH+UlX:etLaZ/sPj3NmQ7ToRfx3lr5c8JPH+WX","tlshash":"f1b2f1045efc293755f843d01dfcee680e5441af12980c20814e77f9faa9a3ba81ea5a","first_seen":"2025-12-24T22:39:16.21561Z","last_seen":"2026-06-03T04:20:31.835501Z","times_seen":63,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39974\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:02:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694014fb-9c26\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=cm.9.JjGMUhuXkP5_gx_WsZaCKT5KculxthQvYLIxxE-1774138933.572313-1.0.1.1-cBtrydEPnq3LhCytMHJPilvfCtXKxlRPY4yIK0oeoFU2tK9xaiPV0vAYu5ulk4Ai0togqmKHIxT9PpeFZgc2VwjCnprAHNbrxiQOTQt1kItMBDomm48iU6wu.pfowR8Y; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rdn7L92pepdiwFw%2B3DOPlMSED6K17zrKxwvrHZUQ%2Fm2QkBxFGhJcApW66r941dXiEEe7CdCjTkdLLDS1ZZg81uix9V7rXDlzjc2WCtapWhhUaEOWQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d7b14a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":39974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86013b42eae428e11372f049516b7ff9","sha1":"225a913e812a35bbd292b3316c359967757f3801","sha256":"e55c587494457c03fdc8be31a70077cbab07905855cdf253454ab76b7b069271","sha512":"524cd729a736a3cea55239e8a2cc8d1434bda345dc35a6e663552ba59db3be7adb4419ed21cfda32a1468a0dd735e910482186438c6cc119f70064e1d854771b","ssdeep":"768:IEmoxuaqs5NSF/H1M1photHZYN+MeKRlSGifuJvy2UbLWIKp8mkx+:xdxuUgFm1pmHOsMHlSms2P8mkx+","tlshash":"790302a130ad0760f79a56ebb11d8d3a91167fc149be3c782c780c5cf379fe64658650","first_seen":"2025-12-24T22:39:16.381848Z","last_seen":"2026-06-03T04:20:31.952385Z","times_seen":63,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/664.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/664.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1329\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Apr 2016 13:56:35 GMT\r\netag: \"e1364ff3679dd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 19 Apr 2026 09:58:04 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 138249\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=puRv9CDUdQ_SqVSkMnob4buWtdvOgM6eA8UsmHdSj.I-1774138934.2641072-1.0.1.1-3UON.jh7dWAZqNy66PaI9ilhe3d9njkJd5QroW4UaorqT3K9vSjHFDf2TaemMxxmk01IY1WF3MrND3cDa5sgo5jXy5Nm6Cm0mlZ5dD40j7wbeP2GG4IOTviMjxQwmBXq; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Np7sSmQId194kkanbl0UfyN5Wb%2FaT%2BahTP4rRf50CQK3xowiNflOWWV2YbIv6uYyLOUT%2Bvh0C4K0UMqZpRXkma2SSAR9dL1M6VOQtSPRlSEnRYzB2hyHwdTi%2BJE%3D\"}]}\r\ncf-ray: 9e010a732eba120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"74db2e42cb8124c8c22ffb5409ea7c0e","sha1":"cab53c53101cfed472bd694b38f708c80ec9dd07","sha256":"4744341a97e4615d2f7fe638411aae8790a71d2bf917d7618dd688511d978206","sha512":"dbdee633b8c55185fa3fc40d38ddf2aa9722ffe890d1ada35f49a076415a4ab50c507a05d030307f7f188d8f836e3b64d1b35d9920033d3a29f8f9b8f395e4c2","ssdeep":"","tlshash":"f421b6e770c7a9ddcfc7bc4bdaa21805e84409f738e1c4e7b9958d95b13b5e219021a2","first_seen":"2025-03-03T03:14:57.901762Z","last_seen":"2026-05-16T20:40:32.900151Z","times_seen":155,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_fec0ce3fb838228909c143d4c2cd0907.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:17.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_fec0ce3fb838228909c143d4c2cd0907.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _ga_2CT6DSEQTF=GS2.1.s1774138935$o1$g1$t1774138935$j60$l0$h0; _ga=GA1.1.975937408.1774138936; ajs_anonymous_id=115597c6-23cb-4280-a0a6-e5396d5a24e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49090\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 23 Nov 2024 09:10:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67419bf4-bfc2\"\r\nexpires: Sat, 28 Mar 2026 14:44:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34660\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=4n9I0H5LMLB44UyAllKLCMIMj8HwTiKRUaxJNXtqSno-1774138937.6887507-1.0.1.1-vCsxsZ7RV4nRHcCv5UgsQ0bkY4EKy2nsnIIJTtP701zG6Qr1f8LwWJ1GY5VaBGJ3Wj_sOtSU2_33uINFo.8N9NsdEszhX4TTAWDQqLBvJeYhN7O2fMYj25VrtFe.pg7Q; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIuHoDArxqfNZAfmuesxgnHCGkYI9zojWJay1kKzdAo8O%2FPmdGsRRCm%2FgHysjbjfEMjKhFyaaBFKefhz5Mv%2Bdikjn5ZAAHJIsqfBoOtDiRL1R%2FYNew%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a87286ea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"554a6a60b6ffca448ba10b49245ef022","sha1":"ba0918260a1d0c6637a1aacbceb9e00ae51426f4","sha256":"072b206ca7103452a85057bb9b4e7cef928ab648bca6458ac244f8ef86be5d9b","sha512":"79847851f93587d1aea114fc35dbd63b6b3882e932bb5469240f4fc2f28a01a866e883ad3440cd0ea3c641210821304a34031889973a3c0d3d75df70982baef7","ssdeep":"768:F093GeFzB7B+3nq/0hWz3f2O8euie3REnwUuaXPdTBvETOP2x1RkILzP+81dzNI1:F0NjFzeachqJleBEwUTETOux1KQ28dZ2","tlshash":"e9230233c0f23a3c236f235e6f4f4be42998a54ec7a79158a8428737631f0944f995da","first_seen":"2026-02-24T14:23:51.345694Z","last_seen":"2026-06-06T23:43:56.099179Z","times_seen":37,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-BnlPX2hH.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-BnlPX2hH.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-CUbLXDx4.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-26774\"\r\nage: 406\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=qjPlGzQruRCm9VHhV2FdNMm7GcWRAFMPxFsDarxRnXU-1774138931.0980928-1.0.1.1-tycRYtnnD3k8fkWjE7MBEK5qXeX1uD4aG07Fzuacp_JkuW2NAv8oy7VNBejAhyv1NPiz5NrMVN9ba8vrWiEf7ecN4mb9FxpMRP4q_QwJQKbLjmcDp3.i7G9bi9dFslh.; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2p9smxVKc4nONBDh081HByAq6qdgySnDq8Tj42XRuamOc%2BA5KcP42h6iB7VuhtUPvcUix0ZgtHgC%2Fcwv1cuxg0bIS4M%2Ff4IqwcCw8ErZXrvH3F8%3D\"}]}\r\ncf-ray: 9e010a5a2f14a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ceba5fdbbb3a97901b9dc8c2ad5b13da","sha1":"34eb6dde8211dd82b04e0b064b89fd42c9347721","sha256":"ad91370fb603d1ae1fb182b1dbc011d8371c2d98850658bfdd0177eeb6d693f2","sha512":"e971aa680fdb7fdcf8ac304ba0062cb5cd618a9c2b95eeff80250378e39441a1e4098440a3c80ad3f6d6e0ee54f37e54aa74ff34b2f200af61b68f72cdca9c45","ssdeep":"3072:mbwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:2whFHU4HNwFH7MoOWexZFHV","tlshash":"02f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-03-21T17:26:39.513457Z","last_seen":"2026-03-22T00:40:18.06025Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1104,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FavoriteGamesButton-CYfYTrLX.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-CYfYTrLX.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1ab\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=lBADaA6Wl2vMpxuD0njwXQOfT6wT8zrGzqyPwpmPB_c-1774138931.3408985-1.0.1.1-sLgkTwbRLjoUeedLbaA7uL20sv6FkoaYEE0s47XYOKMk7bzfQdbXrrxHCghDxhu8wDjJXTN6b0DxhdOeteZl6dgUnBuG02xdwnV3ITb87kYFWK5ZdS4EQMVUT_nDVQOG; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wMBtsg0QwGW%2BzlstCcnNgX12e8nUTNku%2FLTneoSEQn%2FN0JVm3x1Y%2FbDuTvw2fBwLKNzNMosm3QgTgZv8jPD51jrT4EwoEk8dS6XAYswRmlkgmFE%3D\"}]}\r\ncf-ray: 9e010a5f0ffaa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"4a565c8afa2e2ec3fb7c9744f2b8c63a","sha1":"41e7243f94d4d2ec8d2f5f0c53ec8478d6bf07f3","sha256":"9097c3310dd046a510dd2fdc578c8d96061c1b1c8cfd91725c61b39b36574553","sha512":"52e6ec9255825251f43fec7a6e3dce10e459c123e1449d847e14f3b4e386293dbfefc4d5e586497b58e2a205d36e2a590b29af027ae89fb33fcf4e89788d5847","ssdeep":"","tlshash":"02e0fa0bd059d1fa2b436fd01107c8243436b47cf79cd090408918503d70597c54ed6f","first_seen":"2026-03-21T17:26:39.361872Z","last_seen":"2026-03-22T00:40:18.081875Z","times_seen":4,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-03-22T00:22:11.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /public/proxy2.js HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 3707\r\nlast-modified: Sat, 21 Mar 2026 23:20:24 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJyl4BqPvCVJAu1veFHU47X2jGfWq8yCXm5U74KnPCjC1nhBta48b2rNQWz4HoYTB62E0C%2BgNcopw13dcOThnqZtziNs9T5MLiH2G4fOrvmARoF6iBQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e010a615e27a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19498,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-06-03T04:20:31.901901Z","times_seen":57,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet116o.com/api/public/v1/tur/casino/partners/751/platforms/0/games?category=28\u0026limit=12","fqdn":"go-cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /api/public/v1/tur/casino/partners/751/platforms/0/games?category=28\u0026limit=12 HTTP/1.1\r\nHost: go-cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZAZy%2BzF2ZnATXm5dGGyrPbMJt6Ej3Pg1bbhRxZ1kLuxJSkI2rF7lTSaNxTtRwgsNue%2F377EKhV3H7mI%2BBIYvIQw1REvzjeqgkJJnEw2B2qUTqUlt84%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=T5gsRQXIILxmFpXup58FECagmuLHMrACZ3bkObiS790-1774138932.0056334-1.0.1.1-buZ_oLqIrClk9A7pMaUeaHfQ9fDOjaPKq3Do57QRIp_1peVFGbjhuU264x_Ouwkjdvf4EDjPd2SqNzwWi0aJLOJCqZWapy3SB_6WSkwMPUkMWtbpjem9g9x9D0_R.kPL; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9e010a6299dc1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6334,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"87d2046836e1e2803fa2d20a12fdec18","sha1":"7638b4c1d1ed1f575795f63bca828908abdf5bb0","sha256":"3487d3cbf36756df245659e4d8ce5ea8b8bbde6bdccb6c6886f8e828c4154251","sha512":"5ed29a4be38073aadc0247eeba61da5bd1c1fd7bf3f04a29df8f8c8de8fd2481321bddde5c2dc13a1b7e6f4e4be03f8f1056f24b7e1816917928852300299aac","ssdeep":"192:EpS4FvcY4FCOFFCp2X4FCMmMfbnWfORMX44FHFnbn+g1YOYTLFCsf4FCfl41X:U1ovloJ2UC5qogq","tlshash":"f2d1cf5a0924faebbf8a0d44b4463c4dd9be13c2778c7d50cd96994ea0da0e513326ef","first_seen":"2026-03-21T17:26:39.637935Z","last_seen":"2026-03-22T00:40:18.036206Z","times_seen":4,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/GameSuggestedEventsWidget-DZ6HUrEn.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-DZ6HUrEn.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/DataspotTracking-iQyfe7l_.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-e8e\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=AXVjmzWAvs5Yl2sYNrN.b7aWfYX95g3ZtXYqkX9xMlA-1774138932.2773044-1.0.1.1-FsWwHNM39lSHqTviXhwQh5bxXh0Ynd.zShbM_zy3o.zfyWDm.Nb.2iSc6rWOrkk3OTDjmZNajQXVfVj_z2PYCORtnehvfcTst1v0BJBsP2afyEDBfoeQD5tOY9wTpmHa; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPMlpZPij8fx%2BfKHnNYlX%2FguJc2fUN6ZU5W9iF68GsuB2fzI9U2ZJ6rfHr9faOh%2FtTwUkmcdb58x%2BhiX8m%2FQ1Kz0Xn3GacJVEAUQcvQ0BFx1xmU%3D\"}]}\r\ncf-ray: 9e010a656943a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3725)","md5":"ca5db02ec6d235cd64de2a6a474f33f6","sha1":"25b848c932d6face1ad43177f53b1d3032b0fcfa","sha256":"adcca01c8b00bd4e28badc2e707aaba8b035f40cc8d4ff239e7ae508dfb79349","sha512":"76bfdfcefe35441f326e410aaa2d4a801c423edab5c999cce894894adf9aad5eb6ac478426ab9ae2efcbfbc3e97a4f75744956a2b800c1072d9671e4b16c19e7","ssdeep":"","tlshash":"6c71d75ae010aa39a13745d82bef3119143632b8b94353c1b73fca7123e11916b5bbdf","first_seen":"2026-03-21T17:26:39.604297Z","last_seen":"2026-03-22T00:40:18.192831Z","times_seen":4,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-BgO3MW-h.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-BgO3MW-h.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/DataspotTracking-iQyfe7l_.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-173c\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=08ttqGrx4X2zT3zIfscBTBLeBawUBPMakEEZF512E50-1774138932.2860603-1.0.1.1-dnbQQGbmjhgQP3lXz.yVrss2GKXDK.j32V7258TqEiSkKr.Hr.UgxQSsPpgSYo3CAPN7jEf7DQEq2oUbHrmlY.I2y_Co.LgSA1ewMt9CtE4mq46qhDIrTFa90xCGXd8b; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kygC9enLIgPrOWzn%2BJn6YRAam%2BaXsRw5AAieh9dwjyeGYV59E%2BctaXQkmcHbwKGz03mHG9WJFMMkGrZjrFXwlJTn%2BYbPyZ95jb3M%2FH%2BaFeJxRSE%3D\"}]}\r\ncf-ray: 9e010a656944a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5948,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3085)","md5":"21a327b0619c3c1a324057951bbd14ab","sha1":"4f00a495a58ee62d19e6b5849989cc5618177634","sha256":"f69a26ae2b8c112785730a553e7f2b7d2b41ae889627f26f0b866746c536b6d6","sha512":"b0b3795759a6c3180fd9e4fa453572caf9644e0f2dcb10b11f1b5e526ad304a6fe0011fbf80296459ff6e8c516f52aecfad1f5ef58be025985b6c9c261bc7841","ssdeep":"96:q1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:R+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"16c1a65631907530c6d244a6914f42aeee3e7638f00f50a0b23f9c6d3ba1525daa3ebd","first_seen":"2026-03-21T17:26:39.40142Z","last_seen":"2026-03-22T00:40:17.987168Z","times_seen":4,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/custom.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:02.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /custom.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:03 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=kpTYv._CZpL_DiVrtlXJd9GJNaJbYO8jJVPeb71w6L4-1774138923.1530437-1.0.1.1-ZMMe2VJ.gzw691ONyQUcRbEUl9Rty.q3D7r0KGJTqDGMTPtmfNxg91RL6pNLVdP5wkN8kgRpvbixQPYnh9YpdMPy5ncemublird8lCdJL2j_akan1MVAz_KNP6JOFCAt; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:03 GMT\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j5OIYQL7g0UiMopRx1cH0xEto6SNECuhlGpQ1eM5MCbK8g2pgxckQ1fR2e4%2Ft%2BG1W7wXJd5zxNgLAE71JPQmnzB9V3hPR379zMt4Qvyyj7MJulo%3D\"}]}\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7a7-4468\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a2bee8aa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17512,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"bbb7c1c4cfcf2c2a2cab25bc642c83af","sha1":"aa928e189ed6a386d5cedccc39ed8de6ad12bc76","sha256":"c68ea7a8b04d3aa7e8bff61b89fb09a57973c61196e082239b21042be7fc29fc","sha512":"ffdb2d14779a2b1a85d3eb67609a2684e7edae137be64af90be2a1af6a9d88471e817e16e1d7c0da57bec5f8f5bc4e60b8aee8a4fc87a4ad0a5b8953a84d649d","ssdeep":"192:52SyYVVLN2Ns2hamJqKbEiExkouE20e62UYx6lY9qywNqVh4P02pHnNPXwVUICdP:wYUrhaJlW6bLpHz5p","tlshash":"ed72a453fee31989716a8198566bb3fc7e7d404397098d787ba4b3748f837e28431a48","first_seen":"2026-03-21T17:26:39.644826Z","last_seen":"2026-03-22T00:40:18.128539Z","times_seen":4,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: 9e010a6c8a95c759-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-06-06T21:30:11.571202Z","times_seen":1649,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"rgs-wss.galabet116o.com/jackpot","fqdn":"rgs-wss.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /jackpot HTTP/1.1\r\nHost: rgs-wss.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galabet116o.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ZeSf9jlTcRttrdRRyZAO0Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 22 Mar 2026 00:22:14 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: uGaS1e8y2JRREic8UAeuOwCNlUU=\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cf_bm=HnHoQdd3vH59fbCYb8vVa7uN67PKkH8bao8nFxQctf8-1774138934-1.0.1.1-pO907_PY16vfBk5hqQJP2NpBeOP3y4wzIdCez9tw1BN8rTtNS0O6bZQKDMwwMGIPSR.AawQJv7bRfQlegILYnq_f4Gy39Bs9SaONnQMWjxQ; path=/; expires=Sun, 22-Mar-26 00:52:14 GMT; domain=.galabet1060.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zhGlS88PakK8gwWB93rhMSXdItrjMxWUW%2BT%2Frskyd6A9Nl4blJPIZPVtd5HPo4DlWZwDW1ZYFCmxdxriCpIE%2Bddj3agp1S2E3b%2FRA9AaqXS%2FxKpdZx8gIEqQco5ZZVZIW9UgB4eQYee1FA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nServer: cloudflare\r\nCF-RAY: 9e010a6f2ae349c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=64044\u0026min_rtt=64015\u0026rtt_var=24027\u0026sent=4\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=2836\u0026recv_bytes=1559\u0026delivery_rate=44489\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=4ce27a0f918271dc\u0026ts=164\u0026x=0\", cfL4;desc=\"?proto=TCP\u0026rtt=487\u0026min_rtt=447\u0026rtt_var=196\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2356\u0026recv_bytes=1449\u0026delivery_rate=4633600\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=88dd511730914368\u0026ts=505\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":0,"dns":16,"connect":15,"send":0,"wait":495,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"rgs-wss.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"rgs-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"rgs-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"rgs-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/660.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/660.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1474\r\nserver: cloudflare\r\nlast-modified: Thu, 31 May 2018 13:35:29 GMT\r\netag: \"6253a43de4f8d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 16 Apr 2026 14:05:17 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 382617\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=iULOKveo5d1gBWhM2AYBsmJfSasTWTl6SDpE71JmSac-1774138934.272837-1.0.1.1-.0.uIK2HQ8DwWlNg7dyh98LZMH4m1GUPZ2ksohWFAjW_KIcrg.AZAu5xsLmVPaM6QsifsBgPSP9Rpy0KhuWoiMzm8Tords8W6xqnN0epRlsuBqIWbA55b.48VjYdWy6p; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2LEkvXz8jBWj88wKacLKqS5J7Zc2n9SEtvALqeNz%2BzeV6Voz8BaFESc1j7mPK7293YUiAF%2Flq1xRy1iVFYJEZygzNJOSDqEQbt7SZu1N6tzBD0QRNadtPbxzSk%3D\"}]}\r\ncf-ray: 9e010a733ef9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1474,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ab6160c1221b85b351fa44965bca35e9","sha1":"48b56405fe8f6b76f022e44c316a3a53ce5f558e","sha256":"98555283ee37cbb0d2d88c5a8cefed7dcdeb356845619742e3482b3bce84388e","sha512":"45ce37693b52634ce0e9db1b21905f04c4616779dfd727597778571650ff6af41981552345d1c60cc15e2cdecda17fcc5208c64384e2773d14e5f69548f15c7b","ssdeep":"","tlshash":"2b31e92b8d0bb01c7c1924bb2e2c2915b31949ed0671ef365b73d2b763253c48856e4d","first_seen":"2023-11-07T09:35:11Z","last_seen":"2026-05-11T03:59:00.875561Z","times_seen":104,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/pageBuilder/pageBuilderHeaderInfo.json?v=03/19/2026-17:16","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /pageBuilder/pageBuilderHeaderInfo.json?v=03/19/2026-17:16 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:11 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-11b\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=PSIlKX3vnKQQACm9lVc5BclK31iMDzG42OqyfRjT19E-1774138931.1208947-1.0.1.1-TDmXSFbErD70oKy1_8EoaBVyw1l1a_pJHu.5BheoVIxxazaOHyLxDx.wzqWBADGL6H7wjvkfTaDbC1ZvbRFBj8xi1BtXYPdFsvSG23ThzxvoGqa2tJRrsqeZGmAEbKw.; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RG0KaQsOQfWY1w1Fn2%2B1QKT2X2DTnvJ7Segj5%2F6u8zYyP8UAUTZuZ25a9yfGdPfb8R987MJHs25HYt0b5Iz7zwJu1OxbKl98y1BqcXAdKcy%2F4sQ%3D\"}]}\r\ncf-ray: 9e010a5e3fd4a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":283,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a073ab68d03cc285a2ea057683b697bd","sha1":"85214b84cecf1dcad366f847f29f079e47fa4f6b","sha256":"22f8711fa180f3491a16949412c0f771411db6102c183564c592ae3bcc59dac9","sha512":"526285a76199b4a6719d986101a3ebc29b0ba3457af765836b38ce24ec8170528f62c647e3b7acc85f323b23634f3ee1dd05032de06798ec969cd0c7c4dbcc1b","ssdeep":"","tlshash":"26d02b3aac00ed7473d4d413d29067802040a409d744485c9cdd9f6fd3ed3851091b57","first_seen":"2026-03-07T12:53:25.048544Z","last_seen":"2026-06-03T04:20:31.915647Z","times_seen":56,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FavoriteGamesContent-c3zcF83Q.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-c3zcF83Q.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-ae1\"\r\nage: 110\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=nWFgRJnW8XBGGpcRT9c5c3kUBDkWzpgb7QSTJSnHMjE-1774138933.001259-1.0.1.1-Tei4Op.ezwD909Dqpno4t48G9RS8cv0Y_sNbP3YQdPHUrJbuHGBzGFTzNK0yw2sUQNy8LPXNLoXDKgdT3qcYBDQMp5DdaMWsa7awQIzcd8WxeFHmxGYNRAikfMu_X8Fz; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTebd4y%2FmmaQUSCLNpDHror0lUkahiOvQ9MB4rxe9QinBfvorkjrtFGs7tkYJg6Lr1gaijJsD3AEWDVmb2E86XNVhVP41FV9fquDvhMs%2BZyKxJA%3D\"}]}\r\ncf-ray: 9e010a67e9fea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2785,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1707)","md5":"e29f6fd42cc0e7d08454249b8d89109e","sha1":"89670d6405e765f3e4c1cd7c85802207a0cdf2c5","sha256":"c7f4ea3c2548373b3ba229583feff8cb4210b7a73bca5591238e0326ecb6a6da","sha512":"c89f9878f8930ee2233e1a29e1fc7e09d538d9d9fdefb58d62c1774716de04c01ba6226c2b9f0ad60d0ca89839b107131872c8bb6a0fc6e2caa8442ce9b6ecdb","ssdeep":"","tlshash":"0051840050415ff9bf8e9eea6f2bd1941979034c6686c17da8784f3d2429a41713bff9","first_seen":"2026-03-21T17:26:39.612494Z","last_seen":"2026-03-22T00:40:17.793637Z","times_seen":4,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/403.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/403.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/464.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/464.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1598\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Jul 2023 07:49:11 GMT\r\netag: \"1fe73586f0abd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 13:50:10 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 37924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=X34b9EYB5yL5bQqlu3fA.7iJkQs3y7vpyL1y.HiqFpM-1774138934.2667832-1.0.1.1-Cgy25CZyHr83xgOYlSPo5.LgUmsziS2kM4ZVF31ph.ddr2koyVgCf6v3ZGkd3ovB_ED1.ZF41psXkhk7HuQ0FzXssrmTtitQfPviNXJFllJKg74GQDTIQLRaDHiriiPT; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4pQZd%2B7ycXbzkf0pI88127NkIVLBDoxV7euDur6xejsYcLHv4Bwjk4MI4rKhotYqdvoKGkkFCjmASBUjqqYAflsUjbPl4yfx5p78GgLQ65v4in04iX9vkbmYMSQ%3D\"}]}\r\ncf-ray: 9e010a732ed0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"e4811b8c778f8ee9a654888507a880fd","sha1":"017c49e94f77165d2c32b6f7a0351c04d558d530","sha256":"0f788fd3a70375b273176580d1be4b81cd67eb7d56554c8b3b7472b80b409d08","sha512":"8d1464a411b5ff0c7e20bf895d03208df49430f6323dae25c72aac6093a58d819d0ce9c718d0dff3c5d47dc7ce87cd4c4d22e0c4dc00218a164c9b117f8b7b05","ssdeep":"","tlshash":"df310ac8fcb4a349a0241366c66ba0142424589d4adefb0ecdb6a8654b8df84fc33444","first_seen":"2023-10-14T20:01:15Z","last_seen":"2026-05-22T22:07:05.995035Z","times_seen":225,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/favicon.ico?version=1773926203584","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:06.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /favicon.ico?version=1773926203584 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1; TawkConnectionTime=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:06 GMT\r\ncontent-type: image/x-icon\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 00:36:32 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-1b67\"\r\nage: 2733\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=nEeX80_4zyIo4rL6KfW9ySckpAozD_aEq30NAVRXQFY-1774138926.6272228-1.0.1.1-nuiwfP8vhRXf4WHeLxHf4Y9M2ASI.CpSMWVlEiYAioYchHVzTGxAT0kNeJJt2HJDeT5JJil0myNCjX1kmczzyZW2t_tU8Dzxj3sbllVXhnadbr.H_N7wgjorsYZgZ38W; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0AWsnga3Q3X9Pn6a4EZMNLH47UHYiT8kFMX%2F4SEZA%2F42OMYXoPJkwwYbe535HvfM7YSRvd7RRp2siypXZcIcS%2BUTxmVvUYX9RUndgHY3r74H8k%3D\"}]}\r\ncf-ray: 9e010a416a58a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7015,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"96a66de67adef28337580739eab71404","sha1":"2b93f9d9f5ccb809e454e812f9dfa7ce9ab02b0a","sha256":"1b029ff1969f7f867742ed30370ab8f76f58f3a00c102b51740cee61a5bae6ca","sha512":"efd763159644683e2aedb05be3a541cc4792938d3755e0b0a1e8850c6240e04c3ce03e465ac5160ebea03b7ba0e9a948bff584fb163ab1db1677453bcb13a7fc","ssdeep":"192:AA9risdBVS6QwidYsQ6ujzwAzxyKjuDqc:AA9pORYsKIAz0KjYqc","tlshash":"40e19fc31979540617e9f2df05c4386ab74ca88793a2a4f927b931343ff19cda613229","first_seen":"2025-12-24T22:39:15.963833Z","last_seen":"2026-06-07T00:34:32.054342Z","times_seen":114,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-D3fSQXEs.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-D3fSQXEs.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:13:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-113a25\"\r\nage: 512\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=YiI0BoJzbVkmtG2TCSO3D2GDUuWk5KZLurWLp4HSNv8-1774138930.4429202-1.0.1.1-71o8OE3ClefiB.mT7d2RezQiVx5L7976cGhblHlznFSchvi7mdU..QkfBQVe5Ps9F0nEyYiMg77V7LAh7PRHubPDYnWhK9UWqTc6Ocd3lDQ_JHeJVCwxfjao3XZRmMwH; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GqRy8vNcTCEcP8WEx6ziSaJhCD9Qv7hJWGutH9Wmm82mILwQU45ZMxAk1OWUtImk%2BCKesF004ghDXmrWaAbGCrXVtBUMBXY143CQsRcbk5ejTPY%3D\"}]}\r\ncf-ray: 9e010a5a0f03a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128997,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25207)","md5":"929fadec37e51bc98c507f08534eb166","sha1":"b55290765e2b2b36ccba7e4cbf769d24adad91d3","sha256":"ac4eac97d9c552ffd6e9ee38cf494ef9adaed90bf18c04fedc8f3604533acf04","sha512":"1178f47e487a9a6914759a26a6c9dbb5f3ba527d6527bfcffa99474d8c9b4fd3e5eda41af6293b3527ae764236331d3bccda1d18b6ce9275c6080c4507294c7b","ssdeep":"24576:5Dauc8xbGV0CzrP4e5DkXfhPy6L2Zmv6IoVxZK+inbuVIXEt70V/vazSCMlAjRBx:5Wuc8xbGV0CzrP4e5DkXfhPy6L2Zmv6h","tlshash":"cf257d85b155b97997b709e560af1002b2391e00f84dc4a0f57cedad29bd808a2b7ffd","first_seen":"2026-03-21T17:26:39.531015Z","last_seen":"2026-03-22T00:40:17.795538Z","times_seen":4,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":315,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galabet116o.com/storage/medias/galabet10/media_751_d95c491056861c55d9808002ec3083fb.png","fqdn":"cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_d95c491056861c55d9808002ec3083fb.png HTTP/1.1\r\nHost: cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 2125\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 14 Dec 2023 08:21:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"657abb27-84d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=DIQrgPAndTRT4il4DpRoGVAVq6YQjgah7q4_EDIlxKM-1774138931.5459645-1.0.1.1-WO3xZGP_aCNXoza490o9LsEH2p1L21_mBtVhuglSBeXr9udS3a3uRKlaelNx1nYetTYfDTtalzE8k6ruUAgBW8w1E1f.lwPfuIE_ziVMwrmx6FRycJxW5I6xNlG.z130; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NggFCloy2AJoFLrGY7nUarSumSwEgn1F8UyRjZ7%2BrQ0I%2Fz6m4TL5FPtxCats9CfIq%2BQ9MAMFO1nBnsktP%2F5O9If37ROn1T3J4N9bn2BUd6Y2FWs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a60285ba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d0a6f672bc6bd2e097de029109a7577c","sha1":"228e47b53bf80adec61493761d90165771a81012","sha256":"35dc3f8b307cacbf717f898b6a669c2eb188cc425a1f356b94132ebc7e8441c2","sha512":"7a700fc3f2a2cced35def804efb78f631ae965591bca74fe55eb23a593f5cd77cdb31f9f947e8614f0ed1d67cd29c3b25797fc46d9d22f6788bedf34d84bd8a2","ssdeep":"","tlshash":"7741eaf57111586cd591a232475cbdd2589db408d035d507fea3ba2c7c3f17814c32ae","first_seen":"2025-12-24T22:39:16.220215Z","last_seen":"2026-06-06T23:43:56.132258Z","times_seen":54,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/bookingBet-C2_396gf.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/bookingBet-C2_396gf.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/DataspotTracking-iQyfe7l_.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-ed4\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=TjhnrhBTC.vFCpkZmfTMIX_Ii5.PZ7c14V3ciQx2ng0-1774138932.2911174-1.0.1.1-ORpoEj.REyWJpouTPYHBnJP1zQ84xudfsnKtsFi8NYTWW1ps8VIKDV3e5UrpUPgDbsuZpa7rodzogFzGfAFjn0jCzT3DtjElzOW62.PMwNk7muntAFs92bZOQQGWFbm6; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAOTETRv2B81QeMYDhg142NgWicMzFMXUL5I2go%2F4kGr8jyWenTzhYRXU9HcCtho6MOLeYRExnYKbT4kMSZO7rtmHDLC91yFEVG30lxrSDt7vig%3D\"}]}\r\ncf-ray: 9e010a65693ea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (3795)","md5":"382e197b84b36c2e881c5ad55ba49ffa","sha1":"f53385f540d98c26b3acd7bfe2a714778a3cfad2","sha256":"f49f90a92b84092e924250b9ba4c6d9ba49f9e1a5b7cef9c2cbf1ab9267eebd1","sha512":"ebd00bf5073c899966d24da20876fdd2296b624901691607e3e3d5dd0dd682ea0d751500286ec765da9763dc4a150be86735c8d08548888228cd3f7cb648bce2","ssdeep":"","tlshash":"2271e664fd30907e67f2317df4de7b426b2c4ba871a19a40fb6b5d0841848cbb534638","first_seen":"2026-03-21T17:26:39.649126Z","last_seen":"2026-03-22T00:40:18.176308Z","times_seen":4,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"dataspot-internal-wss.galabet116o.com/socket.io/?EIO=4\u0026transport=websocket","fqdn":"dataspot-internal-wss.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dataspot-internal-wss.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galabet116o.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: YsEardfQgj/6t1HlWK37sw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 22 Mar 2026 00:22:15 GMT\r\nConnection: upgrade\r\nSet-Cookie: io_affinity=1774138935.875.43.74941|a4492465e2c0cb857f789e83929ab8bd; Path=/socket.io; HttpOnly\n__cf_bm=2Eh5MgDb61q7l6xPV11EHvToQkuX_Lg808xjJm_5ch4-1774138934-1.0.1.1-Z5xEyTmEkCnxNXxOUVDf4bV_fMWoKTw5RSRVbKprU8hxz2QodOvEzJyw4H.yXAK_ArXhjxuDy0IWGi7_H1N8xx4UaA_ZATq.b9G4YPglUQA; path=/; expires=Sun, 22-Mar-26 00:52:14 GMT; domain=.galabet1060.com; HttpOnly; Secure; SameSite=None\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: j2Cc9E8MnKBSYM02/+vkbDxmGuE=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yuaig3OJ2TZxSN1yMnK%2FRPe9kySSN3qIWXhGKACAXTabdnCD29FZ9h8pnMKz1QirOv9V%2B9sQpkAHFd1YdqNDd9j8qpB%2FKNG9el20ABeNd3%2B1E8nWllcoDPAkusO2T64GuV2VrGVdKkzBHDuHFBewANQh5LUVstW6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nServer: cloudflare\r\nCF-RAY: 9e010a74b9a35ebd-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=64212\u0026min_rtt=64056\u0026rtt_var=24133\u0026sent=4\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=2836\u0026recv_bytes=1644\u0026delivery_rate=44461\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=1b04802caef1b25d\u0026ts=168\u0026x=0\", cfL4;desc=\"?proto=TCP\u0026rtt=449\u0026min_rtt=442\u0026rtt_var=137\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2358\u0026recv_bytes=1492\u0026delivery_rate=6033333\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=70527f08196410a8\u0026ts=500\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":24,"connect":22,"send":0,"wait":486,"receive":2,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"dataspot-internal-wss.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-internal-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-internal-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-internal-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=69bea1f2efc5d11c3692a406\u0026widgetId=1jk8ah7la\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:06.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=69bea1f2efc5d11c3692a406\u0026widgetId=1jk8ah7la\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-s8b4\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-22-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 22 Mar 2026 00:22:06 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9e010a4168b8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ad987b49a763f67670e6a5082810dd56","sha1":"dc301128c6743c002b5cc00c30209744dfec97ef","sha256":"0b00913b846e937b5079e48c0b6f5d6727ee7834c99cd0d724bd4e216f9d81db","sha512":"585e1e8026283d92eff7100cab5c9b43cbdcc678b8e57231cc8c2b7ffd16d351f1c91bf1cffaad2c130babe91d76753d6ad589d45b934b73bb88f6b3e435ea60","ssdeep":"","tlshash":"725124350a16ec7da3c5434275de3a33a56d9426e280aa1dd1c89d2da3fb28e616270b","first_seen":"2026-03-22T00:23:19.283227Z","last_seen":"2026-03-22T00:40:17.984056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/withPanelButton-Kc5QyNkV.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/withPanelButton-Kc5QyNkV.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-441\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=43sl9XOfXvYwezyHYPOnBf4lsyESYcq.WckH6_nkha0-1774138931.2728295-1.0.1.1-K0QPfHeDUd_g.MBj6jT2Zhb.fJpml2m_l1Go4aDWWnzqxj_Vq1i_OmkZMi_xuuITE0FcwHoqOayHsjCRBr8G3Ls4bTC45nYzGYHxS1IF65kvmLJpdS.yTzY_KVUNJPVo; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dut2FRNb4gTcdBCQ6rcqaqk7wN7%2Bw1V1f%2FkVRfBH3ZAVHOutypFzblJOkXV%2FHC%2BTANSlOvD2Lj3WXhF2PtDtPTHFcqSOaWbkVsqOFggD5GzWJIo%3D\"}]}\r\ncf-ray: 9e010a5efff9a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"716c41abf4e6c14cf885b87aeed6613d","sha1":"3284bee4f3fe8a1474c6fd5feb8aa09a3f8725da","sha256":"9a4fbb219ee8354bb94cde371f38b1fee6544c9f2b29d7549e60961847841485","sha512":"58d7ffd4e6f156b5d7b0138ae3a19ac35e0eacf9e1dd19fb3259989a19041331796417a74dfe218105cbc286386470c1cf38477e105107362cac2b0f032ebaa8","ssdeep":"","tlshash":"ee1112e4f5c4a9b2f4c41188577b2cb2759f32d9dce114d031b2c8da5fe8048991e9af","first_seen":"2026-03-21T17:26:39.44375Z","last_seen":"2026-03-22T00:40:17.873544Z","times_seen":4,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2176\r\ncf-ray: 9e010a6c8aa4c759-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=16+2 c=0+1 v=2025.8.5 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-06-13T15:25:55.916104Z","times_seen":2977,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/walletConnect-CiycSUBb.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:09.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/WagmiConf-B0zYIpvp.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-7ce\"\r\nage: 406\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ZVG39QUBz0AmzGBGl5VTjywgKVA9sALK6xdiiP0S6T0-1774138929.577062-1.0.1.1-Pwh4ADEeZQbskfXg3AE6S10YuJiWZqUF2fn1LvZOnW5pfTp4aX3bbqRoRYuMZTdDzZlcaDkhwatwbzHNUZGqQItuip2xFcKdcYJ4oa80_oSXJg_IPgGor2Kp9mABdFGa; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0HielkxlUdWiB588y0yOCwXaGY4EXHIWPHGHV%2Ba3Mz4uXNJ0IhhkPPqv2by3%2FUoQKZ6PBiAnUYMoBi%2BfguN3wErzikliNA7czjxvWZ2t5o79feA%3D\"}]}\r\ncf-ray: 9e010a544dcba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/userJWE-DjlZLNdN.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/userJWE-DjlZLNdN.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-c1\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=HO9Yo65dBQ.aVvfdhkFbfjZdxQhobh7Bt8N4KDnEjgU-1774138931.4281383-1.0.1.1-NfrGWZ6NeIdlMv5ITsMAoStAdiCeyRXfau6Wp1XibFmpZ9.TYSL6zo.gMo3Wm2enra4rf_EgGVXx_yHHZgdgmiTLr.llDfb.mEFAzQlTkaDWOsbmVTryEBCmVYoyRo5c; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65Oo%2BpJwip7oMDry6rOLvB9x2vMmnGbpO3cyPJONbsCeEr9I8rRW5b8LitqGsWIoiqWOcLsc9%2Bu93b0M7JKtPj2C8yni16lKqk202RmPGRCYEkA%3D\"}]}\r\ncf-ray: 9e010a5f381aa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"508c7f0a90ffbb5b03c98a9a7dc24c36","sha1":"b9e31f5961c5466efe981d1e76f0d812c251d678","sha256":"8deb2e3f97ba996e49168980142a357c49d4641bb9e2278358c5630cc64cfb8a","sha512":"a6bac2efcf8d93fc449c37c3606834bd751181d3ce3381429e8c5f955c263a4d0f582e8a0e13a584fbe412848395e8ae1f730a2255ab5162e4c53c81163a5aa5","ssdeep":"","tlshash":"d5c0c0db0cd411f7c5583c501007dc138230391473d8d3525b08c3ea7e5104bf10ca14","first_seen":"2026-03-21T17:26:39.726618Z","last_seen":"2026-03-22T00:40:17.996301Z","times_seen":4,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useJackpot-BDZnzus2.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/useJackpot-BDZnzus2.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-58b\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=3TVaMz5l.hrp_BfK.LSM1uLpQ3iwYsLx8WflN35f1A4-1774138932.6735685-1.0.1.1-.Tg9OtvyEwlcWmJIXzcJl.N7PgnVgWB6fk5TST6Q2cwFpDI9TXpJshUHG0gl0Sbmco5F3nU3YxNbFgxDf6jsl.wWwMq5RWI65cMjqkNqI.LjF3T7zSsK2n9_iE2R7S76; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xVu1YdzYozXoLUMHxx43d1%2F4zuO%2BfRqMbVNUJJucKtsWv8PcCb97NxY6CNmXeSNF4N%2B7DVpOAdgzmJdvl8w6CXZOgXo5OQLwhruKkFxlS44p3Yw%3D\"}]}\r\ncf-ray: 9e010a680a18a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1418)","md5":"b91eb26317c6780c283223b75661a38d","sha1":"a0914abf4e0d8af2b94ce95c878e0a49ea138cdb","sha256":"0c253d85994a8748550577e8079833492bdfd33a1b82fa7314770e22f81bc51e","sha512":"410c33c726832bb0286d9a569b16e16b35697721b3de1c84f4ed5c67e60a40e5671c281a1a57639c6341c438efc5477beb869b37b08a8f69748cb66dd2830bde","ssdeep":"","tlshash":"46211045c069e5f8f48d8cb10177cb2a1b3c3f7a7440e0a0a0ba5ebd57a8d41b6a0f92","first_seen":"2026-03-21T17:26:39.469762Z","last_seen":"2026-03-22T00:40:17.938534Z","times_seen":4,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/content/images/casino/icon3/164ad8f5eb7d9e506f4fb19575dabfc2_casinoGameIcon3.gif","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /content/images/casino/icon3/164ad8f5eb7d9e506f4fb19575dabfc2_casinoGameIcon3.gif HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2448055\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 13 Apr 2023 14:04:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"64380be6-255ab7\"\r\nexpires: Sat, 28 Mar 2026 14:46:41 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34532\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=UkmT_jHKP9UWh1V6AgOwz_TKYJPK1TI3AH2sY7saecs-1774138933.969014-1.0.1.1-y2w_jzYIhHkkBa9o.B5CGafWRYT53V9L.nXAaUvQZ4oANgrlRW_gZbSKD_ly.bB2o8LNpa1EKyu2_nkiv2er5GoHA_jS3_AotNelzPLGpn3i7_QwHQdOnJs7BpVTFvR_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXhtGg0tXVh148vPpBKOQn4b6yn3DhlVZ0ZYEz%2FQdt0Z2OJUW8XZK0hM8k7EEenm6S7u3ahGBBZvQMhA%2BvWMY2pBfDa7XrlQeiXA%2BRQxqMvN%2Fz0Pmg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6feb9da0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2448055,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 440 x 310","md5":"84620e71035d1ac7a8b9a1f43bf60071","sha1":"047b4233e87e5cb2800e460e78c6e1662c970267","sha256":"e2ee766643a69bbb03ce8659171cbb6b7006b5a7dfd2d6a81c587d126a54ce55","sha512":"0f1a9c8402b8cbb386a1e92ffc41d0895029a317e18a0735cfc775fdf5a524db6dd461f7cca11bde5dc051941832d677ed2a73d8c977fe82b38451d59cf65074","ssdeep":"24576:yrzDgR6oyBYBNr8GcNBqYQMRyUhKa2ZCwmJ6TXu50YEE3rHBRlhN/:koQnBUxCbB3iCwm8Y+EjphN/","tlshash":"172533f44255d6e39af8f042f142259b204eed79c3a0b69b3f98d104dcecde9681af19","first_seen":"2025-12-24T22:39:16.299133Z","last_seen":"2026-06-06T23:43:56.073254Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":713,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW","date":"2026-03-22T00:22:10.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 06:53:01 GMT\r\nexpires: Wed, 17 Mar 2027 06:53:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 408549\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-05-28T06:01:00.163084Z","times_seen":12910,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/StatisticsOnHoverContainer-cJKYZQf5.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/StatisticsOnHoverContainer-cJKYZQf5.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-2634\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=KpTzxubnM6upIYz4hDutTZDDaHS5JXZFza61TlduDUc-1774138931.3674731-1.0.1.1-92P79CR2LcBEzxaoaDBj0l2L33CUmJ37ivNxDeIpSqdh9viPQWyqBRrI5OREQ0zFgI.5uH_gK2KwHSD4p2cLNowa7Xm6vTujSspXFDOk3ymkfpKjBtb..BivAf6l1xSj; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R5otv9fAm625d1qNypnPMHSoWI72dPho5LprpeJ8xdfrCFwyMdk2Imv%2BfULUC6EURgHwJatmu6cNorRskTOADjYkLHvYgT98yegCiQ1jdWTR%2FIc%3D\"}]}\r\ncf-ray: 9e010a5f4823a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":9780,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (9539)","md5":"e5094d6cb1adb9cffe4cc19bbd41805d","sha1":"a966fcd915c9800719d4ee6d1db7c56ee305f79c","sha256":"c9483c1de5209a20f3506b47f0bf734708a6c375dd49629abb1e8c91f4f17b9a","sha512":"3ab0205957724986be26159446aa0be8166bce8507f971fd0352cd66da9cde2244516f2e9ceb1b48a13c3093426f72a036aae6297ad9fd6e08c4f55c19b6e38c","ssdeep":"192:Zzn2zkXAsarXDxLwxGEE0D9AOgzmcj/e0R:ZzBParTxLwxGEphAdzmcj2q","tlshash":"1e12736c118e5f6af41a8240b4202d35bb3a3877958d66f87ebc440fd3ce444bb9cb18","first_seen":"2026-03-21T17:26:39.498002Z","last_seen":"2026-03-22T00:40:18.104764Z","times_seen":4,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useOpenLiveChat-BqpHSaBt.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/useOpenLiveChat-BqpHSaBt.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/LiveChatInc-BwBeRgTB.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-247\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=fEa2kcjtd87w81IXCID33L7fiVI0aKgIg_d9RMxMNjw-1774138932.0705903-1.0.1.1-WhBZ3nSbwDGxNQY7g7FVr6JX_nBbZoNz.Mx5cfKqAzym0mULzUJAt7S7Jc9RWLZfWiEIWCjUmp4AxjMBlakXTFmtYwoTxNhzeI.wJriQ1paOajyLVBjhqCTnxHHE10IG; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2e%2BmDmUNOU3EksLaE2oCHAmULv7oRtVoSVvgO%2B6D6zhD8DkSRhGgYFnK08c9xXrv%2FDsamH2%2F2dHnjRwoYWNEeaNeY9lsyuIV7CFfj5J%2FRyuS1U8%3D\"}]}\r\ncf-ray: 9e010a643912a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":583,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"681eb5126f2ec9c2aba7812d2e626840","sha1":"9ffe76ca1e901f691ac60faef61309d95902c760","sha256":"b4809c2e970036d0b7d9254d9d823fb9b020c888f18f71ed96f3c22224f9cb54","sha512":"b2dfefdd86cdd501c26c715bfd02b9f1a64a8145710d4acb1e91f57fa2fa4b0db743350947a0cefe3d5913be116aeb6c1758bd8f1cb54f07c8942c7fee79c554","ssdeep":"","tlshash":"0bf0e19e86544e7c81c0ced1516be5f85b3c2ab4300cd851a93b6cc8682484457bedab","first_seen":"2026-03-21T17:26:39.588879Z","last_seen":"2026-03-22T00:40:17.995274Z","times_seen":4,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/946.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/946.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1426\r\nserver: cloudflare\r\nlast-modified: Tue, 22 Mar 2022 09:34:03 GMT\r\netag: \"f82e1bf8cf3dd81:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 15 Apr 2026 22:48:36 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 437618\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=I3vKbuQ0IPYmbj0DISC_4M4mBHMTzNzCrW7wgY64lRY-1774138934.236041-1.0.1.1-ZpYTw34fhIGSgNl3p2hoOu4HbXP9ln5mOXdyvVgNk4D1rDsi6OBCxN2B9Y9uKM3BbZPVgyYnn5qaQIBxAp1HMPt2GtzyU2wvN8GXXdGBCq3i1OVHSiCNKpXxAtYhnDkR; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XgJu%2FqqovGhKhGs%2F%2BsZ8u0m%2FVdwbYd1C3%2BAKLOp%2BtSSal0%2FAQlyK0mlkyHy6R66dGwxOIc90c76m%2Fdukqx%2Bamco1y50wBsohnNNEmzgq0ZuQYcXUHu6rwM52Pbw%3D\"}]}\r\ncf-ray: 9e010a72fe0b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"66a4a01575e7808c773bec77b270cade","sha1":"9a8392cc52bab97db72d6b85e5d9b86c616d9ca8","sha256":"fa3cd2c065b2549a867cec918fa183914daaa3acad7cd4f5226e78f2c908e003","sha512":"06a00dfc7ef59fa66cd52dbcfd4c0ac2f623eeb353dd6dffd094ab99365b44cdc0621f18bef56e1c3830aa897a3fc614ef774a3497a8687ca8bd0a28c4bf1497","ssdeep":"","tlshash":"212119d8de5800719f236c1701ae15333c26da7a9203aa65712fe2446408aac128a3ee","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-05-22T06:52:52.032818Z","times_seen":203,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","date":"2026-03-22T00:22:10.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"30:09:A8:2B:50:A3:5C:0E:2F:11:01:80:FC:9D:20:3D:1E:0E:65:96","sha256":"A4:2D:7A:76:57:2B:43:3A:8F:A0:D3:F3:1E:A4:E0:04:33:BD:AD:1F:12:67:F2:9C:D8:4B:7D:42:6A:6A:FA:35"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sun, 22 Mar 2026 00:22:10 GMT\r\ndate: Sun, 22 Mar 2026 00:22:10 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ba5f8ab036327a2d0db94fd411ca555d","sha1":"650f19f36ca742cdaf99b327250d2e1d894828aa","sha256":"1f924f494bd000c6d079ce85dbb1bb27c778eb98cccaacd0f43f3d6b5d9ca3b7","sha512":"ee72209926367e2b0b30df98885cb6a3ab91877a54a807fcfd43a6190d749480e34f54bf2b96293150e64f8ce8fbe2d874f1360169b6c2f246fbb618c2b1cf21","ssdeep":"","tlshash":"dbb012371e11c8280c100143c577a7b8e0014079ee9080f9a07c0fd411901b38001690","first_seen":"2026-03-12T21:14:04.610711Z","last_seen":"2026-05-06T20:03:27.672724Z","times_seen":10302,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/Promotion2.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/Promotion2.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:14:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=Pxl5FVgKxN0.Ouk4PRGrrk95V7OgS.63sdLqvuvokaM-1774138931.3967383-1.0.1.1-X2A1k0dDNwmw667z8uvPzmZbRZ8x1p.bKuUmr64xnP1EhmMU4W9rG2cDpWFjGn.6CAYAJy1D17gyd1CtUuY8E7Uyb1zu6mJ9C0mJcSUcmg5LR_M8VjlsfinCOjHUkOp_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpRN8yzPZe1RWnFvopR8mqHjvWC9PywYRxRTknLgzijO%2Fg5u44Pbov0QRlLRR1pbQfUXOLE1b0c7%2BLOvYsBX1cMRa300t%2FdfMlONQ5jcuDWveqHbcg%3D%3D\"}]}\r\netag: W/\"68627184-382\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eece41525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31cbecb2c7e793078b4a8e43100c2e33","sha1":"e073b0e09fcd4244f6c86b8f22206a46c4af9f3c","sha256":"a7ec0feda0f0f44aecb09628876438cf31a3d33de7393d25fc1b39d6251bf104","sha512":"6762313ddd6985ca71ea5e90b3a05664d0d1a3cebfafa6da07ebff76f62a3c9634d17ac226a4fabdc606ddc5c7c7adbb4628f3e0c8a30d5e5f96e574266d2242","ssdeep":"","tlshash":"7a11cce88739e7b438cd1f4f9a3d4dcf3614261a683de034e73eb9c4a61391c652119a","first_seen":"2025-07-08T23:44:04.701479Z","last_seen":"2026-06-11T18:58:57.207419Z","times_seen":179,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":87,"dns":29,"connect":2,"send":0,"wait":524,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Odometer.Dtmtuu8d.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/Odometer.Dtmtuu8d.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=OmuB0h_gfK.ApOam5K5boHQ7v1DlppFDmGoJQnD5DxM-1774138931.748767-1.0.1.1-2rk7.ghffVWRuDnBJ1LS7KzHQbbj8v8k61zly5a61.dk_6bO8p_12D3alc9wIavs2cQxJ4Ahif09XJwFeheO1_Nbmi7rZ_2r_lPuVP3T1xgSfN4FDO8W4KJZB4vv8My1; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qeo9IzzPqdANA7m7ydV1qGn530Pb06ZRLBWNJaff7vgpT6dmUNvgQ48hZ%2BBuH9sexWWuR73xk65iYQ1%2FN9PXdLm7BNGoFhssqCVdJeawNyTTzdw%3D\"}]}\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-ac6\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a61689ca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2757)","md5":"e60bd0b6b84d162ff84ef731b11ed036","sha1":"09af532026627df2629f1a98a049ee8c50194631","sha256":"8d2a9d2617a60055e91c6b16f4cabd14851836edec7bf90fc8760e1d31a39df3","sha512":"a85638b5f89d49c50da5f9dc0cfaceec033c45f524a51bbf266fe9cf67f9ce63ef157745964b9ab7c1811f8e2f2d2c5d6348efebe6818d6fa5beb8291e36c725","ssdeep":"","tlshash":"2451e1154f910364633a7906b5c81b51bfece5415223c58e7329a447cf83db9e398e1b","first_seen":"2025-05-18T15:21:59.195484Z","last_seen":"2026-06-11T18:58:57.142507Z","times_seen":252,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet116o.com/api/public/v1/tur/casino/partners/751/platforms/0/games?limit=12","fqdn":"go-cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /api/public/v1/tur/casino/partners/751/platforms/0/games?limit=12 HTTP/1.1\r\nHost: go-cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDu4YaGEWYNkrWmNOVY94jzulkKJlsAeyw4INhxdJ0sy1itY9AzVC535ZNeJmgOl9%2FQWIA%2BvoMuBsQbZC6PEDnuMh9wyNWn7MBOE2kSbKPadur8lg4k%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=FTsicN5N5x9tVEQWvoGR7BdkC2opse4wqMpXW.M1l9k-1774138931.911299-1.0.1.1-zSfZi9iVE9LQMqbLgNg9u9DvczFXbzWBRTdBfy7TCBb8PF98SYPk0vi8_Qp2sox478BwfGeA8IgQbHIWF7y88CaWV5ZmsHBqJf2DuqSchrdxXZVZsXH.yDC0LO8t0gDK; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9e010a6289941525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6421,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7fd95fcb9becd8e01cfba583059aac84","sha1":"8e4cd2d46697c30a7732d5d0c03599d78da9de8c","sha256":"87b5650ac6493f6c020cd797508844e6619b406328a661b18030c2856b2129d0","sha512":"aac63448641f11d2fded2e3fd6b1ed7657bd772174eacdec454419e589a51a4e73b2e8d8bd9e3fd682bf9a44dbc594e790421831b971f90b95a000ac84c9c6ea","ssdeep":"192:E4haShvPvxjZFCCyhMdoxhFvH55hU1BbPhwREFvoc7ihsshjqIjqL:NvB3xN0eK9oF7+95Ju","tlshash":"89d1de4e4924faefbb59094074533d0c98be57d26accbd20cd4add4a60e54e662332df","first_seen":"2026-03-21T17:26:39.685016Z","last_seen":"2026-03-22T00:40:18.184487Z","times_seen":4,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/494.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/494.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/15/30769.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/15/30769.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1680\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Jun 2018 07:09:18 GMT\r\netag: \"109f9d1e9cfcd31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 191488\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=tfuhbI5kH9S_TCLfVGEga1H.LSgwZaZ0XJei57B4008-1774138934.2622097-1.0.1.1-ce4k8uoGQgAQYSnHDkujEKuSTiKkj1F1oqHR3ivcNaz8p9ELWBCv5vXKUPd_amYCS6RJqnnYKqHUdTdG4QPAUyXpZl3TFz1Sdfqd.E9flJCwn2GEQx_Oe.jHUWTlmV4Q; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F73Hx6K0T9tDbNSKhfomjP0cWrFTxQXkYe5vhli6cboM0shJvzKM7F63tru2eEliifCTqmTiTF2OOZqVwcrxFhRQRjLBbLsOEoClfP13sUG%2FOo0p5h6C1yAS4i0%3D\"}]}\r\ncf-ray: 9e010a732eac120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6e8003648fc896775a5be3a5d6ca5cde","sha1":"63136a64e856eaab11503b8968b48b303493d564","sha256":"d348cf161211ff3f896b37fc21f037ed8e637c5a69b5ea84c30a1f33add5beb6","sha512":"8f8803fa6baacd3f753ca156f856cb2702dbb3d0b21d5820ef7f08bb7201567b96a4f6cdbc499ec1d57f5daaba95ed415a512f28119dcef4c3c78849e1cb11dc","ssdeep":"","tlshash":"8831d8857ddabf25d0df0866c39194a120d91bf75c29402fd9f8f4eb531420a6126dfa","first_seen":"2025-08-25T06:03:30.837155Z","last_seen":"2026-05-16T20:40:32.805498Z","times_seen":23,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/dynamicallyStructuredPages.json?v=1774138800000","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /dynamicallyStructuredPages.json?v=1774138800000 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:05 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-2fc\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=TAB.hwinmPJaBcYgzM8bnP4f95Hh9tZBYNUccCktH_A-1774138925.6613464-1.0.1.1-fGJFoQiAwmHtrdpvXjx5KUhPt1eVLNRxvvv2r_f_.gTO5lhHn1YcAg5F5e5LlcNTJrFD9jnhvZw2kEUC.K4bOYBZtvM6yTDd_iDPQc281KrbUif5xugxDkcmRlYipSzY; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNKep9jOxreLZy02q9mdsqR70TnkloXswUtoplyPw86AOWLnTpfRT6QZWDzO5WpJ%2BFLFl4K3P6aC68f97svIS9QokjfZBAtS3aA9uKfYSSMvLQU%3D\"}]}\r\ncf-ray: 9e010a3b78dfa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":764,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"61ff5ed77b867ea7b436a21eb8e5ab4e","sha1":"91488963a9157554638375ada821c4bb44b12dd2","sha256":"8329002355bc98821e6757dc86bd87104c3f79ab3fa48db2435c5d3baf0ec870","sha512":"e93a660a89166b2b4f17735c7ed67f95b3b333006596634a735da5159f605181c8a74bffe6924a82feef888aea5bab127c2aaf77685cd27efbd0d71b9d888456","ssdeep":"","tlshash":"2001493d3c10ceb4f7a08862d58167809992e576c7880c5c2cdeeb19c3ad24e1441b7b","first_seen":"2025-05-24T17:16:20.011585Z","last_seen":"2026-06-13T16:30:41.737149Z","times_seen":2757,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/translations/tur.json?v=1774138800000","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /translations/tur.json?v=1774138800000 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:07 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:07 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-30ccf\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=UbGZWdLFLwT6KkTD8ejCvX6WhaOFifrvXjG.3GipBAs-1774138927.1880257-1.0.1.1-gSWTGhO7wobQNx4yS5U.hgW28UPnIQesB1ch5P7sTSRUANWitMQyxmUvJc7exzPjD7GloxW_.0TFctQQC5HgMwLILp7CWgUAPV_81aToOKokRpcXIYO2oif7zF60UcCI; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ugx0EeGCVwUsIB6GmtfF%2Btn8TH44JyaTBbMrcvYHDNnpCEb21QlAqM8QHR7aeyzBa0BAwr15IzqrvVnv27x3VXxB8ixiQ3V2LKd%2FIor6F3Ar6aU%3D\"}]}\r\ncf-ray: 9e010a45ab24a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":199887,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (63253), with no line terminators","md5":"d7143f942398609571955fe899788b69","sha1":"1ca53771c0daff81931970625d5cc5bfaeadd438","sha256":"440ae71971f39fcc7002dbc943ea1a34eb0b441825f20c3747607ada4a2f2d09","sha512":"2ac68b685b698b903e553235f5fd961f030c9d5caba13f8c53c4d532065e65a50f36716a3d666db49f22b6973a72b8f3ec4fce62620219c078fee01cce780800","ssdeep":"6144:vu+a3k6PQoW83TX+oTo2MD4wOcOwqHECKqdpVyKjscdG:G+Ak6I0DM4wObw4ECvdppG","tlshash":"d5144c05586e3cfd97a207ce74de9e66b0fa0283d150e416ed9dd63a138c767d22b90c","first_seen":"2026-03-21T17:26:39.722774Z","last_seen":"2026-03-22T00:40:17.868102Z","times_seen":4,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":529,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/walletConnect-CiycSUBb.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-7ce\"\r\nage: 404\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=0tbpmw9FqEaLdJ_m2XMBq_JM2BoM07yo1OV0mTKQZgY-1774138928.1226816-1.0.1.1-y_Cwvh2lkBxDlXf1NXwL87e6ou8Zvwfew0HBNYTKTJY3myXMj2Rp5f.W9gOB9fWE8bci3CEnYIPI.z951HovWpo2rTkxa6WoZ1UJ8LwqeN57is.sue4lXbJMUISIuTom; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lcUNaM0GFOyrvUhdQkBp2H9c7Yx2LhAhH2X7PfuBzK%2FHNq%2BivKsWl7Kaq6MkY%2Fodi2hjz%2F1cN4i8Ty4pyWVZ6jfFyYWRyAaxwVkx2GjWA9sXMi4%3D\"}]}\r\ncf-ray: 9e010a4b0c6fa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FeaturedGames.BqGfbibX.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FeaturedGames.BqGfbibX.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=La20Tsvi33qbS5FQPVdsqKdWlHWgiwPSqxa1B3NVHr4-1774138931.721076-1.0.1.1-GAf1cWatZKiA.WnBNoHWHOkb.CqcGK6gJfio8wwSJiWSFnAv1TXd4dLIrpAG8DMUtmR1PlGs4sIbpO90CHmu7gTO9hfwM0FughQnCQWDoJQK80VJJ8_AnQ7S4No8mnNB; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T6aRoSRBcMUKO%2FD9v8Ex7bXrG%2Fsd9RYNuJENNvbyMuIYxCGQXm04paeMMwmkUKdRg%2BkwzrLizr63ddXxogfwIJ218vXODac4lRajI5IlkyOcEkE%3D\"}]}\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-1baa\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6178a4a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7082,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7081)","md5":"b9d344659eda7f84d59b2ca785922590","sha1":"5276c97b70f3ac831be147bd9d3184eb8532a2dc","sha256":"e89b502316316e94643e2b764cf5688400f9359a0dce35ddb32f4d1b6025e20c","sha512":"56e9d6058b85b8fd878993b2ee6e6ed7f5acfe624e013631471f889e36f34543c3ec77987f452bd46ec2e5c5d93266f4e01a5f80662867760c46463fe4c7235d","ssdeep":"192:TYFnOFceEDvCElpcFpgZFcV3r90CCkPaifKLwp2xA:sFnOFceGrcFp+FcVRWg","tlshash":"cee13115710e3a387a23a1ff26905b8ef4dac0f1de2a2d3ea490272bcad63560535d58","first_seen":"2026-01-23T19:25:36.430155Z","last_seen":"2026-06-13T16:03:38.847222Z","times_seen":552,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-CnlG40EL.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-101a\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=vl2urDqHmJaWnHdPUIK1IczPlMq6AXnvvoke7cYDLa8-1774138932.281337-1.0.1.1-C0LRn1VajUM6kGIPY9g_LqanMb27SXh5phKncoLNJvSRoWzXOGFbrkdtWYIuqMtNwlkITUalT4t2iLc63.N_CcUKiX6g5xHEKXo4oW8notKSXz_TS9far4PgYuUbhxFe; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R1NU3ZBE0Xw2Ax1M5GScgSeD8qoHUepfUN%2F8S4Y%2Fg5ocvN311yHwEJ73DSQ0%2B1XPwfgew5tbAQdTFwzzPBVsV%2B%2FJ3AxWyYDbmnZT5vVstEAQWWE%3D\"}]}\r\ncf-ray: 9e010a657946a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4122,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4121)","md5":"b105b9d1c817d1bba91c163aac4581d3","sha1":"c22908ad81be0a8e388a40eb1e251cec4abb6092","sha256":"6e3edc344d0220e455f2aa549e20a36ac03f5cb02ddd01f318d9f7d3265c2970","sha512":"a468fd003fd463ec56511dfeedf72a9b06a95e17f3a6aa9dbef93e99c2444addb4af59cbc7d35300e1fd95c28b8c60b4d88d025b8a1cea8ba2c6862de9769f60","ssdeep":"96:5SubClTBeLPTGNlTJC6YacmDD+oXtPeYFaOatTz8:5bJYE684KoXdroz8","tlshash":"04818617e01ab3fce8ad04a2503f910e377e0bfdd75604e4d0ae09240a7d85af259bda","first_seen":"2026-03-21T17:26:39.427542Z","last_seen":"2026-03-22T00:40:18.100275Z","times_seen":4,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet116o.com/api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvN0%2Fkk%2FM%2FK1VuA7Wrz%2Fe3wG8gOHgERivGYxQf9UDDktQjAKNPLNLoLgsWmuBNYiMrdbq4feC1hBRlEXvVBDPmDroUApXC8lpRSOlZmzOy9KUbGMJI8%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=hGQPWSFwbJEqspNh.v0Jo18Ttb7uEZZEYw0S_SfIICA-1774138932.7081249-1.0.1.1-gxJfdXhx.m.Qdy1FTWbNxgIk41oCqLM0L0kJ5IInrItzZfvpteZD0Gczu8X8q83LB5wtNHn3G.mPW3QpbAHPwsKk8OlaA14VnfMHH3IzeO9Bve7rfADgXHL9E1lE2DXN; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a67fa02a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2615,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"57bcadb4fc8dd230f6f3adc9cfa648b7","sha1":"321770a05730c5f865b429f3fcc694ffc9fa5ec5","sha256":"1772e571c74fcc1ca93188d5e69f84c965c726a181a7b3d561755c315ef595b4","sha512":"cb9b859208257963cc58c460d277aae9b69d53bb7bfccc6a50c8d87c4bcc9500776b35e7f5268869b4ade92c59c96b39bb491046cd4ea1fab24db640d2e02027","ssdeep":"","tlshash":"f1518b13702d9d6a5b507b40b8c7394ac8ee2447dc0a5670ec494f8d82fa63ac6d33e7","first_seen":"2026-02-24T14:18:16.975259Z","last_seen":"2026-04-23T13:40:26.06858Z","times_seen":42,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2444\r\ncf-ray: 9e010a6c7a57c759-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEskOIKWizVhJrvVnrMlrV9p-fmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=19+0 c=6+17 v=2023.9.8 l=2444\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b44902a539b26f42ca501a8fc2eca9a","sha1":"c9156f826c8af47c13c4e95a4953987d2c34a74f","sha256":"e1473cf463a4e737486548692bef2ff33e1435ccb7b1d4d9e4428371b57a2666","sha512":"2dd9d9716c420f8d993a738149c8ed8a18bb8ee2034cadb05c3743cbab9ecb9eaabfa064be34e53fad571e80eeebdf7292cb9811a369dd67d51da327fd80fef2","ssdeep":"","tlshash":"db513db78f5778c0ec5c0e4b60017a48e401be0053f0e18caab51dd2069c629d371a8b","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-06-06T21:30:11.65097Z","times_seen":1640,"resource_available":false,"data":null}},"time_used":748,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Firebase-diKvNL2_.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/Firebase-diKvNL2_.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-1487f\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=yJrPsi9aQiRG3ONcq7nWdzQXqcdYVNlavuuDCn5NYN8-1774138931.348077-1.0.1.1-jUBU3VmKJ0hBk56yLpVuj1.3Jdakzj4BZP0_9s5tgKfZo762n2JzjsL3ZJoIcB3BFEu20WcmmnFVOnKciELTICFt4OPV1IJorBykZCtGzLla7zVWGTgwV24nyIcOF8yE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0ZMDxXGaM2ci5uwKFF7eAnkvIhtT6VNtzwrna4LUi%2BiVM%2FuLVkAF%2BxdY27jVptt7pYLChyz6JA%2Bd1gKl4ZJpZ9gOyiDBJBxxX%2Bsld0PkOABWA0%3D\"}]}\r\ncf-ray: 9e010a5edff1a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":84095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"a9c96b15207b33ce41c266eb191479bf","sha1":"f3a296de9fe8c5443c223461091bdc8a52c0b6c7","sha256":"a541d121f4449536a19127ae7c01559eba206cc71f0498a5a1038437a937ace1","sha512":"2ace56c3aaa190691316c2d9469f3a2b785d4b8de5cd20f39fd17e9da4275c2b33f4fd7fae089cc692004d9066d45af1f0e3aa0e3e4affe9a7c3314522077e35","ssdeep":"1536:s4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:ss1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"8e83957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-03-21T17:26:39.602259Z","last_seen":"2026-03-22T00:40:17.843659Z","times_seen":4,"resource_available":true,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galabet116o.com/storage/medias/galabet10/media_751_609aa2021173dbc7867be74ac403fadb.png","fqdn":"cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_609aa2021173dbc7867be74ac403fadb.png HTTP/1.1\r\nHost: cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 2609\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 23 Aug 2023 05:40:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"64e59bc5-a31\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=G_OviROwu0mHjQBbFfOdBo6aNSVDOUMl6rPwnEuypQE-1774138931.5350168-1.0.1.1-vz_nPLIvsmCVyeAi2XqN6OHqwbz62d92YL4QP4r0UFIcxZQOx8tBklcTDvUetapU9dxagfdtUYh8cErwNhohedL3lWPGZuvmZzum_Gtqmqzf2IMlEviAlRqB_d3XlbC3; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WB61dk9HPT1%2FRZ4zGss4lJNFugJ2SOscuPls2usht25Ky5UhmSC0EcSYQvf5arZfyESdQFDw5pIPdGCwrdVUjzc4MrwvOxTSjFSu85mCy2wUnlE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a602857a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7081c9d3ea2a6fa19a82d1f725a61d11","sha1":"3c161f97bafb034eb192b0ef890a5f2e4b3d39cb","sha256":"61390467d0ee7bf0ac7253d9128af3b18943ddc4effe0ef415b1d0ab9e4da2d1","sha512":"0c2e13235adef124de8c8fef5009e25cd362690a5865db9e3ac68b80d9bc4f6e30f13880416a42206ea81cd932ca17912a2bfeee7ade6f647b0c00f46b376a39","ssdeep":"","tlshash":"ab511cf531120e38d6a470339d16dec67804b445c4afc416f992eb2d3da61a478cbdb9","first_seen":"2025-12-24T22:39:15.996531Z","last_seen":"2026-06-06T23:43:56.124757Z","times_seen":54,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/InformativeWidget-DPp1w1VJ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/InformativeWidget-DPp1w1VJ.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-43f\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=uruZA5nR24pB_X6_mh2PQsIaaZtLbckOezhJuzqZkvk-1774138931.9263492-1.0.1.1-I8NwiatvjDypDIa70rebYYZPcniBZgonVjWrm4ii92UEvYf5noYCv5g6gJ1xUr0osjF21G_BH261yi4r5T_jBojISuziYnLO3R5gh6dULt1lKZfelKA6JZq8z34qccqD; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21DFBL0IFysFYMQVnZoOJPhDTFoQgU3xkwbRH54a3E639C1JGDMcvxjSYT2WV64RdwY8KavpuM104Wuq10AT1bg01tfLqzRIDoWqjW%2FyzODHCE8%3D\"}]}\r\ncf-ray: 9e010a60a876a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1087,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1086)","md5":"0ac4a8b46bc7ec9221ede066013b02dd","sha1":"0e4dff7ab9f997e52c674c55d33eac8bab2a4c93","sha256":"2aa3b96dba14088b2890089781fbced38f7874ade1a0797b3d7aa6992b8e5827","sha512":"323c5f306e6c5ea9d47a2243d3cb77f379e0cf43ffb3ae53ce46493a3df5d01a1266a4b023ada516e1b93b4405f86c94e4fbfda17ebe5f7ef1c0222f6c53167b","ssdeep":"","tlshash":"c2114646f594d57db0394dc44257809169312de4df7dd4ed98617408983010776dbbec","first_seen":"2026-03-21T17:26:39.371175Z","last_seen":"2026-03-22T00:40:18.075938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/490.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/490.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1163\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 06:56:32 GMT\r\netag: \"95aef59256dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Tbh1OYpTVdRH4v9hxe_jum4FboG8C9YDNeK67.SAS4A-1774138934.272328-1.0.1.1-8aZNde3fTT0dTV5ur6MzJwt3ngTvgb5_Y66uIEd0UwWJhHRlRqsuY1Qu2V.xqE6w1GrFX5bJIiFuhPi4lT2iAx.MIU5zWkIbRymcSAAn.jDxwUcW22zXy_alYGd25GOC; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XXggNfF5eeCvPrI998gAIxx49JKfTx6Y98IiWKrqJ7rOW2va5YeOndbPYRl7CbHjevNPqh%2BARVXBk0TKPYmkeIDj4JwN5OFg%2Ba5qSgD8LhtX%2FjfhhEhe2rXnKBM%3D\"}]}\r\ncf-ray: 9e010a733ef4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"06509debe60aa81dfffbf004e08c7a6b","sha1":"50b88812052789ae8adefb196dce6cda6923e3e9","sha256":"4359d78708cb50dc84cdb0775b96308e45f49e6b84a41269246af6502514c70a","sha512":"0e29dbbeabf9c8484eb1233149585d6d41c3ad6d9144dc83f3a8d239e8b5f85208c12cf5e073158e3ed7bd59e0722a64acbdbc3a1c967ef9dab4ff27162b8ccd","ssdeep":"","tlshash":"1521c69baca1f19a48ad702e35701173432c22dda9e1649fdcf9e8342f6c7220869288","first_seen":"2023-05-28T18:20:13Z","last_seen":"2026-05-23T15:21:21.730877Z","times_seen":352,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/lodash-kwDFPdct.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:04.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/lodash-kwDFPdct.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:14:41 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-28615\"\r\nage: 443\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=r5ez7EO40CeGnv3QIMIAe_z1WW1Fh9T9uZT3U_I6tBU-1774138924.5937254-1.0.1.1-fjhoW3bQ3KseIUnbxgPPk2YilnrpRnuY9HzkigH0kUT88uvPLBNiDcC79qw8KRQlMTUf64HBceqRo0DOPtAVtetVmFTIw61AXrj2aHfYguRRdSTNDN26TGTs35P4ZIUh; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSTlMCuae8JQ8BDPXu4hFQ%2FLq3%2BiIr8fPQwDlQSc%2Ba3TGUTT2hFbr%2F%2B%2BeJGk8ldXQvihw85tGSqoyxOddt6xvgx3OEATXhOrIV%2BknLxbuz8jZrI%3D\"}]}\r\ncf-ray: 9e010a349fb0a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165397,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35467)","md5":"12e56cd99d8f0069e4ee81a372fe541d","sha1":"44e49f0b5438f713c4e9cf76e3659a00ffd35e87","sha256":"d77e40234c5d8cda5978d85ecd94a77ad1231619bf0b371d67fb2f3074e96425","sha512":"69908919839d062f0d861cf4591600c01193ccc7fd4438009bafeff34258217d381b6581a2142725c495a3a1bdf7937964c90108d0a6fd6e01ce2b90a854e9a2","ssdeep":"1536:RU70QnXcPZMTC7X/7crNuU0OCbgjE3mhgELujQjEO6epU3nddIIBQoMbPDFLufvn:RGc+rh07XgLujGEOtbavkeLkDYlwMh","tlshash":"74f391c835d7f4a183a7287440bf084bf23ead65a84cc550e1aae0dd7db8919c277e6d","first_seen":"2026-03-21T17:26:39.43969Z","last_seen":"2026-03-22T00:40:17.967811Z","times_seen":4,"resource_available":true,"data":null}},"time_used":925,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":636,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/WagmiConf-B0zYIpvp.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/WagmiConf-B0zYIpvp.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-18a72\"\r\nage: 405\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ro1iWZoKx88qpaWk_LIeuCwrXGGoIjZzrX9VjQVwSNU-1774138928.7204103-1.0.1.1-lPGe6nncbhI4ZzakTLRTuN18l69aI_w1_zQdtc4VITQ6Ozz55Kwpm6pg_jsaUSMqH8c7UBVz9XcE7XhQzGxUwi4HYB1tFAAd1KHguYyQ73ZrXR7Kzt9eq05lUM2Uo_40; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZR%2BL6WvULVVkAOrKpAiPTlJjpTkYKPc%2F7WY4yjx%2BygIY6epmUDUhg9ARvHfqQBa%2BuJxNAPh8O9cWgEt4mVzYTBbMr62LXNu%2ByX%2FKoTeO5yNJ0U%3D\"}]}\r\ncf-ray: 9e010a4b0c70a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":100978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48214)","md5":"9ffc7f8013321c1fcfc6d9055babc05f","sha1":"f2b3ff148c33a75074e577fe689c3a7e07791157","sha256":"233f2d1fe68f5aef052bc5e2ef81a7663782ade365249e40d628f8f1c6e82879","sha512":"1ac7b4df1da940a29ab80541089861f322f6edeb46925d8c5075b01c66e5dd4dcb39349ba4814f5262b6934b7afe14b68d172595066334dd94364782af886a51","ssdeep":"1536:892Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPYE:hCaSlx5xG7NU+WEy1bPjv1K/XGd","tlshash":"67a34ad07196b46103a74ae008bf440bf139ac34200e565cf269ecde79b96ea9277f7d","first_seen":"2026-03-21T17:26:39.449607Z","last_seen":"2026-03-22T00:40:18.116093Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1097,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index.es-DXJtvHoT.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index.es-DXJtvHoT.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-48144\"\r\nage: 406\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=XramEb0r0CrM2LEz0TzWAGkQB3BUsKOykM4stBRqqFU-1774138930.5603387-1.0.1.1-Etsg.qMyx9xsQuiAJ.aXwhgJl8XMuLWPFkmUqxp5TZWm17bYGViJPDPl2qa6OpvtwXqghQYIJyHJQ.d.gtejeMOaxp9mtLXLpvYDZ35pZLzwUolHCY.KMbqv5cvH3ElG; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2jRzaFS7ppC8GXfaSRHxlDA3wfnqFiZlj%2FfV5ASscNJV7Vrc%2Bchwg8%2FWs4sdnBP3i%2F%2FwryXsMfE%2FAViQ2wb7u7gL69aWNo5ZeRaNOEeefpxheG8%3D\"}]}\r\ncf-ray: 9e010a59ff02a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"7f5a29e9b140d89b45ef6c2dc1458af0","sha1":"d3d5fe3e4254d00e2b6c0321d24cade44f2359dc","sha256":"7bca838c2ed01b7b467f932df8f019f4ce70b01e018595eb6e01f08a1c826261","sha512":"74fd665894507bec47587bfc1fa7e1356b66e4b0efc0ee8bfeecb69331bde3cd559aa2583e98d0065525a79b28fea6568904e71d580aa5caed815377063d9703","ssdeep":"3072:AzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6Ubh:Az77jdU/7sJJMcvYisoljSFN1Nd6Ubh","tlshash":"c554fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-03-21T17:26:39.597293Z","last_seen":"2026-03-22T00:40:18.118105Z","times_seen":4,"resource_available":true,"data":null}},"time_used":983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/games.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/games.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=tKMkXjqLb5vaz0aQHUwhQbmjXp0DLEIsk2spsPIkqjg-1774138931.4118612-1.0.1.1-PLz69WXMhS1wHPjbhD4TFiRlxFboJKEPsBjppIscPJw9fJW1nSctn4FJFxvGCQve9WHrybFKtoUtZtgY78A3U3TKw7K0rJPAQO._vNQWkSeKxMTXHb2MVvJf2oyKg8fP; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y8sDMx%2BoDOX9RmMVsnndpAnD2ibyhVJwxXNS4ku%2BBApj1XrTB3zAdrZev9NY%2BOeyEbk84v8U5KpY074oyJ8vYTog39Ni9Lo2i4OC3ay8pjw64VhPUw%3D%3D\"}]}\r\netag: W/\"6862707f-525\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eed041525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1124c704ce353b78a51dd2190edbf761","sha1":"969751af8092f4dfa4450def11dc616eff99a8e4","sha256":"02b58d0aaacddd78f61fcc4a92e72d8526294443ec8e695fe41a763a24d873b7","sha512":"62371f1a27dc5a9f43dc9d738c81641e16ad577f02a50973cd1515f41053160ac5286128dc60ba13ce57271eb462d1f258f830125048ecaad0944f9f5153e39c","ssdeep":"","tlshash":"fe21e14c573150fcfd4fb3e9a32e6b787449f2156823c878c05e45cc268aa4b64dc861","first_seen":"2025-08-01T03:40:47.562391Z","last_seen":"2026-06-13T16:03:38.877448Z","times_seen":1060,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/DisabledMarketEvent-CPPtnhoy.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/DisabledMarketEvent-CPPtnhoy.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-a9d\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=6hBBiCFeDx2yA4E6KQJTHcnwrfZhWMGAvWTzU9h7AWc-1774138931.7158887-1.0.1.1-t_VEQHdX9XD1VYhom77f7NNox6ZSre5tKSfRnmHA4k793nmWmQn_5MIBpTdiFw62sHWX42uLKbu0m1ErhIT2a33V0qzSm8aqIpZ844uUiuBSTvZB9Uijy8Oq3CvBLo3p; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H5efXFafgWm6UFqBU0A%2BwsJi5k%2B0HlZmo9xEQqAEDGVoIrJ8F9l7G7GEFUbHKMxvl255RoqVf3YU%2Bh8CjcfgdAFK68XXmNz5Q62dW7wic9zA2eU%3D\"}]}\r\ncf-ray: 9e010a61e8c4a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2717,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2716)","md5":"1ae7d8c222219b66a065ab6cd12346b5","sha1":"cd4e545ab58eea2dfb81e019db83b0c38aa163b1","sha256":"91e1c015e24443ecc166b3c80d23084b7202fc955efb7babbd75894b28316f08","sha512":"ce552e1c0f5315387462390ae80e21eb8ac37a8f52c4ccfc4db8b5a9ba3cc9f9b59c4582f2bd40031f7e198335795efef3aae2da13ca499359d5447a527b322d","ssdeep":"","tlshash":"cb51846df290fa7d993a04dcd23b1f1f601913e2c6590992d0be8c29151c0ee326efda","first_seen":"2026-03-21T17:26:39.419582Z","last_seen":"2026-03-22T00:40:18.068229Z","times_seen":4,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/if-defined-CWaLTnLW.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-cff9\"\r\nage: 406\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=3rs2XnF1BXYRvZgo6YTRja.05l6WmVy_.ClIlCtarY0-1774138930.5764344-1.0.1.1-vFzFs1ThTRbC8R_ZC7dKEHxaKwFbL6hNvmpsmztyElU0MtdI_b5ujtLQQWfVh2RODYGLBDQr6exEd2GSSOQ2IRbsZeSsDJBGeScEBqgUxbau3JQpEK6YfaU4YRJyZRzH; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqST4FwD43mBbUIdrUVBPMwgx8X%2BQgqriT%2BkOHpE6KX5OaWt3eTr6SimFqneb1GCPf8GTEOdukojhCcTChoRSFBfUql89OSQlFYeB3b%2B1T3aefc%3D\"}]}\r\ncf-ray: 9e010a5a2f13a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/Sports.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/Sports.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=33xHZaElh1sybXyJ1Zi_4vhHHHipXIQYFGT7C3PEtuc-1774138931.3990452-1.0.1.1-lBhziz2yFtAUMgQnE.x0EUYIZpNQ7PSQ7kJEq9xXuaOH5IcxP0ow0rcJuC4KAjmai0l4MGNb3.HyGx43_PgtK542J0cqPCEVdhz80Y7dLzw.aDqSDaZ25ngu7O30N7ih; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AulyR44fxOSRHZpTbLZtefU9mhYnX1sRCx%2BrzY2dBla8Wa%2BI0xPelbxw4pONJeP0WfElEyjofQ%2Fi1WmQIj%2BWPHRrR%2BeTAM0fI6jkgP7qHdpSER8ARw%3D%3D\"}]}\r\netag: W/\"686657a7-82e\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eed0b1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2094,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e98bc5be7f5882a72abf78d11dda926a","sha1":"d835544d895a4817c210e575a6a99e08c1e2f095","sha256":"bc7880489b92bad21b9475577a93515e928dbc3fe62bf09e014e973e124ed223","sha512":"966b29438ae513d771a33e04b1f0566a70d205ee6698d6b2c7f1b00c7e263311652d392fc3f4251256866bbc2b0abf0dfa35698aaef8bc160847938a33a8a184","ssdeep":"","tlshash":"3d410018c3b983facc45823c5035a5b83a4e10ffa8a0f3b4996e95a47a420dc95cd6ed","first_seen":"2025-10-24T05:32:28.392126Z","last_seen":"2026-05-17T19:23:31.955994Z","times_seen":54,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":82,"dns":18,"connect":9,"send":0,"wait":518,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FavoriteGamesButton-CYfYTrLX.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-CYfYTrLX.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1ab\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=7Txi5r3f3Bk.fo5jRftVpg_gWed46QVtnCjRJNCbM0I-1774138931.6639335-1.0.1.1-aOrTve.nHUX7TzoeJGwfUDU_Wn3WO4PfC8iodwvW07qzDhVS1v_TAcCf9AaSvm9FCcPdg2mqkhpfayb66yzBqtrmk5giTEuh3T5jH7SInZVfk48wUWY2AT3seqo8sYva; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CdDbbC0cJ8bx1QZbmtUcHSyOt%2Bw04EfXETCo4GdxO1ZA2jtLgFJytsMu7QBgrcGbiCm0%2BFDG%2Bz1C6SDruc8J7hLtmsE%2BV9n9eE1HsI8t69sqyI%3D\"}]}\r\ncf-ray: 9e010a5f582aa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":427,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"4a565c8afa2e2ec3fb7c9744f2b8c63a","sha1":"41e7243f94d4d2ec8d2f5f0c53ec8478d6bf07f3","sha256":"9097c3310dd046a510dd2fdc578c8d96061c1b1c8cfd91725c61b39b36574553","sha512":"52e6ec9255825251f43fec7a6e3dce10e459c123e1449d847e14f3b4e386293dbfefc4d5e586497b58e2a205d36e2a590b29af027ae89fb33fcf4e89788d5847","ssdeep":"","tlshash":"02e0fa0bd059d1fa2b436fd01107c8243436b47cf79cd090408918503d70597c54ed6f","first_seen":"2026-03-21T17:26:39.361872Z","last_seen":"2026-03-22T00:40:18.081875Z","times_seen":4,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":691,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets.json?v=1774138800000","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets.json?v=1774138800000 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:05 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-6c\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=k2v342kMLknIJ8kdhCc06V6XeQ1pXZslD3CCWXJ7e1w-1774138925.5533237-1.0.1.1-.LuXj0bWLOEy2T8bQNVZwFkfgNqvK2iW4yx6ftyLDqOHWAgbCjL.nWetMymMl5l0tjtfX4eGL__rFj_7UsBsm9Xk0uztMPKXaMReFu.aaXaaB5WvVW7ZgjLYRqBvDuE3; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxlPwCDiU%2FYdc6EjAPwJZfNTTBS7cjDC716NualsOHtaP8IQttEi%2BsNkG%2FYcjsPd5GffnMWiUU6uOsGMXAH61%2Fe4lDL6QI4FLv6ldXnzUS72XAw%3D\"}]}\r\ncf-ray: 9e010a3b68d9a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4ee89984d6fb4aad941e7cf6cc639d8b","sha1":"acba0d60920c61a2499c425d0fa8d6fcd06b53e1","sha256":"adc12bf71cfc37b9889de5d878c36ef74224dd986fcbec05656adb2d12016e22","sha512":"998b96b1f3fd723a177521a6a54616931aa2e0fce8dc23940f0fa573b14a711d210dc1dccc67e69db74abd89413badacfb21edfc081f3fbcb642c1a20ca98b9e","ssdeep":"","tlshash":"95b092885a6dc80033c0e08822856b04f304f1ce8ea7025e201701a88af0b268ae080e","first_seen":"2026-03-21T17:26:39.627607Z","last_seen":"2026-06-03T04:20:31.818456Z","times_seen":53,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-WIMCHaiu.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:09.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-WIMCHaiu.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/WagmiConf-B0zYIpvp.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-35fd8\"\r\nage: 406\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=MejVrAb0KVRsN2qOn819jzfJ92PhzlLK1X6LMf2thNk-1774138929.5648534-1.0.1.1-OpIuvQKXhOWoHO3iYLCM80WxmyN33zF6_XF2vB_uNj8kIZvojQ3BK46zfmSTGoQB4S9SuRfUI2rZ3jqlgC4EeK7PFQnn2n94Dx3JJms3vRzvT646pEEWDVgfQCsPfRRi; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RLOyk7j4c4jRR5p825sCfIlpy6jGteYgJRhu6keRvc2sJz45F7h00%2FcZ%2FsmqZ9o8Hj655gwC%2FahSuI0qp4dxwOZlrQENP%2BOOHwX6rRFnGKyFVRw%3D\"}]}\r\ncf-ray: 9e010a544dc8a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"9b2782650ec3bc7acdc4746a40024c65","sha1":"6eff74730fa0eda9e5abafaa734c505751244788","sha256":"156c9584ae57455fcccc4ba27c44cf9a380e5e904a06092bae04b487ff57ca69","sha512":"0391894fcdf91d6ec313cda92e3af9aa61e90a611157bdb38e1853002c4d23cfe88693ab8f96be3e5c8a70d6290e505cecafb89e1279d08fd59d3addd635a4b9","ssdeep":"6144:MfeL9y0h4R78o8e4YaIALoh6wj9Sd51jjVvFavIRcDGRD6On:MmJy0h4R78o8e4YD/j9e5xavIFROQ","tlshash":"6e240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-03-21T17:26:39.395349Z","last_seen":"2026-03-22T00:40:17.969853Z","times_seen":4,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":292,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/GoogleTagManagerTracking-DAQdr4EP.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-DAQdr4EP.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-4a35\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Jq4KbzcP6oWTF8WOFKma7FGTvmoph6.izZ_EH8Ch.RU-1774138931.2823226-1.0.1.1-zow8YKoLD3DcImz2kqaaFw33hMKpqF1lye69NuyQhrnOae7ehHNtFPElospCL8qqbFlZ91ypKaxVdarqZEdyr5vwxlP6g2x9OTUAEWw83HA0D_DxSwiV3DEirhZX2YUb; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7cX9PiyszQOBiBn4pd0G4dzvwAQV2MuvsQ3cYSntXpAGRFtF5B%2FRSj1y6x2Edvt7Lvg7i%2F9CHec5tYGoH2svU8jotWg%2BByOtiRZ5weynLxRqgo%3D\"}]}\r\ncf-ray: 9e010a5f381da0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18997,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17701)","md5":"1851f665ed369b09c168336a0dfc7620","sha1":"56104bf45809c75b4adc2c608aefe6cf8b84bbb6","sha256":"278a0f52fbce8ceed2a9b0a736b6ad7b2d4229c55e7546093d62a9a550d265a6","sha512":"6c441232aeb4d969ce40dd487a293f6a0efd543b5a5f92bb46af589c9487f433f660a280888d7fa139778497f08bfe7af278653166345a79197242731ceca54d","ssdeep":"384:db3bEI5wTlaZdtdoNc5GRU52iWD+FOTVKWZxxqyuQPfg1F0TQOmJNw9vU6:l3bEeSEDdoNcwiAiWqFOTVJZnqyuQPwU","tlshash":"6182b9d7f96548e0a5bc1fe81f92428b35b1b669f48140747c9e7c0c233cc4ef2a5a99","first_seen":"2026-03-21T17:26:39.471571Z","last_seen":"2026-03-22T00:40:17.99841Z","times_seen":4,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galabet116o.com/storage/medias/galabet10/media_751_81a0a78176aca202a6413bca3746cd67.png","fqdn":"cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_81a0a78176aca202a6413bca3746cd67.png HTTP/1.1\r\nHost: cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 13516\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 08 May 2024 11:53:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"663b67d2-34cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=LMsW_bXqOPgb4h7Q.LlMn6cfPoX6XNM2c3PD2FVKrDs-1774138931.5126314-1.0.1.1-B16v1is4o3RSgP02Hb8jtb6_V2JSjSXnlCOajw_QXIt87xDpnIjCFOVKLbBz96O9eb3zlVJncvlmnWWeo4LjQi6ggV1RKyjdGghEyhYReiCAstam9II01E1y8rdfsOMJ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWLFrOOFAkye%2BF8BGSNrBWeaoMHBiHhESBNxbUv5a3lOODf%2Bo%2BrnHO2TpwToJAZZWieWENZleJwOutumYO7Kh3av5JuRY9DCurdQ2uPf2HAD9Wc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a602858a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 340 x 340, 8-bit/color RGBA, non-interlaced","md5":"9fdfdff5cb870c3f0abb6cc44f262bb5","sha1":"c48fb4dadfa4e6b4de69ec0e7e02445057c7e0ca","sha256":"308a8c0f3d3f9792d26ea2d84bd633ff1f490ec83375b1613d29c0995f8b740f","sha512":"39264153a485e22fbc442e86234ce24863f5bcbfcd47cad34f5afc8715946825fc705491b2ef888295f017d98f393c44fb28428dd05b829327c7ed38db3d4b19","ssdeep":"384:CvHjxbUGUk1+EVWqPDks5r6BU+xND3AU8h:CvFHoEVvaDsh","tlshash":"6852d0f0ae72adf08ab16c81539d8d1e8473de7ea5913f0361f64077e64e40d390a4b8","first_seen":"2025-12-24T22:39:16.288188Z","last_seen":"2026-06-06T23:43:56.100804Z","times_seen":54,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":397,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_4c091674cc1b8a757edda70f9a97662f.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_4c091674cc1b8a757edda70f9a97662f.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19028\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 01 Oct 2024 12:45:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66fbeeda-4a54\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=cY6ErlxxHN.6tVFYh.Cdx8h2889b81ZtPdlQtu5N8aQ-1774138933.5572758-1.0.1.1-N4dlctzbdBnruCrDIHLMhSvbuqpPnejqweW5_Cbls5CqTR5FOYUJUevFVEnaXvJdOxWzH9sUBV72M84aA0XtbT3bPI_3nelOqcJW4rGLN4_BQt8o26YaWbrEuPFXumW6; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XcKtw81oDXleY1dYf78h%2F9afR05FhK75MP%2BbqYBO7QGkXJnHlfn93OyZl7jDvcoFofw0koLeDc04oz2atJ4NQ%2BcHhw2pI3FmepFfg9eGwmnF%2FAObmA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d7b17a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"470ce435d160ed8e1bb2c716c12f2bd4","sha1":"42647d800b75281936e1427193e663f6c6aea371","sha256":"adf12d4f2eef34d98c80198b305fc79522cef8ffe98b36263a852afe7c7d3a54","sha512":"03487ca714d93651cc162135dfc4558db1a3ed137e1386aebdf37fba4957861664f6461c2ee462ad22e21484e3e8d4c87286b1935b412972047668e6a063c396","ssdeep":"384:TTMuAQQFE/lQynoYVSZv8D9gHyuiL7vF11TN2pWeLTmSdF//xIjYhop1uCCKEhN4:8u5K2o0WHNiL7vF172pWATpdNxS5pxEc","tlshash":"d582d13a8138838b86d7388ad4dd1964ba674a4c6d2a3815d37c6f8fd8f114d137587d","first_seen":"2025-12-24T22:39:16.382831Z","last_seen":"2026-06-06T23:43:56.120301Z","times_seen":55,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/494.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/494.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1388\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Apr 2016 09:13:34 GMT\r\netag: \"a36181174092d11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 19 Apr 2026 18:44:01 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 106692\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=TkbZYIm2PkaTNM_WooGdXxcJlu7DoaqtMFOROngKVoU-1774138934.2406683-1.0.1.1-Ng8hkWNx4107Ac5fSwZfOn6bNB7pu6fcJLRNSqX3VxpOG6ze9tUHSUdapDLtjVNAMfvFtlXzAJ1stGQgIT3FQrKtZVEg2OreX2MwCzfMTYW88kX_u1zW0X.HKGs7Zs1Z; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jW1UQmoNzFIOYymBarN17JxCANB4UKb9M12k%2FOJTnXDzT8h5OQHQ1tvByVBteERQqJK%2BUV5LvA%2FWPsN5aiJatXvEtYcqaJoIycAr3%2BBqizHYuNKVnl5r0N8%2Fz%2FE%3D\"}]}\r\ncf-ray: 9e010a730e1f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"55d1f45c2066a00e1376436fa8962d1a","sha1":"145d4415d252571366fafaa544bd9feaeb2cdeec","sha256":"4e71167929caa49b9d19205a27b4e8e420fbf5bc9010c1aa984856f744941708","sha512":"3bbb9c3fabec07000d444d82baddb4b92cec81c5048836c22814795936e874a6b3bb5bd8a9216bbff29d0fa30f5448f4b8cd635e698a2e914712e9283ad289e0","ssdeep":"","tlshash":"45210be49746ca189e4a0e7d66487151defb652f24d8f544e170b09316197d82181ec3","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-05-16T01:11:24.668397Z","times_seen":302,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:09.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"30:09:A8:2B:50:A3:5C:0E:2F:11:01:80:FC:9D:20:3D:1E:0E:65:96","sha256":"A4:2D:7A:76:57:2B:43:3A:8F:A0:D3:F3:1E:A4:E0:04:33:BD:AD:1F:12:67:F2:9C:D8:4B:7D:42:6A:6A:FA:35"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 22 Mar 2026 00:22:09 GMT\r\ncontent-security-policy: script-src 'nonce-vF_ZPu0IO2_a8IRPZjDsyQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95869,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47124)","md5":"505ddb48273405ca54d84870ebbf6bb4","sha1":"afe07521495fa2f91c079f30f4fd2fff86272ad4","sha256":"015e078328f989caf17b5f15e74ad07a55197d02a84b0d8bd638b92c595a43c8","sha512":"235190c47cbcf49555e48227ee3bef6d3439ea6e4273e1d88b6e833104523267d5de991a17284be9a6fa1549a4321108f412f8cfb11f560a2e1cb71adca53e7f","ssdeep":"1536:y+kb+Q3fCnu9Hy7ugIHUk5ea6Lqy8vfo9CuRvU007OsjYLp9MxhFIPZ+P:y+kbvYMUk8IOF8FIPg","tlshash":"5093ae1291031096dfe79ea117c97f78e13e9152314240ec27fe56879eead97a3a82cc","first_seen":"2026-03-22T00:23:19.302475Z","last_seen":"2026-03-22T00:23:19.302475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_dd011454bca0ee68d12e80f496a94ffc.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_dd011454bca0ee68d12e80f496a94ffc.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 171928\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 12:09:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69bbe767-29f98\"\r\nexpires: Sat, 28 Mar 2026 14:44:35 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34657\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=COzNz9WFEA.XOUaW3QsTGZKHOqAk7QaNfFAAX7iOUoQ-1774138932.4445164-1.0.1.1-E1UEZ5Dq2mTXx4_JOJYP1agkJDtIDel5IEdTd.MTsxopJacynksqSMMnRIZIK_q3GB2AX7uwqyDhGaALtgIVKVW0Q7mIgrGbpczggHS7PB7pb4YvlNpwPRuJiXj4odGK; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzNfF11fdCuj9aV15VJJY8wY9q8Iu%2Fbnai%2BLHv7FhclgpKysiol0r4TDSEGY1sEdI3bHjzOJiLRcsKZUjyReDMX29pHmK1huOxEUvLp4OXNzNu%2BjVw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a66999ca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"784f97d6e0b3fd0c15c2160a8f7f45c1","sha1":"c99b2b391da6c2eaea9dcb23e6f7f232ae655847","sha256":"660631a08d704f41dfd2b176b70ed253d6f72fb2982915701e1fb024769b4d4f","sha512":"951f825e7014fc70b7d22618022c74de6ad2134db53f02e9f0105a3435816089d6b8e3319dd788007f765e94a59238d93174cb104e9d2f811196cb9638a3eb3f","ssdeep":"3072:JlBEdgLJC/1CCOK4BTLQHdfX1LwF4/5zCs4sRpI8L+O7+pnU:X5Jk1CnBHefX1LwaRLFRt6O7+5U","tlshash":"9cf323a4410b1e3b6e1bba0003b87bb42bb376758e9ae6c305b1d4559c42177edf887c","first_seen":"2026-03-21T17:26:39.384005Z","last_seen":"2026-03-22T00:40:18.211413Z","times_seen":4,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":435,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2472\r\ncf-ray: 9e010a6c7a7bc759-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfSFghIByqO-qpSeiAGASfCVErfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=17+5 c=0+4 v=2025.5.1 l=2472 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9bbc32ce28fd80253987f2e1f0be287","sha1":"ac50a6c9aaaa9a3fd32f610e9858fecee25be6dc","sha256":"9b9632ed8ef4f6d25483053b956d22184ee488efd3f8c22e0ef2626b974475cd","sha512":"5863d7231d17d3edf58896ef5332bb631d9a5c27d06fb934be7653a6847b8918e92ccb66090e97c8b96f5bd51b3c9ae112d2c4eb9407cfe8f617da98ea3d3dd0","ssdeep":"","tlshash":"f8513b2e28bac5e8bedcb4ce2f90883a3283b7511ad4c45552d80854e35fb41a1db0d8","first_seen":"2025-03-01T08:57:15.902828Z","last_seen":"2026-06-12T21:43:30.158152Z","times_seen":2675,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/388.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/388.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/459.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/459.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1536\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Jul 2023 07:42:28 GMT\r\netag: \"87e5d695efabd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 13:50:10 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 37923\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ias9icufW1eOO_.EUgQoCKBdFwE9MxBs30ybp4ekeog-1774138934.238049-1.0.1.1-dD628YHuYTIDywbrznZDXRmk7QrSoogxWtPjAhYG7.m298.Iud3NwgdNWyvuIvGMkwkpGX99.qSUh9Yp78DM4Ur72ZezCRal2bg2h20tdJuviZBgmnje9AMcz5I4u2BG; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FdfyxClBVNU6VcnIbQCsuVGdQ7m0Fy1Wu4Nhx%2F4g62HRyODKWwgCHaL3%2FWqL79oRb4Y%2F%2Bue6iyXsBIhmNaMbYcNQTB%2FCL%2F8xIREEaGsmSnfLRZ5xdS6nqApYPmQ%3D\"}]}\r\ncf-ray: 9e010a72fe1a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c170eee63d41ac7ab51493f7390ca364","sha1":"8fa7adeb23d679469788e787637d020190ca4e57","sha256":"f541b4b97b1604da29a2632ddbd3a3008b0794397bb0937f94078414d04965a7","sha512":"498854019e89b4120a56cadb29b9a77f138286bf18c3869db0c0fcd0afea62949a6334bd0cbc939f7fbe4878147b49e400b8e591307762e58435eedd80971ebf","ssdeep":"","tlshash":"5a31da157e6e387cd21a41b2183254875819c37b07e9159de715cf2ed9428ac40f8bd3","first_seen":"2023-10-14T20:01:15Z","last_seen":"2026-05-10T14:37:17.363826Z","times_seen":242,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/777.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/777.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 994\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:48:25 GMT\r\netag: \"709718d1715ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=uc0bLWH7Ty4heDAtB3LmpuITBEJYS8_dt3zAiXiWxWI-1774138934.277987-1.0.1.1-4oYtMuRcNv.rejNPdy4Nx3rv8lFjYkf5FaBAFW9cqZly1GY91DIoWK56ywqy9GSqlarQ9bbyLB2rEvhLi_eWkCEtR4D12v.3OOSOIsTIspmEn9RqKV6vsIukdcrFXCIK; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xj31ErMfkdM5rGUsyysBYmjsw5LtITSNNg8tWnBt3VRaXMicc7WG2n4Sc7zFWVjc%2BMqollgA0cjlZ9wPwUWtJGyRpO7dH9GpF75SfLj5LFx65%2FbFayAauZbN1A4%3D\"}]}\r\ncf-ray: 9e010a733f21120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ed5c59265b9af4666679139212ebc3a1","sha1":"9b450d2ceee61ab652a3ce5b04b242bcd8397451","sha256":"c285e946da89534b88859fc27960d4305a721dddbef6fdde055698e159e4768b","sha512":"9cd86a8fcdbae07e193c98131e1e4a79ff8d6077c0c900d47c7e44e03860a8bfbbae11ca50b6f2886ec6c6b5050016ad959c52f85b5fe82fb2b2d6c72f878953","ssdeep":"","tlshash":"1211a8f29245b51bb60ba7e473b0a7e5e94b0379943bad0832159854c649d3c5540bb0","first_seen":"2024-08-19T19:02:25.979591Z","last_seen":"2026-06-03T19:17:53.318534Z","times_seen":84,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:06.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 177\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":177,"data":"{\"p\":\"69bea1f2efc5d11c3692a406\",\"w\":\"1jk8ah7la\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://galabet116o.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"XksA0v02MPhkymiWn5yP-\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-hbbc\r\naccess-control-allow-origin: https://galabet116o.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 22 Mar 2026 00:22:06 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9e010a4288f1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1035,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3f0bbf837547cff88e81c72c977f8ffa","sha1":"d0686c49194cbf9aabdaf3174b4e842ddea86f40","sha256":"6f4a30e5b42c61a686f861ecbf2c16b267ac17a10371f10e0a99445e9ae28aff","sha512":"b2d8403b679bed13291a20346070960d9866dabace7231de9477761fd58fc26cde811b630c0ec020f4a9f678b3217630cf0bf682cbb6f3133ecfc208c256ef41","ssdeep":"","tlshash":"941139011f893f2b2957b65549467c4405cde7b1646e153cc0d29d84259527c3a47595","first_seen":"2026-03-22T00:23:19.305323Z","last_seen":"2026-03-22T00:23:19.305323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/immortal-db@1.1.0/dist/immortal-db.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19803\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.1.0\r\nx-jsd-version-type: version\r\netag: W/\"ee25-pMHxoJFNs7/Bok84dZEhK2Ol9UM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220067-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2774421\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXhXvRd0OVSo4noAYQ6f5bcPJoTocWCAf4jFgHU6NPt5hboZd7M8pUCpXuNdSv62tZ6Z0RcLryEJ%2FRS6um0AGdbGPXHOFI8A2lEwUxQ6zw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e010a6f7f5c35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43474)","md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-06-13T16:30:41.608267Z","times_seen":397,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":6,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/X50Wheel.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/X50Wheel.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=cC4RqIskS0QmwygxVYW8O331UHJLSCv_Ri2.G9ZiD1Y-1774138931.4018753-1.0.1.1-IHNNd9w6X634.jp3kUk6I5gSwfbj3M0LU2kV6N9eS96nz4RZB481MV7Y.Y02eWgHTStEkzTn8PYRohq2xe31X8ZeApeyL3rV5HLRrmLMv6XUrK4ZjJXf8qcvQSJrPbe0; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFdOje2PDT7w4r20%2FVpKF8a99fJ6ajjw5I4XVmM7QI3QjTd3tmu3LFCUHyRW493Ubd4otOs%2BQ0%2B7tS6fCplHzBPDv36rBjDdZIv1zj4Ib3HE6FTatg%3D%3D\"}]}\r\netag: W/\"686270a1-65a\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eece71525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6a4e68d64ae400253c8553f277334db0","sha1":"9f4421a8ee6dbd94b15c62098a2808e7a9df443a","sha256":"c7d0844a8e2c9ee547a4b9c4927823c95fca71407aab9cfa85bc1175c01fc1e8","sha512":"3472f7072defa5f4f70e595969443c4310d2f86be210449dbebb88defac139a9bd68503f7cefce592b93b10f0910846e815b72ea960c2809326f390e1c0566cc","ssdeep":"","tlshash":"ba3122f5fff1ceb64c9413bf3a148ea82595c02d8e618b58c83a4d98215383c9f502aa","first_seen":"2025-07-09T12:38:57.780257Z","last_seen":"2026-06-11T14:30:13.373254Z","times_seen":165,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/TvGames.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/TvGames.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=WHnhwRzMnt9o9yst8BTRWQjj3PMq3FpPAEqVb720uPQ-1774138931.3911335-1.0.1.1-2hFha7CKzUFfYIm2EJdLqi2qI96yZk7AfStmWn635dcxLKLLgD5Ax1H_nerMP3PkCzjABRTxsrUhnXKl9NW8mm6J7R_jsO9YQslwNu0jGiLGOcHONI5mpD3uO3dRovpb; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQL5TFnt4%2BIjMQMi11k%2BfeXZwCuAJRcOx5w9fdqyQdbWA7aevChnxT0HpBLhtCxgG7ukMjyJhijG5EObqUvmiF%2BbW9m6UvDHVoP%2FTiOSD3VxwzYRJg%3D%3D\"}]}\r\netag: W/\"686270a7-c81\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eed071525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8cb4d739571507bd6cd3b25a15163537","sha1":"f8061ea6ba5d599b463f5f146b407b0f6fbe4bfe","sha256":"3b2f15bcef3e58ac040feea4d073d42f18e48bb6f399c4f9f89845931f87085c","sha512":"38862ca5d9bb144dfa4b9c0568f05439e788848d45f8891fe508570322d34200ecb0e3f70dd9f1e8ae5659ae3333fe154d439e797c556ee94fbf88f47ddc3cb3","ssdeep":"","tlshash":"41619c87ff3089e04a7c5f99af6840d76689c05dcf731118b23c643e5af7d5884ac9a9","first_seen":"2025-07-08T10:50:27.694177Z","last_seen":"2026-06-13T16:03:38.79732Z","times_seen":504,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/games.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/games.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 30 Jun 2025 11:09:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\netag: W/\"6862707f-525\"\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=Cq1pefcRMZK90M6m.l0wrqkRJiabO8ea2XmgmL4QbbA-1774138931.875516-1.0.1.1-S5amdYisYeoaMDIzzm2q5Jfd_aWGPhKpCuqTKMKs.2xgWCBIoLzEhZ8x0Spq2_g5y_bGtQ9m6XkjMoNWQrSBwa8sIMi6Clj8eciLSg6tvOH.yQnA3W462zvdxfLR9_qp; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMscbckg0mWnK89dvVTaenP5SPwJmr%2BGf6RiFVfHpeEMYLJcjNzglC4Cc7WsZaAw8mqSULJmfo55QX9L0Z6GJl%2FmQzbLwEW1W1zbGPK3Kz%2BEemdZOA%3D%3D\"}]}\r\ncf-ray: 9e010a62e8eaa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1124c704ce353b78a51dd2190edbf761","sha1":"969751af8092f4dfa4450def11dc616eff99a8e4","sha256":"02b58d0aaacddd78f61fcc4a92e72d8526294443ec8e695fe41a763a24d873b7","sha512":"62371f1a27dc5a9f43dc9d738c81641e16ad577f02a50973cd1515f41053160ac5286128dc60ba13ce57271eb462d1f258f830125048ecaad0944f9f5153e39c","ssdeep":"","tlshash":"fe21e14c573150fcfd4fb3e9a32e6b787449f2156823c878c05e45cc268aa4b64dc861","first_seen":"2025-08-01T03:40:47.562391Z","last_seen":"2026-06-13T16:03:38.877448Z","times_seen":1060,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/497.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/497.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1602\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Apr 2024 07:05:04 GMT\r\netag: \"225e0e6de96da1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=gV7.Q6agg4fW8l2p1bFbm5xbVUIB_Tr3N.4LLfdesi4-1774138934.2206352-1.0.1.1-1mPBcugX3e6XozGzvPpduWMJCW1cDpF_2xKmuyO15fZc556WGaMmQva_Y6654ukjMOy5DGYqw3RKfQpn5PNzjKmwsYITY65GEEkAHwEQq2iGCOx1i2aOz9LbgA1vf5WN; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8c0k7cbyS995H86pq%2FZkwNcXI8%2BmrPD1xJe1RAIRfLr%2FoY5Kuu6aAinYt5KjnUYljLna2bgmnYZYUSc0YGa5tzhwk1DL%2BCZrsCvQYKhVpzXjZWpA2G9L27pkO8%3D\"}]}\r\ncf-ray: 9e010a72ddac120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ad9ce33648f5ee729704f974697dde27","sha1":"f35c4de130e98caa3644519973c3acb3a999717a","sha256":"1b7e2c9b977b4a9f9eba5173d04ac3bf7f02e1255755faadf8d4b34cee74cba9","sha512":"25e91633e20cd97e8a468310801d1d3681fd35ade9ed2ae16186ac23b520c9f2bceae06ed2ba4c72facac0f36253a6a8ba2e2cc66bacda61cf0abc3980462b1e","ssdeep":"","tlshash":"3b313a03f704f09ca520381ab2d2f93046040a7a96db6f873efcc43c08f10588a83d99","first_seen":"2024-05-03T07:44:22Z","last_seen":"2026-05-23T17:36:46.455948Z","times_seen":432,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/69bea1f2efc5d11c3692a406/1jk8ah7la","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:03.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /69bea1f2efc5d11c3692a406/1jk8ah7la HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:04 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e010a32dc1f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"7e8e6631b293049f55352b5e5492b4ba","sha1":"ee9be49eec7f43b089ac853978f0377a57ad5a2d","sha256":"2ec1cb58fd0928b64b3224ff49738c4532b6cd33520c3437e63c6c48092c5311","sha512":"3910b58cf5331520c72a2b38d1019c15ffa9b596e0f4147777552a8361ef2c8e34014ec0707e2bef3b13ec1bf6bc534dc8374efbf635d4a801dd573121d690e4","ssdeep":"","tlshash":"1d41eeea5b4f2c56b22410d90ebef90ef47721f749da5892870c085272657ad2f8de38","first_seen":"2026-03-22T00:23:19.308753Z","last_seen":"2026-03-22T00:40:17.989707Z","times_seen":2,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":156,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/usePriceChange-DGCuPhY8.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/usePriceChange-DGCuPhY8.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1d6\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=YH627l_Bo7UCfvB5M5xtvcqF3dsuQNyTJ4zcZ_y2p64-1774138931.807021-1.0.1.1-Uwz9dqg9j63ew2Auh4w.PkOQDiAkj0xYoQgn.aQlgJ2HYkIkTx6b18z6B7zsumcSFqVLTVuwKQ49Sf1kUTu9Nn7B.61d3hs8UrYJpmksZ1FakwxB1urL9nd7mzGqptRE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FE%2FM3rnEQa7dcjNtZih34uk3HPCXEjGniRY8eKmuKegNHabZ8ehWZTqeCkVmifmuz91xlZ8xzT%2FuaxHbCGlw5sggtOeDT7BKA3EH%2B6zHhSir6ss%3D\"}]}\r\ncf-ray: 9e010a61e8c5a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (469)","md5":"985c9befee4d6eba2e166d88af88e692","sha1":"613a85f6f6f82454339d05b495353d2a2d82b9b0","sha256":"4eebab780e6e5cacf96c52faf820d5e0e49b9d80b7aac3bcf1dfaeecd2c342e6","sha512":"87b7284f4b4786f6d426342c1285b6e7fc8b539c311551cb72f12da1169e5954b28d2644e22e4f62e7e05740663a80852ce88b3ef1fe8a8895b86f19d66a6c74","ssdeep":"","tlshash":"e2f05cbd24901823545f0cc4c26585571fd126d56bbdc31eb230cc2d37589af066ee6a","first_seen":"2026-03-21T17:26:39.72857Z","last_seen":"2026-03-22T00:40:18.012304Z","times_seen":4,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/fonts/default/RobotoBold.woff2?v=159","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=159 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-f250\"\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 110\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=CEeGbN89yxFhkCVILoc4YVEifN8YwrKWcT7agUrl4PY-1774138932.68994-1.0.1.1-R0HFcg1sAAq.LPqQbTYW6CONoh5HrGNw.QmDUCskawinM0RL3JEkM36BRlmTNtC24sFVvIo.Fj5FohbO38S64oAJuyCq9dPEa.YKmFsc_MW40kYT3TawqJ2NDaLpAgKf; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8GSUH9dftupbrTz11RvsB6Trxpqkd8QkGxBD%2BEcl8NHTH4afyed1NJRYx5DWzAucl0EguKgvzDdBohFr12fFmXIeQql2QlGthu1Mnq%2BM9mPb3yI%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a67fa01a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-06-08T13:19:39.297237Z","times_seen":2663,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/388.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/388.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1167\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 10:41:05 GMT\r\netag: \"37e12c11d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 09:03:28 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 227925\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=8wlNlStNKM0Qt2Kh6zouAwj8R_PNlQDBUNjyCTdo32A-1774138934.2355688-1.0.1.1-5VRWnKVh7g5nH9XaBFXf49ph8ydNnbHW3sVzGEVrQbYl6jcw5wN8j3Rnp74u7Uk3C2uwcrKpi2Saz9ayvq40NFad7ailhuIMd8vThj230BR4LrMssn5nBQd56eK.jPvM; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDk8T0Y%2BVgmfBRJv8m4mSN9Od9np4RnwdXexQzG7yMdzm1CtzY0hN8pO1nNEvmxCPQbMZMrZSSNWGNnxP4DegnQZcPMCGYbhKaqTxeY%2FMUhYNjo5yIXZH2Wmzyg%3D\"}]}\r\ncf-ray: 9e010a72fe08120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"4dede86bd6f200b8dd86a70867ea889e","sha1":"06874c698e44e9c4daed9592ff11dc32b2828d51","sha256":"9a06c39bafe9ae19741d470f8008a0572bc72983272fa2bd9cba7fd7a3d2cffa","sha512":"39f1f0aead5c929af1c580e156cd44b92ed409e0e6960d976a2d27797f7d512828b6e269c5e5200cfbe7cfe4da492f9e3e00eb4eaa1f5971b662a826e9868bc4","ssdeep":"","tlshash":"bc2196abb50e9a2ada37451cb47730a4a563338e641ce3c4bf7a512021acd0b8563731","first_seen":"2023-05-28T18:20:13Z","last_seen":"2026-05-22T06:52:51.90158Z","times_seen":322,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/gameDataProcessing-Ks6c2N4W.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/gameDataProcessing-Ks6c2N4W.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-436a\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=mBr_CL7zVJuOGDEn3D7Kl5EOBpEKCzoDLozu3XTT894-1774138932.597008-1.0.1.1-vyzGGscdB3uq3sMLygW0ey5bSklLujtQVHtf9Xmi8rwfPrMnFH1nasj78HoU4FSLLhU4zPGVq6yOnxheNP455BWd7R9As_YbRWgw7jS85VCrzay_EfiW3ki2HA5LpENe; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yl3GjShiKn7YoCos4fbaousNcsP6q%2B2B9IWb7RTWGzfOuT1AuzAluBkjN%2BnIkEehfF02%2FEIxJtGbrWjJG5O8o6R40FSpWu96SxO%2Fui2%2FHKpUan8%3D\"}]}\r\ncf-ray: 9e010a6779cea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17258,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (17257)","md5":"562c976b249b698e612c65de5413894a","sha1":"97d5db7493db7fecba8fb8a6bd98788914477ce3","sha256":"aff1e7c461a2b4748712c13290cffd9c9cb82c20a5a3ca0cb69daf518b4259ad","sha512":"964c4854f9ae661cd8b9d22989cd6f6cef23c5ab7d06878f74436c982f64d30bce6680eb383af7636984a041791658ef520bc9e8f871c182b9231d24fbc76c7f","ssdeep":"384:7wphrrZxhxlVz12awqhvTXDsB4Pzenac0aw5K4A1nV:7CptXDe8QiAX1nV","tlshash":"fd72750b8a024c12c97e4639c0aa15f1b9781b32e8b8cdd51a555c7afb5fa5b31f173c","first_seen":"2026-03-21T17:26:39.382141Z","last_seen":"2026-03-22T00:40:18.016304Z","times_seen":4,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":321,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index.6hr6LgI6.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index.6hr6LgI6.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=weXOFwX2Dbh2tFNP8wFCBPRqLF4iFFGK.r9mqpqHwhw-1774138932.6930246-1.0.1.1-SDUK4V7sFaeiahDEWgr3hESHxrSIxgfQ_Wz02yGnDuxxZvkYRkASvxHq57ljrbakge3xp8QxycOVPVgTLAlTVDbm15cRUB2laIIVmQ3KtgF7WrPQDkq7weMFafUuTkSm; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YzfblFQ7rovN9yRo9wdTxjOFwSnC92bWZYat6d385uRoHYQg5USK8c8I00YGSAefFCq6p5Bxvd2fAz1daCT0tYjFaHay7vkPCIp85%2B8OffIg%2Bk8%3D\"}]}\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-4e4\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6799dca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1251)","md5":"d03ad7d634db584e4aed770123954f9b","sha1":"eacfeacdafdf8738f325cba4cd9352bad2829a4d","sha256":"7dc01c1d9e89862143b3c4cc81a2255e63cdb8412bf7421061819919fc2c6bf5","sha512":"e4641ddc5f100aec535f0f87f4b4cf617ff4fe450de4ed993b3681bec62023646689f9f12edc7b03c4dbf21e0b98081e4e8dd5b0b0a13970fd25946f953bde37","ssdeep":"","tlshash":"f0218ad7190b14feba73a6bf454346ebe5238c5bce63114ab6c21729c4827a2422245c","first_seen":"2025-10-29T09:08:38.623149Z","last_seen":"2026-06-13T16:30:41.640385Z","times_seen":1262,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FavoriteGamesContent-c3zcF83Q.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-c3zcF83Q.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-ae1\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=399Vj0zVzHZFNsah9_IKd6Om2q7o.3SsM7lk85wH304-1774138932.6701946-1.0.1.1-4EHZe8nw9TO_sEFiVS2V9YMBBMfxC6WNxgKBbRU6xNwfNyf1QyN9sKEj412s5TE6v_qDkhaJXyxT3pUri_uaKRIqSwm8GQs3DBG9xG24ZcMuRYihmufjReKlL5HV1fWN; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRyzNCFG%2FCUeuTAja3p4tZOZJfIMF7CpZHImRfTPVQtRiNnAA3MqkcW45U9fGysSv4FGLNt3FRATcFAMnXPg9ZCiCIDjO73EaycgTToE%2BUzmLvE%3D\"}]}\r\ncf-ray: 9e010a67e9fba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2785,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1707)","md5":"e29f6fd42cc0e7d08454249b8d89109e","sha1":"89670d6405e765f3e4c1cd7c85802207a0cdf2c5","sha256":"c7f4ea3c2548373b3ba229583feff8cb4210b7a73bca5591238e0326ecb6a6da","sha512":"c89f9878f8930ee2233e1a29e1fc7e09d538d9d9fdefb58d62c1774716de04c01ba6226c2b9f0ad60d0ca89839b107131872c8bb6a0fc6e2caa8442ce9b6ecdb","ssdeep":"","tlshash":"0051840050415ff9bf8e9eea6f2bd1941979034c6686c17da8784f3d2429a41713bff9","first_seen":"2026-03-21T17:26:39.612494Z","last_seen":"2026-03-22T00:40:17.793637Z","times_seen":4,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1337software.com/chatlar/84503772f8e0bb632ed456a62768855749bf973a5aa1e31ac1f74231a7e8416e_638-chat.js?v=1774138922.657","fqdn":"1337software.com","domain":"1337software.com","tld":"com"},"ip":{"addr":"104.21.18.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:02.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1337software.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 21:22:41 GMT","end":"Sun, 26 Apr 2026 22:21:17 GMT"},"fingerprint":{"sha1":"5F:95:55:BA:76:9C:CD:43:A3:6F:A4:3E:A5:80:66:4D:D2:28:44:64","sha256":"F5:15:94:C3:78:66:6C:E3:C4:E5:0E:41:60:9A:8A:70:CD:D0:14:3F:44:71:71:C9:21:DE:EB:12:78:64:02:75"}}},"request":{"raw":"GET /chatlar/84503772f8e0bb632ed456a62768855749bf973a5aa1e31ac1f74231a7e8416e_638-chat.js?v=1774138922.657 HTTP/1.1\r\nHost: 1337software.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:03 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=172800\r\nexpires: Tue, 24 Mar 2026 00:22:02 GMT\r\nlast-modified: Sat, 21 Mar 2026 14:26:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UkjhHommQr0f5QfwLhSkxrMkaO%2BAMc57lDjiMPkULPGN19J7hoL9ShO73y1%2BCSNd4j1ke0I6K6PJKER4wCd5PYAwjrxQoQhnhfB1SG1Sm1k%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e010a2c7eb623eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"a4d30ca961e198316b4b800307d3cb0d","sha1":"c20765aaeac3164a526318f9ffb3fa2e970df1af","sha256":"77debc53164bfe9c5e4203c9036c3faf7fd875ce295153b9a9ae5b412a57b60a","sha512":"0148a9c667c8f94c5016db0630dc76b830c8bc77da717dc610ae8a4a776da2403932afa0d279f54f96fc5cf5cd4117b422b7d9347401e48f8260bb582e6e6aef","ssdeep":"","tlshash":"c8c08c83a7623d00480911e1c7c26dccf1df9f7cbc9a21c129160c6001c78ea3fd1c19","first_seen":"2026-03-22T00:23:19.311237Z","last_seen":"2026-03-22T00:40:18.070767Z","times_seen":2,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":77,"dns":63,"connect":4,"send":0,"wait":306,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b057293b718ae7060a9acc593ff83f67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e010a3b983c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-21T03:41:36.073067Z","times_seen":12668,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/InformativeWidget-DPp1w1VJ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/InformativeWidget-DPp1w1VJ.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-43f\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=jcLg7lkxCJRkNs5.U6wXQYcUt5wVDmps3XFTs4f8ezA-1774138931.5958693-1.0.1.1-nB0M60YEbSf.KeGYzyWbcTASwrIvHPSMWW1J1v1qjncvYsS4ZP7LD0BZJTI6gldGcMn_.wqVpIByyBqmPqieMXMFzOnu9iQihDTrKdnSabXSBoJBMyDk.U_V3SvxWFfZ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QD9pto4GscBggDuGa26Is8evilY%2FbVPf79TKCK57WzoP6p4HkndNh8MGz4aCSvzySTrQbVOlhCs%2B33SEg4rj4Cw30G0g04lUEoaLKY6zue0aIqM%3D\"}]}\r\ncf-ray: 9e010a60a875a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1087,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1086)","md5":"0ac4a8b46bc7ec9221ede066013b02dd","sha1":"0e4dff7ab9f997e52c674c55d33eac8bab2a4c93","sha256":"2aa3b96dba14088b2890089781fbced38f7874ade1a0797b3d7aa6992b8e5827","sha512":"323c5f306e6c5ea9d47a2243d3cb77f379e0cf43ffb3ae53ce46493a3df5d01a1266a4b023ada516e1b93b4405f86c94e4fbfda17ebe5f7ef1c0222f6c53167b","ssdeep":"","tlshash":"c2114646f594d57db0394dc44257809169312de4df7dd4ed98617408983010776dbbec","first_seen":"2026-03-21T17:26:39.371175Z","last_seen":"2026-03-22T00:40:18.075938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/GamesOfTheWeek.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/GamesOfTheWeek.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 30 Jun 2025 11:09:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\netag: W/\"68627086-be0\"\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=4622hED5nRvviTzswJEE5QujEwYKDRCSgRhKEMMIYUQ-1774138931.8946633-1.0.1.1-0dJqGCBMXTTEEnA2vntF8tHIucplK2dixZ0Ur.bjKWy6yzAFRgvNuWxsNq1PQCXEncC7QglQHeGSS0P96ewjh4FYgK113dpaAZT0LC68mvhnCcl66fekemQkeTH0lfUO; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0QPYhE081PSi9TK648uDTUxnjX9x9zAh5rRwVEWAk2lG19b%2FIlgaGcrzW3fW8Ej2Y7eGIBZZl%2FYktmqFN%2BPyH%2FCoYHhpQdBND4ZI6XBfyOW%2FNwRlTQ%3D%3D\"}]}\r\ncf-ray: 9e010a6328f4a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd48bcac13b7af9a43338fa39450069c","sha1":"b39e0dce82eec16651566913e7d8a1ae26ee25d8","sha256":"e67476d135f1d3e566d62c017b8a4afa7b3013dc29540a85de3c9f071a11812a","sha512":"39c26cb74b8bea9fd071edc07b5fe1ef144747ebd23593b409aeb8f0e6894daf00a946805f222e2dca66dae48baa4adab0196a4ef71720fd109aeba8f11e1026","ssdeep":"","tlshash":"6951b0d8c5254afa1bcc335e6322542b0cc92fd6f7a35cd8b27c85985b13d062a7e883","first_seen":"2026-02-24T14:23:51.265611Z","last_seen":"2026-05-19T18:11:41.282935Z","times_seen":52,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/content/images/casino/icon3/2b7d2ec7827b69264f4ad2be960537e6_casinoGameIcon3.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /content/images/casino/icon3/2b7d2ec7827b69264f4ad2be960537e6_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40948\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 05 Feb 2026 12:56:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69849388-9ff4\"\r\nexpires: Sat, 28 Mar 2026 14:46:41 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34532\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=wbOHnz7M00AlJGH2QgCci80KwFpS3HQm4htKVdE17P8-1774138933.9774652-1.0.1.1-Bg1ixvjmtHl5CvckOpQ2WAN26oqFBcT5dJ4FC28tVzKOM0xT136cbX5n6qA0HYsiL4MGErsV_NRM31Hqun8DaHqb1hARM1Cgof9knaqkEZUv2O_4K9Lh_zvHlHFu6hmY; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqj0jU3x3L5KSVowCR0tBdzDz4rzi6KOmsSFeVVNrQWT72ZElewFHmSbliWFjnQ8idbx22bu9CgM05CP1UoInOEzJxxbgzxq36TIAxvZ5PNd1erVZw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6ffba0a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":40948,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bed031ef92cc7a33f5da5668ae5165a4","sha1":"07839d1677f3749ca6bb6694da1d22e15b01d0ce","sha256":"d190b86db434a9da8dd6fb4476bf71af1633fa825c371943c57954198b02fcca","sha512":"b8fd671613862a4e1b2c275e98bf24b28040cbfd9066702dde3b9e9d81d54a6ce6bc32cafa8477802265afbb729c7aa6329e8454a8ac9a355f269e26e5fa0819","ssdeep":"768:j0pbubXV1W6yszkf6YM5Fi25E41XSPulD9pSWoKPuU599Ww743R1hdcr+:jEcXVWswf6Y0i25T1XuIHSWoKmU599WH","tlshash":"e803f1b1c0a2ab54cfd7a285821f7c5d73b267cbec24535625f8b60480a4535f2f7b29","first_seen":"2026-03-21T23:21:16.961086Z","last_seen":"2026-04-29T13:47:02.903422Z","times_seen":9,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/1402.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/1402.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1143\r\nserver: cloudflare\r\nlast-modified: Fri, 01 Jun 2018 13:30:22 GMT\r\netag: \"7b1246b1acf9d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 191488\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=DIU7R1V0PlK8Y3wBTxSFCZPTZ2xs_I0mJNvNql6u91M-1774138934.247524-1.0.1.1-5g0dqcqmuoJMrPgeKgVPfrJxiE850dhgEc9FqSze5T4xbWyAwxYmTpy02u1_OOrKKv_sHIGilKPGwZtZqmY.2bQokmXrB6dUDq3klXC7z_zhpaREjFmKLEbRHaY433o_; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R22ML5yXc5f6bNcyTR314DC3MhZFjuZSS5lJ6N%2BBu8PiXXNqhUP%2BIbxuWKnZwBfcYYRIVf8EtfpIUUf7R0S3FXM9iPFBuFRuNfB4EUx921sQGQlNIU0DIRCxy78%3D\"}]}\r\ncf-ray: 9e010a730e50120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f1a8d6d098d7eac2131d812b97ec8fdb","sha1":"638eb56089752f1bb7801bf7a2e897c7dbc34a88","sha256":"47ab1b28d8ec34148d10a594557749fc2afed5d958bfd21df08b63efd721047d","sha512":"2d25af93bcca2d8d3a03879ff9f5bf899dee1d8bf656fa7cc3f93b684ccc76fdb12e49493fc22bf1443cb02b55e84fea7fc5c2755875ba3c40f7bb06e6c66eb5","ssdeep":"","tlshash":"4121c6867e5f7a3fc5da9c0cd759619982a1963922785c417e38822b7a60fe31d0ba20","first_seen":"2024-08-20T11:24:22.444497Z","last_seen":"2026-05-16T19:49:16.65013Z","times_seen":40,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/menus/footer_menu_751_tur.json","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /menus/footer_menu_751_tur.json HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:10 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:10 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-2170\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Wqxe_uRs2Ca4BM0w1jnxzA5PnOlUkxvuXaWeXuJskKA-1774138930.5872762-1.0.1.1-4ZnPFRMe6UNRBci.Tz2UKTRtx.vCALNpZDEd7syJ1.S_OxYukZ1LG_m1ded46n.JXnrOirSYjxGVL2BVxilhmAoEBDlYJLwBhfbOx2WiixErcOW.OmAtG5D1EtMcbalb; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8HP5OJ5Smt5kms1OJQeEl1p9zyRE6%2F18EkvPXhRoiOSCXaoh%2BLvQhPApzHTQ4xjVWsP5p3UnazwY36g0lT8TxUSbiznLr2IK3szWKgtMSeDIaw%3D\"}]}\r\ncf-ray: 9e010a5a1f0ea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8560,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cb7c741a547fc4a891e36f03de2f52fb","sha1":"e589086845b554f59b1b11b2b498edd0f09d2c50","sha256":"e1f2743754b756e617ee3307f8ac72f50f94263f3009f9aa90aec03edac6be73","sha512":"2d3da210a4cece77d8c2c5a21e57119c60f5010e02e3e86a8e7d3b1df68174b55f59be99ed140bf5760974abf623b8eaa24d96f0808498dffaae7723bf944482","ssdeep":"192:XSk0zkRSkukOkWkEkRSk36kphkpGkTSkEAkMlkk73kKUkwHknu4kQSkvIkWbkCOY:XvTNrLz5Rvn8xTvewIYfQQvVdqO3y/XV","tlshash":"c7024612f00d5576e7087e00bcc7ad0b84ce609dac5d49519d4d8bcecbda5af8ac62eb","first_seen":"2025-12-24T22:39:16.150949Z","last_seen":"2026-05-14T23:49:57.318125Z","times_seen":57,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useNotificationsProvider-B6RWZkIU.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/useNotificationsProvider-B6RWZkIU.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-5c\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=CD.HUobSK_12r5OYUCFUsC6CdMwnGrpTTmVoBMc_nCg-1774138931.8173058-1.0.1.1-yuHlNecz2yp0wRZq7iP0K7gR6fFiUz4Ku51wdhaDOMXnjYkBode8ME7qET3wJkuQueNMRIdKdhEjpNUmd33zmHYoOMS0K8RZB0h4oY2okBxOS2D5vUgH4TcYfKEXTEzF; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lf0ewYN8jksnptF5TcVlgXD8%2FPBylYo2e4hVuRPcsUCSElzUN4tfq6PwrXNjHyXsbH7TSxYtVcvfM3aeFgKNjWVXof%2BR2271RgPZRLJSUzl7veM%3D\"}]}\r\ncf-ray: 9e010a61d8bda0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"6a107b604ba11023c433398a7069f684","sha1":"530390a2949705378fcb2a483d2706b3de06d63f","sha256":"3261bee16420406d05ab5271fe9918ae8c11452027b028fbddee83b242e8c5b0","sha512":"fbb4b371e140541e0af34872e340d31d851f73ddb1b6731fed79b3baabc34f36179628277717b3d6fe082d81f0e2940e4d4a551a1ae0e1d89f4937a0ec0c5dbc","ssdeep":"","tlshash":"5bb01213485053f1210108ec12264c290e30083d3381cab11030414811e40c5930e905","first_seen":"2026-03-21T17:26:39.536834Z","last_seen":"2026-03-22T00:40:17.926035Z","times_seen":4,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/sealassets/27b76643a8f032de92f30088bdfcc763-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-22T00:22:11.701Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /sealassets/27b76643a8f032de92f30088bdfcc763-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":76,"connect":1,"send":0,"wait":0,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useSportData-D5mIIwaP.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/useSportData-D5mIIwaP.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-6ea\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=DPcnT3AXk6bzpfArHBT9Teq.QXam7xTOH9eM0zdsRB8-1774138932.472525-1.0.1.1-ggE3A9TCTifo.9kxocTTLRIHh5Ef7A6Z4Gi_fk7VswAadh9428UkDvS6B1GZWeuYFq00iQFpNgCaYzKfbIgibuFpZUVO1lqe5jMBZZSB773mhsmRjQ0OkmKuTYhlBpvF; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FikxuurkIODWAUqYSjiJeDjeguVuEXx1m%2F1%2BSpOKUDhGI7GFY3nhPQhHrAUyMfNFiE9i0ObNCj8U%2BAa14wfuvkZPTUGTFzWOsE83lfRkXqgjbyc%3D\"}]}\r\ncf-ray: 9e010a66b9a1a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1769)","md5":"f7bc8fc6052d5a655061f7542db1202c","sha1":"aab80cd0d185ea5888d946784ec94f8eabca2227","sha256":"d61d6440417a3709d55589c4c2f270ad4bc8a5639a7d27a9c0cefaf90a5212e2","sha512":"f783b09da3370e101d9e384a486d58f3bfde3019d730eef3934a85e1118b581dda88ecbe89de383af7011cf602f7c77da49aa063faa46101b264cdff3a3f36eb","ssdeep":"","tlshash":"b131874cd074b070953944d5d1ad6e14e434191d3b32eed1e85c0a197b6368e027ed7f","first_seen":"2026-03-21T17:26:39.579526Z","last_seen":"2026-03-22T00:40:17.780877Z","times_seen":4,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet116o.com/api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZljW3RCeMsCp13hcoTd9iRt3qcp9UBxl8L26I9Yidt%2Br%2BdXhRRNZf13ze7N%2BjcgGnm5i4fMjSGGVvqMY06tt%2FSEH%2F5d0DUwOsHTMaj%2BcmR6bzmK7dro%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=93GEfSc.ZxXY8cXu4rmd2LbPO__X5cdoqcta3.iuC7I-1774138932.541802-1.0.1.1-u9D7maBjEuhOn3NSUKFrwEKeKlv83zFyr7ZygEjrX5dMtYKpfC_qB1reboAB68_GaVFn.p3yRLyNnRdyXHRqYgMJycOfsk4QlAtAuVHbNq3MSBeG41MIMRJwH106wV10; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6729b5a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":442,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31eebc3ad38a765daada564176791ab8","sha1":"4ca49baf4c7ac30b244682db5d5d21bd6f555767","sha256":"e7a880dfe8126f315ed8dfda559672fd8c4a74972a7a1b2fa252c02a415365ca","sha512":"801c4a6ae61106cd113c1c2bcc26da7f2a7282350347606961bd6396a5775e6dbf27ca75626f95cc30ae1887971248885746b4b6cd46db603a2e1aee45af4266","ssdeep":"","tlshash":"e7f0dc36972ec52467504290c04f383a185e028cde00ee6c999dc37084e8379a1220a9","first_seen":"2026-03-21T17:26:39.590565Z","last_seen":"2026-03-23T14:49:47.305223Z","times_seen":7,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/usePriceChange-DGCuPhY8.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/usePriceChange-DGCuPhY8.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1d6\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=0UowfiEx6wJlG1ghhExvv..8c.aWu7g4On4T3G3oCRo-1774138932.6211545-1.0.1.1-XBpgGnYLOcdPhVzt3M.XaKzCzQlR7CqUgd7meauOSvebPP3WVhx3IKMW1IENRH7LwQbxUFgPg6fxsScAhz0Rvkai6r9sWtUjQ0p3pZVza6QRm0GmsomMunyAwm6UG18U; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHjZ78r8d7l6lkLufo7oJ8%2B%2BT7dWAzpghN83bMmw9dFWyc478OfaKbwn5KUWnAuj%2F3c6YWHq8JPHM0fiKsvLBHerribnShoqDEPsol1op%2FQJCJU%3D\"}]}\r\ncf-ray: 9e010a6789d9a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (469)","md5":"985c9befee4d6eba2e166d88af88e692","sha1":"613a85f6f6f82454339d05b495353d2a2d82b9b0","sha256":"4eebab780e6e5cacf96c52faf820d5e0e49b9d80b7aac3bcf1dfaeecd2c342e6","sha512":"87b7284f4b4786f6d426342c1285b6e7fc8b539c311551cb72f12da1169e5954b28d2644e22e4f62e7e05740663a80852ce88b3ef1fe8a8895b86f19d66a6c74","ssdeep":"","tlshash":"e2f05cbd24901823545f0cc4c26585571fd126d56bbdc31eb230cc2d37589af066ee6a","first_seen":"2026-03-21T17:26:39.72857Z","last_seen":"2026-03-22T00:40:18.012304Z","times_seen":4,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato|Lilita+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css?family=Lato|Lilita+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 22 Mar 2026 00:22:12 GMT\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2f31f582a62929942285136edb852eb4","sha1":"ade05009e3f52242452d23f325d0d60eb2f4945d","sha256":"86d1d33f6f9e190954cb9cf8f930c7ce03e60bb102b64f2ce0baab352285acab","sha512":"2e4b5ff5cb64ede4c3e63e2477f156c55597e1c3ddd83d888fd96c66bf7cc6716dcf522fad19cdde2a4a564f530022feaff488500797d01f3673e52e295ddabd","ssdeep":"","tlshash":"6e31bf92097ba80497930dc212ce7d32ef1e62406845a825afff18dcfc67c699362b0d","first_seen":"2025-09-20T10:36:49.753015Z","last_seen":"2026-06-09T00:47:26.144702Z","times_seen":147,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":92,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/GameSuggestedEventsWidget-DZ6HUrEn.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-DZ6HUrEn.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-e8e\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Yx3mUOyNAUYMQHL9PD77qh3vyC4wlNfGiPWvnXHDkWw-1774138931.4092882-1.0.1.1-uoMKazDoanllIdpi3dIM7LwSXZ1UAAD.YdwD23uYYYhzBFoOXJ6lN38TZeLY18JdZEYFTxyT.FLLYmMDNd.tFq_anl1CEofP34UHk_GgfPbAzCEcYR_UFojI9eh.dVbI; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2F7d%2BRdFosYw1ByCdh9NfCfrKOGFckIsCsPGwEcbS3saGoE9pKaZo6eSbfKqa2pvGsuSZC0YQqnjNTwEOlXipKYwQq3qJpNHyisTvjEiZPdCE8c%3D\"}]}\r\ncf-ray: 9e010a5f3816a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3725)","md5":"ca5db02ec6d235cd64de2a6a474f33f6","sha1":"25b848c932d6face1ad43177f53b1d3032b0fcfa","sha256":"adcca01c8b00bd4e28badc2e707aaba8b035f40cc8d4ff239e7ae508dfb79349","sha512":"76bfdfcefe35441f326e410aaa2d4a801c423edab5c999cce894894adf9aad5eb6ac478426ab9ae2efcbfbc3e97a4f75744956a2b800c1072d9671e4b16c19e7","ssdeep":"","tlshash":"6c71d75ae010aa39a13745d82bef3119143632b8b94353c1b73fca7123e11916b5bbdf","first_seen":"2026-03-21T17:26:39.604297Z","last_seen":"2026-03-22T00:40:18.192831Z","times_seen":4,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/header.json?v=03/19/2026-17:16","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /header.json?v=03/19/2026-17:16 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:11 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-e1\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=F_vWtp9.1zckRBlsiBWBsFvTbCCEVvqi3L3VBrmKXC8-1774138931.1396408-1.0.1.1-D5oC3z.wTQ1rCTg3wPAKjB3l0I_PoXTNAtmv7j4BsV94Bhu7PNwYsTin3haMllJicdQk0KgAJZlJHspHczzk3O0WrIVwymlGsN6L9.tnhRDxsuDE5TwRb7oysvl3OMVx; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wzw6vBJZS9j85xzvUIRoNr4rJ3DCMBg9KgsbLs3Ba3Gh3AynVvrkI%2Fy4FqMN1QQLoDskdPF%2BgapiHpu%2FYIl4MoXpnPUHM2dhoMV20so3hBGN3wU%3D\"}]}\r\ncf-ray: 9e010a5e3fd2a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fbc119c5c8514e3587fdfa01f205866","sha1":"a396d7f127ee203b471f1a7e507184318e74163d","sha256":"10279aa2fbd66a0c0140d4b4cf9a39b0c9bd14b18bb35f1bd6eb26eab355b9d9","sha512":"9eef97111b2474b705b496860ecd29c7c591ddcb79887d755e5ea7bcf2d578a68bbecdc54ce4f11954f679ff2b8b5cf060da8cd4287a78a1fc3a92fdfc6125b7","ssdeep":"","tlshash":"cdd0a73aec10da7073a0c413c18067801140e514d644485c9cddea5a93dd7891180b67","first_seen":"2025-12-24T22:39:16.192168Z","last_seen":"2026-06-03T04:20:31.884146Z","times_seen":75,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/DataspotTracking-iQyfe7l_.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/DataspotTracking-iQyfe7l_.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1fe6\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=a1y9KsolYTo.fGGm7m60okkFJp3lmFapIDdHuVCFclQ-1774138931.7929716-1.0.1.1-1HoUMNlQvbvoAbmFbruRs8im100TYlWcTgIzkkAN_dEDxZs5QvR9OrOaqlTL.pdXbOZG_OOPBDlyPHgZz6qy1XVMxO1N63hKsSAE9myx6xmWloZWf_LomT4d8Gtb1dIe; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64oRUEb7yXE4RcSqp9fofKEivmgxE7h1AT8eHNYuxInmUmaNCJdoW85%2FTNJdyIbv%2BAwTF0TY0BpxKHKKboInMArrqYsQQ7jTYi%2FaYoZ%2F8GyYL%2BY%3D\"}]}\r\ncf-ray: 9e010a609869a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8166,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8165)","md5":"f1553761c57f3fe8977e11f9a5acbcb2","sha1":"0428d0e7de8fd59cd72a53c25c6d1646dbbbcd2d","sha256":"14ee5210761d6fceb87796096a7b97d4bf6dc77c671b081746ccd47d6b96c94b","sha512":"d31f722b3000e1fa4286ab76fd77cc4d84cce25893da33e8315bb220f0ba8103120a06a6577becd1654cf17895d99a128a4fd6fc3b4161f0a1ab8dd37dd4a805","ssdeep":"192:cEwDqXQcaXE/ucCOi1Kb0cHHnBxCHenNvuvXvqvxuhqVeDt8VZuS:TAqXQcaXE/QAxCHen5Q/0gh8k8juS","tlshash":"1bf1f455641e68bc7033c6ad0d5721a248387051e2329de076aacf5a9e3d9c28ff77cb","first_seen":"2026-03-21T17:26:39.500998Z","last_seen":"2026-03-22T00:40:17.814005Z","times_seen":4,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoGame-ltYKuqgq.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/CasinoGame-ltYKuqgq.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-16ee\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=eceFx82ab6a_5I2UuUNHem92xZ59a3uEewvdj7U7fO8-1774138931.821905-1.0.1.1-QjZjXROV022hODOoSAddK9vLZzmtUjUgli5YGuMn1WDVKXEmWmLXqVkiY1lc76TESqGMnGsO9aZ64vdNqhR2.AWjQ3.aeQGCGE3vaerD2fSb20pY1y9XLiBn0XnyHlti; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6N3BDcek0da56sUldDKhlX7Mm0vSbGwpyPadpoT%2BymIePataTpo6k87Jl%2FYMiBwlfMCCF3TUOYLHYaPfjbvIoPCWUyzqH4N7ygxQomOrHN6IVV8%3D\"}]}\r\ncf-ray: 9e010a61f8cca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5595)","md5":"9e451ef9a803c3f7b894af280148f56f","sha1":"8e10a59fadeecc945cd891c09f4b35cfcb109ed7","sha256":"ccfacd7e71cef622fd86d8549b91f69eef2eb67ba6604f9e7117a03d58a4e8a4","sha512":"4e025ccdc94278573d5a9df211da737ba379dbcee75021e6607a73f599fdcefe50af54c76174bdf4f6c0fb0ed1a66d3b4dfacc75d5f5854452e1b77d3a16e8b1","ssdeep":"96:jL/bVqh2iJMeVZhL+no0JzxF+zZZ9Losc3MM+xA5Z9gvWUwBVTCV+xRbK:v/xqhCex6rGFssc3MFxABtCV+xRbK","tlshash":"b7c1b445e024ebbeb83a08d9982f102574192fe5de198076f4bda839323c15d7627bde","first_seen":"2026-03-21T17:26:39.386441Z","last_seen":"2026-03-22T00:40:17.789882Z","times_seen":4,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:15.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 22 Mar 2026 00:22:15 GMT\r\nexpires: Sun, 22 Mar 2026 00:22:15 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 22 Mar 2026 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 129307\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399907,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32337)","md5":"795d84654feb099eed77d853a9826bac","sha1":"9d1bb066ae472d0b589ebd3c25d1cd2125d9173f","sha256":"ff8a7dfb26de0d9a412cd185e33fe73639c29abca50700e11c3ad7480de7c09a","sha512":"75a841715cc1b55c0c1b1508d8977d36d54e715de6da9d58ea5bafcd7919a297aaccc79fb458dffc436a063b646476d66fb78d0c570a9d94423d12f30ec85555","ssdeep":"6144:FrL5bRuPtxA5oJ8T4AfICc9JKwpm8SB2S5K2wzO3F1n3wRXG:FrL5bRuPtxAbTfICao8Md7","tlshash":"388419cdb7dab4664393a474903f018ba27a28e2b44cd894f086dcd43e706aa5177f7d","first_seen":"2026-03-21T17:26:39.641488Z","last_seen":"2026-03-22T00:40:17.783218Z","times_seen":4,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":36,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_88084e2fcc8220fa5276981c697593a7.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:18.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_88084e2fcc8220fa5276981c697593a7.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _ga_2CT6DSEQTF=GS2.1.s1774138935$o1$g1$t1774138935$j60$l0$h0; _ga=GA1.1.975937408.1774138936; ajs_anonymous_id=115597c6-23cb-4280-a0a6-e5396d5a24e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 270436\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 11:14:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69bbda89-42064\"\r\nexpires: Sat, 28 Mar 2026 14:46:39 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34539\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=E0sI4iNR2T1dMHBvR.eug8HvgWi7v9uGmKIOZ7ruD0I-1774138939.2100306-1.0.1.1-e.mlq5PBGztnsydDao998AZj0vUryZ561Pv226d3VnF23Tg7GtwI5ZGJZ8Qk3trs_7gApQbCVM6aR4IYSfPFGWyzLWLQeKXaRVaOzktXoMFG9fcd1EVvDO2Ep.rxhtrD; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjdI3BY2lgmD4ueBaPZaMWE%2FvYg4Df2EFeBWi3nxTMPKD5pOOkzE2cAY9V2k%2B9NUOTGbXZ5OAos2uNrV%2F6T7pUHDVG0Lgui%2FMDzjGfSgAg6aSs6ouA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a908b01a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":270436,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"65cb91eb062d3f8dca6bca6b1f601274","sha1":"c1b702346866331105a92a8ce17c9bdd24757493","sha256":"2646f8a949c3d3a2e2604c2a85a41e2b584defe0d0536c31d004dd8531d13c37","sha512":"afaf0768e8d07a89cb41f83a6f6c7ad557f2ce0c1c1166655471b59c80ad8fb26f3b89d7977b5af1a0a468ef6b01f31681426cccc1825820c120caffa39548d7","ssdeep":"6144:LciPlUW9tE7Laz9vMVzSaDdxiTQ/Uta+oZr9BgSezF2d0NZ:LdXeyZM86xatw+oHqT","tlshash":"de442325468fe3252472ceb3aface35ad691faf48bdf01215c0394a94c532dd1229bd7","first_seen":"2026-03-21T17:26:39.624238Z","last_seen":"2026-03-22T00:40:18.09711Z","times_seen":4,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":542,"receive":394,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a3b983523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-13T19:35:30.333023Z","times_seen":86056,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a3b984923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-13T19:35:30.28644Z","times_seen":86094,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/SystemBetCalculatorContainer-Bzc0pnS2.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-Bzc0pnS2.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-378\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=upgQPEiROS9wF23FO0mwrrD59CbedZSqZAq9AyCZcrA-1774138931.3172793-1.0.1.1-ynPLRX4Y_hQtSbdPjO8aQyz4C22lbvj0JUF2ylBjbiRzIOxlnfw6k_HlcJwXUSA6r0mGKjK1m2UcYlVqm5eciwgVRfONerfA02iGbGXevBSmIYjI_a_DfaGn6DFPpFtO; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhljmoQ3RR1Y8WeZePXi1Now9vSpftUH5lWaNv18KtGu34iKSyV3eVLi3H7dfPbW7z42TCX8IGjgnL5g7J8lq%2BgCvQJnXqkBU6f%2Fd3sKjmgeHkU%3D\"}]}\r\ncf-ray: 9e010a5eeff4a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (544)","md5":"f6b4940b55d134e31fa03de3be679852","sha1":"127e610a7ad135553e3e7ff1719c5dd9f1c75006","sha256":"dec35ad6b839e544e8099d7d818aaa3a88db1ad559420bcb20f658e6baac2683","sha512":"b9020ec0e2690c517e86236c6c6d27f0ac074daaa07089aeadc99f8ab99c465223f5067a1ff613bca023113d204bbdf8242ddc2913dc11b38ab1d96370e65865","ssdeep":"","tlshash":"6c11cc566329cf70c49e0ee20a06a4540df50a29694cf628b6f18c38e01408243eeffb","first_seen":"2026-03-21T17:26:39.405862Z","last_seen":"2026-03-22T00:40:18.114421Z","times_seen":4,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/AppSettingsButton-Z8Uar99K.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/AppSettingsButton-Z8Uar99K.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-181\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=A48A6LaV5UJvNVNmhN8.vBXRv1soME4F0xYWyGgzWP4-1774138931.6613984-1.0.1.1-2kvEbc3H38iYZ2I5weq7vD.OdcTeeFPnc.7gG1BT1ubM0JocLHtlhuyfsWvw8IkutnqxQUURZwFRtEGz2n9G4S0VsdOS4bg_xHBjZ3BYgv74ATOn5L3fTpnxylPOXO_l; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LimwCP%2FABj5ErLzh%2Bgnxc4b7mCoGnE36f5u2ay%2FuWZfpEO4xqzmuNLWAeufA6NkibQA1PWF1iW%2BOhvygKvzihu12avp2ZDQ7epue8SoNL3T9tcs%3D\"}]}\r\ncf-ray: 9e010a5f582ba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"89a30a627156dc5f5d2c27520b8dda1a","sha1":"7b42b5f3a628661504fb78adb51f204d573e286e","sha256":"622f3d41c1979a9d6e6856504b9bc1c5f1afeb02f3ca7c0299060843da6d581c","sha512":"46e969cd79931186b55227bfec7a5bf3eaa2f2a2538d294727796d70f30f17591ee2e676ef5695a2b5f163073d8124911f6257167d7c1c16baa75bc2e666e921","ssdeep":"","tlshash":"f5e0c08b91c2d2fb07d27ed1c11fc50179267c38d788d94140bc649176f02c6d14ea6f","first_seen":"2026-03-21T17:26:39.599828Z","last_seen":"2026-03-22T00:40:17.805928Z","times_seen":4,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoPromotedGamesWidget.C4EXhwOE.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/CasinoPromotedGamesWidget.C4EXhwOE.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=KXUqfnUbU.R2Txe4KrybpaY5vGXAGJPGfs3w.ZzORuI-1774138931.6801033-1.0.1.1-H3M9UBybNylG9PwC4NYpWNXIAc0pMI18TUJQpFk3VkBa3rH.WkxMkHUbjefD0lOzWbAO5oN.NUcbQjKyNeb2B6.YY9pVFXzofqHAOlYO6Di_T6uEjMQj1sF.Ga.EUSmV; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2BdksYrvIcE2oNvHWplAX3tg62auafDnLsHKlJYb38npK5r0am3kSipO9jJv3i6fFJKA97PupsJN52I%2Bf0fwaZQgIfSgrZM4h7HM2Lh7CpzyVe8%3D\"}]}\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-afd\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6188a7a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2812)","md5":"09fc6c8eb905c21c7a4d044090184cd9","sha1":"0a478ada055f03e4574894d8fd6b86ed30d5324d","sha256":"d1f596a53ce4b0c43d20611ff931c0858b5d6c4c987b2b546269e639543dc878","sha512":"6811084eefb8629224c5ae7d6806c7f2b220d131a02f0c1a0c44067d684da4c1676d4aaccf513bcca338af6608ba085696056a3b70ebd6274ca6992035c3772d","ssdeep":"","tlshash":"6451250f445b273af1134e60a2bd5ed66acb491bca3b4b7cacd86157c3096c2607397a","first_seen":"2025-12-25T01:12:57.08487Z","last_seen":"2026-05-26T00:51:05.438146Z","times_seen":291,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css?family=Lato:400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 22 Mar 2026 00:22:13 GMT\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ae317c913d9f17e384174fcac1e95f49","sha1":"97048ceeff296795e17fc282e38d26d44fce8bad","sha256":"0250efe84de4fea78b47bed1e3367687b72cbad25fa556879acfd9adf33f6b24","sha512":"3be7c2d8b49c8ecfd8fbe46e0e57aec92fe696894da6243f6b9f0052461f28eaff9b6974068276cde565287efe54a8a16379b21a522dfaaad925fa38215bfcc5","ssdeep":"","tlshash":"ee41ce92096fb908db830cc212c97d32ef0f625064499935afff14d8bca7d699362b0d","first_seen":"2025-09-17T17:57:20.126253Z","last_seen":"2026-06-13T09:49:53.513161Z","times_seen":7411,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":144,"dns":1,"connect":21,"send":0,"wait":20,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/497.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/497.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":26,"dns":1,"connect":3,"send":0,"wait":15,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-CUbLXDx4.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-CUbLXDx4.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-466b\"\r\nage: 404\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=rgKzkEtAWN55Wn8pWO7ufV1nAWBXRS.XQH30NTJow7E-1774138928.1423323-1.0.1.1-s2fud8Kc8KPjk4Rv2a3IeNGrsF20A0RnZOVwebZ.nuZCKiHPQYYytJbDcqX155rDY.6sELTqXG_p2T.9rGYbo_42dFLj4mDvn_hxwrKNICGJxnwpLeWixdlnB77I7dhj; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxVSDi%2B3eZIIo%2Fdr6oylpbAF4w1P8ZUT8nUCGFzK%2FiFRAv1EL7OmDv7mpx%2FCRrs4w0%2FmcShsuRu6WLI5JLW2escNXDUkwsOPa8zmNQULW7%2FILS0%3D\"}]}\r\ncf-ray: 9e010a4b0c6ea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"f6345e5eb50070d1207ee46af95b1cf0","sha1":"8f5cfa73b1aab00daee26489e596300ddccf15f1","sha256":"ea360197e86b31d860efe7abfa07659d673d5508072c4a9f9494a0893921c804","sha512":"99726a9e011902acc4873e4538ad29c6b47f34c6e64550a2d9d37c97ee22c9d772544d3f33fcfa9c6eb16cfab541e5ac981fa61b9875a8bf8b54298bb4e6df05","ssdeep":"384:fvMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ6:XMci408FFnJrIjE3D/OY2E0xqpc1NKkT","tlshash":"818209d0e2b4f7a642e8aadd80392074f2208c2c347dd0f1b6b6edd974664ca956dd37","first_seen":"2026-03-21T17:26:39.594746Z","last_seen":"2026-03-22T00:40:18.08786Z","times_seen":4,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/___vite-browser-external_commonjs-proxy-BvjNEVMe.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:09.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-BvjNEVMe.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/WagmiConf-B0zYIpvp.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-b2\"\r\nage: 406\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=XJDysUZ5mO_Sz4qCY620kUuyq7pOcrvytcdUPEQnNUk-1774138929.5739424-1.0.1.1-UIoR_5GupDPFds7Nn_kuIzvy.RcE8FoX6WL8X5CjWoTJezkyUNEVuD1lG667TSIKmZHy.sQ4K_JfvZNWTgj_O684d8MnjFhb376B0Mf560fAtDGEcyOuGDsHeaVNX01_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dqbMFcNFgGxttxGw6hUOp8ZaQq6MUYaEHv%2FKHUOfTIqJXIVG%2BNeDpsY4JFfzfn%2BknCOHp4GN8YEfzkIQpxV6k1XwAZeWXDn%2BKtpT5gYIOm7YJe4%3D\"}]}\r\ncf-ray: 9e010a544dc9a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":178,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"0453c525f1f5a151cf277c20b691a2fa","sha1":"a708a4aacf7fd35cb4a8e0123fb8f1a61c37e8d2","sha256":"c59d3f5325da91eea5c987c2e77a946acf12669640c1d2de58a18d9704fb914f","sha512":"fbbe4db43256f047f5b6ee830b42799cad28672ed2b6966ae31f586386e67e4e13ff6c003dc1778ab408edd0f562e5dd3670a5a296cd7136061447180425afb6","ssdeep":"","tlshash":"dfc080491694dcb0525b1d828615d402d55c4d6e73f8f5d0bb088d51020158b62b8f9f","first_seen":"2026-03-21T17:26:39.615425Z","last_seen":"2026-03-22T00:40:18.04969Z","times_seen":4,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index.es-DXJtvHoT.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index.es-DXJtvHoT.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/WagmiConf-B0zYIpvp.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-48144\"\r\nage: 406\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=L47fe_ZexsMSrLRNMPaVQjh_CkboAdn7p5Szj9dYPls-1774138931.1687167-1.0.1.1-LWFA21RnFl3xt0AUnaHf49LCEdd4yez.PyrCbhSBksKblTZX.28qtXPiFxapxXEvAhVB4m9s.UH9sDHd5pDP3fmNP2AbGtPpj1WeApw8BNEpBrzG9YjlycuR5rA.QX6K; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8vRpTGTlArY8QI3DCMc6yGVh0nRCtFRm2JrJ7%2Bkbwzre35bYu7JLisFNOifStxInLNfQ7dRKUb1%2FAFyTrww2RMyR7MiD2UJZQyW%2F%2FVg6%2BaJI2Y%3D\"}]}\r\ncf-ray: 9e010a5a0f07a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"7f5a29e9b140d89b45ef6c2dc1458af0","sha1":"d3d5fe3e4254d00e2b6c0321d24cade44f2359dc","sha256":"7bca838c2ed01b7b467f932df8f019f4ce70b01e018595eb6e01f08a1c826261","sha512":"74fd665894507bec47587bfc1fa7e1356b66e4b0efc0ee8bfeecb69331bde3cd559aa2583e98d0065525a79b28fea6568904e71d580aa5caed815377063d9703","ssdeep":"3072:AzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6Ubh:Az77jdU/7sJJMcvYisoljSFN1Nd6Ubh","tlshash":"c554fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-03-21T17:26:39.597293Z","last_seen":"2026-03-22T00:40:18.118105Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1218,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/GoogleAnalyticsTracking-DzsiAHbD.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-DzsiAHbD.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3588\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=7pzhPUiHKTQF_hMeOOXRwBswUv3M.KzqWUXI4QBcSX8-1774138931.4287395-1.0.1.1-aKw_9Clnf.0.MFVIAR_k7hx25aGBnnzzuyWUHCk5lQSX3aW7ZKhliX3abd3kYbpvaxgmma2qEwC_HR4D4zMPCrN4spAzC_z6kdD49rdDp.mSo18T3r2R2_.blV9xsqFj; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BlFcN%2FUsT0M3NOphBtTCD0Qvzm92p5zyxL9Tz25%2B0rcBQLBt%2BtxiVemcTMgXvjUNesgAGDsFHu1wHt6mt1%2FiFjUtQlyJXffqhuXBPCGl7gqYa7g%3D\"}]}\r\ncf-ray: 9e010a5f381ca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13704,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10208)","md5":"5c30b07b6e6d96a02961fa121d936f2c","sha1":"b9a4142d99821eb90ab286e8accdd5d8cca5497c","sha256":"3b654664159054341a4e796d088aaa15d5b0ae7a460e47c74748a3768db23406","sha512":"f10646c49bb35a7ce60f4021e5671e9bf71ca8e2b1865132dbe0b0c70794ed01afe084d178b81be5435d1efc99ed275c78aa0afaaa2a94d4b5eac54c79d694ed","ssdeep":"192:sWYceR0SE+m/CTb3bHXCT76h1QxGE0VK7D6L7kBNrnPsh52Lz2PM7mBE:1YcoE/CzCuEP3Bky2PdBE","tlshash":"7852b55c32adb0b682df6054587f720bf1755910a458f480a265edf46ef8caf02abf36","first_seen":"2026-03-21T17:26:39.415393Z","last_seen":"2026-03-22T00:40:17.807909Z","times_seen":4,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/content/images/casino/icon3/bf14c645e1b4175cb7d9af759b02edd1_casinoGameIcon3.gif","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /content/images/casino/icon3/bf14c645e1b4175cb7d9af759b02edd1_casinoGameIcon3.gif HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 913720\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 14 Dec 2023 11:24:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"657ae5d4-df138\"\r\nexpires: Sat, 28 Mar 2026 14:46:41 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34532\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=sqwvL8mU.i1gPL2VmYNsB.Mw.ePYYhqXgbo5wIBynFw-1774138933.9644794-1.0.1.1-BvqXK5mZl784lDdNCrNUNeeNCmhWAMiQDCwxHc69jHhR7dMA9fKBap1dGgm0YTW3Cerxx_ZLDAnCxFfYW3XshcrZJG2YlJ3g3I3E54NX0pGwE2ix7bxG3OiqOf.fDDVX; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e2ctl9iJZ1Cd9aGEbob4AW40mAheAh4s%2FdD7iJmAy3dZux1ad3bQkUyRTsovLSnXTpQK1ITYRd1KebswhXD35dBmbgb3X2S4hurhxZxPYPjoTLg%2BTQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6ffba2a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":913720,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 440 x 310","md5":"909666f6746ef431d37304c58c6871e5","sha1":"50f9549d49c701c3adad42a5d176a4a9a07be6b2","sha256":"aa20abf1bd815b9e7248a8cd3bd1f83078b6d123e307983a11f44bf82dc14911","sha512":"0ff510636e04a51b2987ca77bc71eab1a1d282b540ea5e0d87d6942044f0f54b1ae842ae9e90243c9035a77dec155b1a3a5ba36fbfcbdbee076419974d27f1fa","ssdeep":"24576:9ayMCZ8OBrb1/N036zWjxK0hakTC9Itg/UEyJWlHx:peGUk0BeSg/dyJWlHx","tlshash":"d71533d4901fd402c07267e285eb66497fc1981ac7b4c9e7d8b31393c62817ae68fe53","first_seen":"2023-12-20T01:06:50Z","last_seen":"2026-06-10T18:54:07.469221Z","times_seen":93,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":546,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"0beffdc96a1a1b35b5ce2759d6d1d51a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e010a3b984423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-04-15T01:21:42.763559Z","times_seen":11136,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/payments.json?v=03/19/2026-17:16","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:06.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /payments.json?v=03/19/2026-17:16 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:06 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:06 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-e0b8\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=j19RUBm3Wbi79pajgo4e15DoycXo65mWqJozKxKPnk0-1774138926.1754026-1.0.1.1-ENJ4zuo.soxj2cG1QWv6x7xZiYeLRtZO_4oY6CbgnVxVSQ.F6EO.FSiOTl7PvFIrAPVP1m6aLpxXgyYY.ufo2EIDAmgVuAuAByDAi.fLbVaIPyvs3glnNTYl7k..bfTS; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WY33NQ3PJOF3ZkLSJQgtpBXt5QRcQMry51PvO%2Bvx9Oermm12Wji3ftMpCBYgNz664fsxNzw21i46gOD1djDMmcsJ1uurSvVCQKgik4dgch9fkTs%3D\"}]}\r\ncf-ray: 9e010a3f79bea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":57528,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e7f4dfb8365d538e850233f2bc1241d","sha1":"023e0e49d553b587b3e23c8a19806b565e3c3c23","sha256":"417cc56cabad2d7cd36252c80c223b0b2dc324d3c416394e9318ef3fc5e19c66","sha512":"a0182e6ebb6b5a4e424c2991d8c5ae99659810b82cb62964dc508eb32d1c5abe24549fb2f6f962c1667ea831309971ba2ed4d1106dd7d32775e2b8e17e517780","ssdeep":"384:UCAv9Q5iPDFhmDbX+rN4PUb9TDzKHbIe6JxE3VQF6Vc6JhWB6J38OA16DKkCEFKu:q9J4JpLr9AN6v","tlshash":"b24361c4241b8cfe4fd573c075ffd10b719a62068aecea89d1a9ce350bc9a1aaf41574","first_seen":"2026-03-21T17:26:39.69184Z","last_seen":"2026-03-22T00:40:18.173633Z","times_seen":4,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":444,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/logo.png?v=1773142319","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /logo.png?v=1773142319 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7738\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-1e3a\"\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 109\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=QzzUI7wNmUDbWECOLqM9lxYAZNkCFAOgzG88c9Defv8-1774138931.2582645-1.0.1.1-eAyc46DmimpEFFyW.1iugSY3EqhsDjFF8_Q29mZfzm8Zods0j0VlkPMeurlGg_FCZL8W9twQpTmTRPtu.cBeAG1LSqUEfc1Qf8KPVwJyNel_SurxaG3syF114gyGUxnu; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTXby%2F7lGvpM%2F0TEKmVSKBGUpPRakQCPbiHLbxiDajfSZxUj95XBXcI%2FB6Os01dncuQo8iJVVo5su4FF%2FUfL9ZFkDHXNfgVCsFEDdPp%2FEirx%2BTU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a5e2fcaa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 120, 8-bit/color RGBA, non-interlaced","md5":"60c432b2e1f44042e6831b308a2fcd28","sha1":"a0092dc780b9c15f23421dedf670462258e4bfea","sha256":"45f7ccf0315aa2e44a658598ba76a0993ffdb4ea7dbfbb569ddba207929a7461","sha512":"f4a8c1c80e4cb91a70a4801ca5e7efcc5e4cc742f4939f805cb65969d34a896b1bf2f82c5f2bc2869b8e6be0439157f84b1365dfc3c76584ff2cd983e97d5eba","ssdeep":"192:yLexi5CqFsyyyjU7Bmu3n/0Hw+mvTZHOpoNI2kAZKqn:yyUVmoCVFvTBhIGZKqn","tlshash":"69f19fa70753e811ad00922f841e0285bfc412e5f36bafce13b3df19862515475a96e1","first_seen":"2026-03-21T17:26:39.532964Z","last_seen":"2026-06-03T04:20:31.943261Z","times_seen":48,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Firebase-diKvNL2_.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/Firebase-diKvNL2_.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-1487f\"\r\nage: 110\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=KrK_LcwGECjBE_veqTwGA2QLp295RWj8eXA3AC.iWDM-1774138931.8765035-1.0.1.1-xGQzDxDMv38T86ES95VicZewdNjMopJgR1ho_HGQf7VB_h6kWiK3ZL.cr3Mbpx9MTCNu9ZHRnckcVuVbp6DuvC219shs2ugP8Evjpzi6ydTkzq_dt.WF1HQE8AdVTLC6; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=72uJmw8us2uw4XFpBwPjqGMoeWETvyaX%2FjknfwOo1C313K5q0ZTJRS2jQ%2FmSeg3nUV5Z7Aac6c2bG3nILg7UF3GUtQkuDeNd75hNzRBiOc8Dd9o%3D\"}]}\r\ncf-ray: 9e010a5f4826a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":84095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"a9c96b15207b33ce41c266eb191479bf","sha1":"f3a296de9fe8c5443c223461091bdc8a52c0b6c7","sha256":"a541d121f4449536a19127ae7c01559eba206cc71f0498a5a1038437a937ace1","sha512":"2ace56c3aaa190691316c2d9469f3a2b785d4b8de5cd20f39fd17e9da4275c2b33f4fd7fae089cc692004d9066d45af1f0e3aa0e3e4affe9a7c3314522077e35","ssdeep":"1536:s4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:ss1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"8e83957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-03-21T17:26:39.602259Z","last_seen":"2026-03-22T00:40:17.843659Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1005,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/769.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/769.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1396\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Apr 2016 13:55:50 GMT\r\netag: \"aefbbd8679dd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 16 Apr 2026 14:05:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 382615\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=UiS3cS1j0ukzTsdXz68goFjh2cxg8Lu5xjzZGy1QoIc-1774138934.275654-1.0.1.1-qPyBg.CiTt1ypLX1R7LEhOm2x7FT2CEwg5DIEj97akQDRSvzjQW8VB4MWUbHolXtEF_wBtWCGhBVIr0aNvKVPbOr9Y4to2omaPnoxOklmEfDYoD4vy8ScPw_na8tGKKO; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KcAjVFHWUscgqspPV8S8QDRGCor26IYXgmjajvNRyytvij%2BNG1PIHNGVEXpyo20LGVJ58DP%2BjqsWbMC%2BoeIuBuGWvmDRiLOsze7yx6d84KRvt4cns3prIK62ZzA%3D\"}]}\r\ncf-ray: 9e010a733f0b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"dff320bb926338374d529ab315c6901b","sha1":"09e10d2cc4038422a9ede4cebc799ab35bb802fd","sha256":"a12b833639370e15b26982d37b4d09ad83fd6220e119e63d80e63536e16d5244","sha512":"62c69dffdcc7fad87c7a8fb6f6a1e00df70b48510cd4254c4aaad4c8a5801db9c80850c822665a614d774fa94e2097d37e2d5325f2304fc0bbdb7a483d9ebe46","ssdeep":"","tlshash":"a321b67bb7aad8f5c165af0e8281b508a85720db620252596d3ee188537934ea1ac934","first_seen":"2023-11-07T09:35:11Z","last_seen":"2026-05-02T02:35:32.153236Z","times_seen":123,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:15.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9e010a79f87fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":697,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-05-22T17:22:58.055376Z","times_seen":51,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":33,"dns":3,"connect":1,"send":0,"wait":34,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","date":"2026-03-22T00:22:10.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:26:18 GMT\r\nexpires: Thu, 18 Mar 2027 19:26:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 276952\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-13T19:33:34.327926Z","times_seen":880598,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":64,"dns":1,"connect":22,"send":0,"wait":9,"receive":5,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/if-defined-CWaLTnLW.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-BnlPX2hH.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-cff9\"\r\nage: 407\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=IQIHHIjUxXV_4WiXyI8GKx63E4zWHb4f4pB3badd9.U-1774138932.01323-1.0.1.1-WEdmUR.uoh1n82z6EtIOsIXMw9Pt.qfejchQpCDi0z2vSFtXaJ_xsmC2C9jxCFdtUWF02bPqordGUiZyUQoX_olzrdJ6897DRkNGg6gYk10oh4EJvHg0vMGR4Ge73OlE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bU1DBU1hcNc1n9%2F1lJcdVtfbJdVakk%2BE4Fvz4jSYO%2Fs%2Bg3N1RIrOzc7ci4tLXFa4hd4OaVZu7wTmUtew7be0jE6GjvPPBkIFaMyLPFx404k3p1E%3D\"}]}\r\ncf-ray: 9e010a63b903a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/jackpot-jNbP6Duk.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/jackpot-jNbP6Duk.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-178\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=NYjxHsGetV1jAoTObrf5h1K7cYOjdRpWEmQ_4hE7OUY-1774138931.7444036-1.0.1.1-mxq7Xu96wje8O_j4_JgcIEBnyUa8ZpE0YilgSBfe1QGaPGK.IhHC9BAiTZcgazpOygJQ54cO0g50jwTCBIecgiPzH2nnJE8qWB64co80y8W8ZZyS0F4N_z..F4B5ZlZu; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJDDGkq5bfUeILlxRMW2u495YnxbZa5kLm9ks6Fpwn1VK6x7mEapEDrKaatYc6d%2B8NnTVfQBzVAzyTwlnsnk9Tp6chS04z0htPdjz0AWM3n8MNE%3D\"}]}\r\ncf-ray: 9e010a61c8b2a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (375)","md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-06-11T18:58:57.27262Z","times_seen":102,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/TabItem-biu5pdkE.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/TabItem-biu5pdkE.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-19d\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ZlF81AnPpVQukF7eZuKKDHGzdNswZ_0VD.DUnZaFtO8-1774138932.7942715-1.0.1.1-dOwH14Eh5xwJ27Js.8CuMJhexBhEqIPKFGc6i9OTpsR0EwQAmvdVdazNSs27Ju8OCs8Bwm0S7oBiI24.UASjHpnFs6OxDyoqyIT413VE920.YtTgTjCs.3ggHKJbl3dV; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9fLBVXzQWrubaIybRCTIz0kkBEY47bT5dGnXMAjO%2BOnAA4Kvs%2Bkv9d8IfQJLYfDgQOTOX0OvEWHJEBc15y2TlSG1pRMlA915r52Cn%2BwuqrPHRuI%3D\"}]}\r\ncf-ray: 9e010a67e9fda0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":413,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (412)","md5":"e572f7147d80a282b702909de3e002fb","sha1":"0c64bdba98c648a7f33e629de97d0fa6a3d04608","sha256":"4f0aee67a47ed48c4eee0cdba6b7f30408ff84fbb5023e85b2ed8963ca4a458e","sha512":"0276a4ce85222bc1c92cfe0ee96591fff70ff13f56fd7fab3d0607066f8b0ed98cafd146bf4f05d575c08da4d1b3328578b0a65ceb3c45b365215a81aa713942","ssdeep":"","tlshash":"5ae02b42b020f3f5982b94d6d27f94c7322209dcda9588e6a0a22440072e561f74ff8e","first_seen":"2026-03-21T17:26:39.549871Z","last_seen":"2026-03-22T00:40:17.82563Z","times_seen":4,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_aff4011d6c5525eac140c93daa9b705e.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_aff4011d6c5525eac140c93daa9b705e.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19502\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 01 Oct 2024 12:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66fbeef9-4c2e\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=c8ybYiSEBw.uKC1x8LaAb5LoDbRLnGf43rxYKHL2YRk-1774138933.6772728-1.0.1.1-mImftlPLfGAlsgN1y90ZdPS3Pop4XkvcEawbxy5uqRwcawBrpEzdQcoazuVp88l18TZxsTEkdhDA7fApwHC_GArFDcu.FTJd0PfvIA8XrjIpnRucrEcpy2reiYxc6Woj; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xd6ZG%2FSN2YlQWgoTayQBIMk2P4F6wQN7wW%2Bp4hjakvGEWf4S158IQ5MeWJFJ592RQypbxLNnsTeu6P6k%2FzHGuCcGmi%2FAri0nRedTZ8y4rFKD8t9egg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d7b19a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":19502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb8a2fce829b77a41898f77b8044a7d7","sha1":"ec930f3ad570b2b82de7435f403294373b9e08c8","sha256":"eff975d202b8198412f6fc60d2a9d0debe36d1ea2a413caba2b3ff0fa2146327","sha512":"b4021d2ee5657abe95d0115e5695c124cd500d20ab1d331c64ac4a416de874bf3cf83e9d79c50d133c843df31a1c2dd39a2188256f920ec027bde67a051a05ca","ssdeep":"384:jTMW+QrwvaBEDdPExxNOAZA2MSjnzJAkp+4avBq59InjItQua/ctq:sW+QrwvaBYPE3WNszJt8TBznfB0tq","tlshash":"d492d0f2949f7a4a5b93ef328c38c2011faf335d0b64448461c1f69544b495a4e6f9eb","first_seen":"2025-12-24T22:39:16.161133Z","last_seen":"2026-06-06T23:43:56.133354Z","times_seen":54,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_255218c8ce749fe8c9dfbc0b8e8ed1ce.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_255218c8ce749fe8c9dfbc0b8e8ed1ce.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18246\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 01 Oct 2024 12:46:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66fbef08-4746\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=Pgaihg1jlWOU0u9iQhZUzX.jyevWJOYl_lq2kq4559g-1774138933.577549-1.0.1.1-HMuHzucIpK7DZOWhG7IGAAVrxqfHlGIL9ONw2qkweHWch28tBAaENvnyROKvn3pvBjR1LpC1fEfi15dOfE8ynJCHqO9iMwyk5Ker5I5kqfsJ7h5LWGm32f4ucxLVhUgs; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rywQ8UTlgC7ziJLERTh4YPEr9PnL3HWG2Zo2Ij0PYQQc99mLTUChfXfdc%2F2GusDpiqCrh%2Ff2pucZCv%2F9DuENMbI2oh8oiO87cKpOrxy1xpLSvKfw7A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d7b1aa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64a87f03ae635843aa9ddf8b795ef059","sha1":"820acaed7c185030663567efd9b9b0d820c10b2e","sha256":"eb987fab4dbb8a68ec1dac3374ab8d34c1d24e192526bfa17f415a67957094e3","sha512":"881a3d458f5189ed68310367aa0b7c4e4e51df4bb58d942b9f7c3e06a66010f735b9b0161f80028adb1c92cfc2e3df3b4760e69b0df6d84850877c60c7307373","ssdeep":"384:MTMTJfN/dyUK351WMwsPAv4eN/lz2T6zfdhXeVZA4BWDYWTsVfAEsTTQ:9Tj/NTFAeN/RG6zlIVZAkWDYWwVzgU","tlshash":"c682d037039a424351b7142fccaa7d52a4d0097b8a2be67a0d5903a54a3f7398bdf67c","first_seen":"2025-12-24T22:39:16.361229Z","last_seen":"2026-06-06T23:43:56.114134Z","times_seen":55,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/940.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/940.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1096\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jun 2023 13:09:28 GMT\r\netag: \"962f71a54abd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 19 Apr 2026 09:58:04 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 138249\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=8upG6Hwq0Gu0kTJsM27BikujAXfF9ij45wlpMdrvXTA-1774138934.2344716-1.0.1.1-oEq8aXZSBdH2fMwRvc07gF4wadl908vj409PvLZ4iNg3ps31IHcfPae4B6YujLdnNHyOXd1IdmT.v4xgN7hmxHM_y3GCkzMI9eQEK4_f_kVUF0K87zyyKhxjM4J6dLEs; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45hhu5D2d7WMu92v5OlUMnADpiSjMUVPZR58iUtHVirTyFYgx5Msl%2FudH3uqQRHWJWqYcmJFb1cQ3NfnuYO1nVNj9AYQyPRfVeWpJBV2qghn6g9D7Een7C66n60%3D\"}]}\r\ncf-ray: 9e010a72fdfe120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b2aa4e91f5f156e42d8fc97ee2ff31b1","sha1":"0c5679a6a43bcf7a888a48e3626e0b168b5e909f","sha256":"053b66086f8bd38d3c3e42468d9e3bfc14f3669db492640b0e6de40ed71f67d7","sha512":"befa60c1ee1ea2bd3bf11a91b736aa100cb3bffecd3e4c55a5b5a19753802c35f834106de812219da23862cd846332f5e56ab949606dcb1ff40ad2e52fbb3746","ssdeep":"","tlshash":"9f11b6e1c242c83486ac3cc7b15550c7df2e43ef2955608bbe94ef186469da3558e990","first_seen":"2023-09-23T15:54:58Z","last_seen":"2026-05-22T06:52:51.810602Z","times_seen":283,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/395.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/395.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1660\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 07:25:33 GMT\r\netag: \"7236d817296dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 191488\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=tZrKbzXfNvdfUOojV03saJm9WtY6NrqY9cxX7D7REn0-1774138934.2593277-1.0.1.1-QzO5duyt5Gy26twbRjGMu_HekBPDyx7odTzflzD3aGVbrBEhG5AC8x_Qhrq9UI58UAoENCyySCjt90iqntUs.hNBlrixqvzgCZka0aXQS8LmLM89SemGpR2M59n_O18R; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLn%2Bj6eezpMSqctlLtWJmt8KgUsGktN8gMrcxcUAKUfnkzRbPn1FIsT7P0tPiO2ljaUiYCYLJHKJQdyUQyAwsYVRhwN%2BaMus2WSPEjtn4Z7M5P8SnmtTd21tpoI%3D\"}]}\r\ncf-ray: 9e010a731e95120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f4a3b310319ed2ae5f85de6f9259caed","sha1":"f0401b7ba86e03deee5260b17fadc26036e4fb6b","sha256":"42ab1bfd61a2009272bbad6a2f59f7c17f5043e4345eb73ac93fede514f06aba","sha512":"a507f234ed64a600dabcb1f9d1db6e6d7e956150db2e850bffc3569d23ea31dd7beffc293aefafffa8081660f0828c7466a0d809066cd1b5db548b3360801cb6","ssdeep":"","tlshash":"1831f8e57c64d1fffe0e39a3a81c43c6d3735b9a99a28b569e70c8f5506d4885312431","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-05-22T06:52:51.960612Z","times_seen":543,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:06.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:06 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e010a4178bbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-06-13T18:18:43.521253Z","times_seen":49916,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/LiveChatAdviser-D27OhzDI.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/LiveChatAdviser-D27OhzDI.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-35e\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=cpWIiJ3DYprp9tXWfLYhf80KvrPbCnzeZAjvE79v3yk-1774138931.6144884-1.0.1.1-GiHDkM1f.1QkY5vCoHQV4wXykntAujhHjAsMI1GAXDYlnKwoNkBR7i.I3LFfNE.MCgf6gpLtaeEvMeGI_9F9HT3T9.RsCXkTAAjLIESNxPErc.iXf6sbVCieENIoTSYM; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5U0l7hXmYzpaZpUI6tMHurGX%2FCUzUVUTtKoOsa9flzFdFgw%2BcK2AxJdQtZvtgObNVm95qez%2BN%2BDFql%2BLgai%2BxT%2BOSCvzOLxQPpeVXbwOeJ%2B%2BfY%3D\"}]}\r\ncf-ray: 9e010a5f582fa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (861)","md5":"3f2f2d7d30934cdc6d0c21e68d266516","sha1":"e2f9d76a03d3b6486f98e28063874aed70597f6e","sha256":"c0679235f12e7fd2c68602e19e347b02bfef3b2294537a021c919947c34ad810","sha512":"ccfbb78a037b16838f08bf177af40478c903b90d8625a5ce72007afc3b19f6afd999668179c42580a4c0116dc034fe2b3ff63a69f1c48a6bba666596391e3836","ssdeep":"","tlshash":"4e115295f0c2e3fd6667284dd7ae2043700a4fb5d22d4db6807b19601a2ce09e30eed8","first_seen":"2026-03-21T17:26:39.544297Z","last_seen":"2026-03-22T00:40:17.804736Z","times_seen":4,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galabet116o.com/storage/medias/galabet10/media_751_e36e767f918c2e0b1323c581778f3e42.png","fqdn":"cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_e36e767f918c2e0b1323c581778f3e42.png HTTP/1.1\r\nHost: cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3162\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Oct 2023 06:12:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"652399de-c5a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=1Fdp5uaRLV3fOQc7Ma4OiCflf61ssBmuRmODIDKb5ZA-1774138931.5257194-1.0.1.1-mfk9B75ihIk1RnqovTM84jdiLysF5NjYfpVKmN5dLWzYPN_riK5cAagKRoNIqL61TlMofz78jRvV6h8aRoY7rdtlcg6CvrTprcVpdjr8R38DSq7s3TzWwlJ5YUcrpul4; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dI5ABElsK6xMmmbAx%2FNguJWraFwOc%2FMUVP6VGcU0fPuVE5AGW0DpXApe5L7dZqxYFYIcKCZaua1YpggDTPyY1cbMgI3clwoydv1JPXGnR1gFWc0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a60285aa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"6b367a99bc86c352b5f45eb76ef837d4","sha1":"18d9b34beb5b22f7b086c4f803e6f21a95c3d22e","sha256":"e54c8f4ed20a3052a3d336f6084e083fb5c040aa67d85c170f0380ed0a74b75c","sha512":"c616fdbcf246d21c51373417c69af47c207bc8e6f36d4f3b3c53b83cbfe41bde4562cb147087264c68d1133c7378f477be104e8ab5c3927f7ca732981416c8ab","ssdeep":"","tlshash":"e8510af5f108241fc7a4c9721d59e0d3bd6af44e942d998f70a0d71e343b0a9d1c6966","first_seen":"2025-12-24T22:39:16.355284Z","last_seen":"2026-06-06T23:43:56.119039Z","times_seen":54,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet116o.com/api/public/v1/tur/casino/partners/751/platforms/0/games?category=406\u0026limit=12","fqdn":"go-cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /api/public/v1/tur/casino/partners/751/platforms/0/games?category=406\u0026limit=12 HTTP/1.1\r\nHost: go-cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBouyQ6JsznowoeETSi4CPMGaLzEzhhwY0j%2FwbNwJtIAvTujgXY2FO4hxFtGoITTF0rGSbS08Pg2Yb2geOrE1RiWDoCxiGc8smUtaAcuvy5LaAJBdV0%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=N.7YwnZ5UURowWkXLvzSOM9dtGus5hunYQo6SdM.8Rk-1774138931.996871-1.0.1.1-oCaj2bthceTZrcRCtswKhK9Z5lG67WIy_Vkcj_534muDeemi_YJShcUt2pKuQKBV6Skmgsl7vSxnaNFSOMpC7Bn8R9RbSICzUY.AKiki9Wh.Xzw3T_kTnezSNQy4qSUD; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9e010a6299e21525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5981,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fd0d965ae6f0dc364d04e0283d70bfc2","sha1":"b6eec32c8588df9375c9857e332004e505c9bcd0","sha256":"eaff2223516634bc1402a4a52e05cac4eb7c6bd67eaa0818834eb5c6100b6e89","sha512":"dd65c3f08f15f9d8085336263082080d527d9d5b5f3b23789cc9c627f14af3d0e4590e39784f9db24d52eb9e838593bdd4df7c29ac9727cb208e52a9f6393f99","ssdeep":"96:Eg1PC71ejYYvkAka1wcweYYCpvYYvxj1YpYYCNCjYYvKUYYvV6Vg01t8t8l17/:Eg1P81ejFvt31jjFCpvFvxj1YpFCN0F6","tlshash":"bdc1ad4a4d34faefbb59094074423c0d9cbe53c2aa8dbe10cc56994e60e90e567726ef","first_seen":"2026-03-21T17:26:39.64763Z","last_seen":"2026-03-30T02:15:03.124822Z","times_seen":12,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:06.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://galabet116o.com/\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-lj5n\r\naccess-control-allow-origin: https://galabet116o.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Sun, 22 Mar 2026 00:22:06 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9e010a4178bec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/Casino.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/Casino.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:12:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=yD1Y6xbd6favBW9VKPBhuUDDilCE4NSc70UijQOMSbw-1774138931.4181852-1.0.1.1-6LSc4AOO9fF5kMQ0r7J221XLjHaX2piaX3O62UdSjlNdmX5Qz..GGhQx2wbo4zCspUIrWqpfKmN6tRmcx03JEJCZnmPyM7e8Mfb3FYKEFfgMvqpV9XQJrsAg2tEVv.Nr; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i8dlQdGrDTkFI6fRpHkqGp4oYMZQsVdklG%2BVbNAhQmA6BbWnaPZ37Yoj1LlIeUsIvwsNmN6KAG%2FiKsILQ1DQ8jkqHD3dk9C5a7zZ%2BbiIjBtOzRJymQ%3D%3D\"}]}\r\netag: W/\"68665777-50e\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eed0c1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3df444684921a4a44f2dbdf6aee0972a","sha1":"f0110696848649c2c94de0765f5b22b4617ffe66","sha256":"d4f76e693c5a014a2184795ea113ff8f42a1f7196243728ee128fe81ed5b30c0","sha512":"bc7fb348d4746e017aa074bae5f3b106d6a3db9c1581876ba7db93537b1a4643a8c2695b424ae4d584d03664bfdafe1b3477134f7bc6f5bc142f8a5aa54fd4cd","ssdeep":"","tlshash":"1921dc3d470289f86e455db5e43a0934c69d817ab1c2479cf23eca2277220d8c7ce468","first_seen":"2025-08-22T01:08:50.698252Z","last_seen":"2026-05-24T21:43:33.820208Z","times_seen":93,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":71,"dns":21,"connect":9,"send":0,"wait":611,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/LiveChatInc-BwBeRgTB.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/LiveChatInc-BwBeRgTB.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-b68\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Pq0Nv3rn3cLvIeZ_W9X.eVVaRaDbSJ3CCMOiqmHSOVM-1774138931.3837528-1.0.1.1-o2VRwetCfJaPIc5IPuhDVOGD6mqnztxUsZuqYfTdRs3amjAyvCJwGLzmr1a2kQhyT7PcbmCGY_sdvhpAC5Eu42RB7JmXQGs5oqUuyVuc5rHUAEdVpmfBsWya6ziUpwtS; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kf%2BvI8tkjPhA%2BUfsaheur0resCyTO2aNOOSVNuKFm9lG4dVz2GBLikRWZaujd4BkRmck2RDIXmlR0koch3bqDWDZl6oMc%2FjiGTatgIzXqytJ%2BjI%3D\"}]}\r\ncf-ray: 9e010a5f4821a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"ad95729555f741c465445ebf3651cf28","sha1":"35cd25bbac874733d0a3858af8b224eef62c8201","sha256":"50bdec45d97816d59745395248bc7435f2d1da33aa11b764e9f933c1f4d5c4ba","sha512":"79a4e2988c4d3515744af4888469b744d228f5affdaeb7716bce28e24fd9e26cbbfe20cb40095ddc128d26f953b50616470237d22bd98d2131830798ed737955","ssdeep":"","tlshash":"e95124dec43cb4b192ae67d1323f7b5f71165b1aa4048d31656c4f0af62a0cbc467aca","first_seen":"2026-03-21T17:26:39.425495Z","last_seen":"2026-03-22T00:40:18.011274Z","times_seen":4,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/SystemBetCalculatorContainer-Bzc0pnS2.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-Bzc0pnS2.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-378\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=NZlKBrZTsbvGhlSvN53oJzSti.CUbNb1zI7KjArM3S4-1774138931.6343346-1.0.1.1-Np2LsQ5A8EgwucaLDVO4ByzMLDaWQq3mLpudqGSoDUAzVMJrrszUadsMY1DzDfxebdampOnfGUjM58Fr6Ww8DRiJgVxgW8vaCujaE0IaeuBdardQQLUNKcSd1gkay41u; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1PN%2FnFblz0OZ%2BhfEypc%2FTmy940gtrJ%2FUwkW9aC%2FqFAQ4miFROkiUcf%2BehwRfl5lICZ5Y0X9QfMIaAUqZ0xz4aWRyXSNi3jouincyK6nSb1pDORQ%3D\"}]}\r\ncf-ray: 9e010a5f4827a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (544)","md5":"f6b4940b55d134e31fa03de3be679852","sha1":"127e610a7ad135553e3e7ff1719c5dd9f1c75006","sha256":"dec35ad6b839e544e8099d7d818aaa3a88db1ad559420bcb20f658e6baac2683","sha512":"b9020ec0e2690c517e86236c6c6d27f0ac074daaa07089aeadc99f8ab99c465223f5067a1ff613bca023113d204bbdf8242ddc2913dc11b38ab1d96370e65865","ssdeep":"","tlshash":"6c11cc566329cf70c49e0ee20a06a4540df50a29694cf628b6f18c38e01408243eeffb","first_seen":"2026-03-21T17:26:39.405862Z","last_seen":"2026-03-22T00:40:18.114421Z","times_seen":4,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/UnavailableMarketEvent-CEcm-hzZ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/UnavailableMarketEvent-CEcm-hzZ.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-134\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=IUkCqrTRFqFcMDk2rnVwHTL6J90skV.hb_qFIJ5wbGI-1774138931.7296154-1.0.1.1-wmuY5rzWD8TUWNhPpE9HVzShmtQxuflS3c9pQ3OX_aQCQorAeFrf4UhIA2Dy7LHbFswTZOUU2zfQsgdGwUWi6wUddYEll.1nhfnE6DP6_YkMXqD3fU2MGfKQtIHeo2a_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6IINOhco%2FJ4Xpg2Pq7ktoROXlFDbJ0grahPYBBRFM5gm9CFFrOiSC1xVyLPaZV%2BRVZs7q2wI%2BC8cFKlC3Ee9CRxM3XGLn4hdVkLfu4UqJP6UQeA%3D\"}]}\r\ncf-ray: 9e010a61e8c9a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (307)","md5":"0b0ac8ff4ea1cdf1c6e3218d90af5f8f","sha1":"560311f83f0e70f7915a340a709fe175752e98a3","sha256":"7ae2345a86ab8a00f2b0a3019769022692d90986cb2a311f42aacf61a63cf460","sha512":"3d2d8cf095d4b2a186b587501f0908a86da704cfbce63b6f5943da761aa4661d7c352d57164d1ea49fbbf8a17c0668bc008b062f0fbf409e30b41ed85dedbd78","ssdeep":"","tlshash":"bce07d09b004bbfac02518ccce3e4f0d541207a5c7e945d391a910181b34261350ebaa","first_seen":"2026-03-21T17:26:39.660084Z","last_seen":"2026-03-22T00:40:17.841734Z","times_seen":4,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/401.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/401.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":32,"dns":1,"connect":1,"send":0,"wait":22,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/tr-vKvB_tcp.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/tr-vKvB_tcp.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-5b3\"\r\nage: 405\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=kTCd_nES3XsgnFQQ8J9CQ.sF2kNw0tESxUxzFoC_FUU-1774138927.2903197-1.0.1.1-qaaO6XXLhM2jZGlhArQxTr1e7m3wvemCsP2XKXvF6Up2TgIseI5x_GpZf_rdSeeqB9KCt6DtPD6A0peEIKA77Jsj2AoCOssFMjSRD8EOuFF91P2OzzpywGOwJRIyPotp; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gSjlNJG3UAhMJd1iLO0yRFPcXimzydkQv82FvyNnPtRNfDdG48JQbBLW6oWP0olAWvA1VmmTuxLeJuQbzJOXi%2FAh1zIObBchb2Lcx3aJvbogyIc%3D\"}]}\r\ncf-ray: 9e010a45ab25a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"029e4708c52bb4fc1e7f00b3414d9537","sha1":"bb8e29f589a2f69f1a05f0388800ab447040e565","sha256":"07583a599196f96701dbae948953a539fe0b88fd9392d57e2dfa3466663d01ae","sha512":"4df8c5c71ab5f560a88a315c5b0983c2f6b968a7d32a6c0cfa9491c1a9e26496882296b475411c288734d01b03c8e7c70bf9a0ad11976bfefd11b20fb30fe3f3","ssdeep":"","tlshash":"1f31a44c2906eab28b016887882f5f04f81c2b087136f1719ba0c861ba709ed807eb3d","first_seen":"2026-03-21T17:26:39.379575Z","last_seen":"2026-03-22T00:40:18.189259Z","times_seen":4,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QehkJShKZpGmFtuep2akHVZqabeoRc1cYrbl2PwjOu66MVV8f3H2UhfGafbvX%2FRs4maJfQsK3tmskAPDfVepo0wGWLyn0lBq%2BBPdg1whhjxXbrjCJbA%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e010a5edb3b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2821,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ed84599d293d187c97aa6f88754332ce","sha1":"f950f5294b5fa13bd1c3950e5cb28b1a2ee241fc","sha256":"599500c94c302ac02594dd87a6652eb51a9f45042f0fc5fc2bd2f3935f8fab81","sha512":"d94fbe4938b707b2595582d942cfd27ada4874b5be459851f77dc5371f705af81eada3ddc170697813c2657a8404f1303b8777279f716eef4ebe08fdce284cd7","ssdeep":"","tlshash":"71514f3646b21421436710683babf31ab23ad2433689e9447edd93005f85f68d9b3bde","first_seen":"2026-02-24T14:23:51.260409Z","last_seen":"2026-06-03T04:20:31.871571Z","times_seen":60,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":118,"dns":51,"connect":2,"send":0,"wait":179,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/946.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/946.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:15.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 21 Jan 2026 08:14:20 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: J8ajF9t6IlT2U7tuuuuEWLpJqziHNggp\r\ncontent-encoding: br\r\ndate: Sun, 22 Mar 2026 00:22:15 GMT\r\ncache-control: public, max-age=120\r\netag: W/\"26d5c6e9eb5b8acc5d7f0a4acb0bb17d\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8b440cccbe8a332306f650e1ec8894ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: LIJuigtJNszFdOZt4Df0riOT_QDujl_W5U-fWZK1aMNfBwOuqNsblA==\r\nage: 51\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":108916,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-05-22T17:22:58.310306Z","times_seen":50,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":69,"dns":45,"connect":2,"send":0,"wait":25,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/img.png","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-22T00:22:12.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /img.png HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: image/png\r\nage: 3707\r\nlast-modified: Sat, 21 Mar 2026 23:20:25 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUqbWu28da7wsTVXA8ZhfWOaWE17ia5Rfm3OAlyjkCkzqWHM46t8vd3mezR38ZBOBTP6QP8Wl%2FvMU%2FV0UgJRUAl0Y%2BmCvNbnKWKbToWlcbVcdalYeLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e010a65bdbca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"2ad3a45d82e0940f4c3dc90088721bdd","sha1":"a85bbcda89334914c332b2315aa94f32c843c867","sha256":"bdeff9d8a5ad9b3cb7dcfe91fe91080359bc5a836d18d2f78e1d308c412d87b5","sha512":"06a4f493c0b3fe9ca7ecbf17347ce0aab1e3447c4c62e2876b945fd13f40140cdf11b66e8a799492d8709ba21ccd90c54c7c5f446370bbc7e2579d0b0477360f","ssdeep":"768:VQRzoYMic5jrKBzf/csKDh/GxEsBJWnO2iPRvzLsiWY:KpMVjOzcPVOKJn1iPRHx","tlshash":"3ed2e12fe1997b7a550136f649372eb5124b0e5a54c3f878c31c68a8c217b08cef5ab9","first_seen":"2025-12-24T22:39:16.249591Z","last_seen":"2026-06-09T00:47:26.135306Z","times_seen":79,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/AiPromotedGamesWidget-Byj5O19S.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-Byj5O19S.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-784\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Yug_3VC9FLGVN.kXmD900l4mtKwmv5s7GfmHiITMFzk-1774138932.3729453-1.0.1.1-Zy18tNbF6No0m75y8Ic1BCbvs42cr51K0croYkxGR096n_mDoIcy1FGZcDiiBP6cAkEnTU92WYluW6trOO7m79dMxTXhWIDpo_GgICl6V1Rpe0Aa2qZkVQh3M.Uzb2Go; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQXCQbXp5rQz9Uf5YMZB910GScUn0W0d7gDKM6SmyMbGiveR%2FwehhReqOeCVSoHrNAAYieE5ZKKB2an1ybHI9nJ8uescnbwqpQqG30awpg9sPx0%3D\"}]}\r\ncf-ray: 9e010a65d97ca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1924,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1923)","md5":"84edef470c315c31d3de5ed0b5105d95","sha1":"635ea115da194dc2ab021eefd7e1bbfefc98e181","sha256":"1843bbc55023e4f235458fcdaa749beb69d2142f16b74f6e32a856dfab2b77be","sha512":"696adaf49f0aedb5ef049390a5c7df027af83e4c4454986f813d7604bfbe26337ce2e3a64be60378c83f166536ac28161aa909a88837dff435e4d6719699beb6","ssdeep":"","tlshash":"8741642bb019ca7cf22c06a05294f745a42177bdd769a0ecbaef1900731409d337df85","first_seen":"2026-03-21T17:26:39.577171Z","last_seen":"2026-03-22T00:40:18.077623Z","times_seen":4,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoJackpot-B9xPGuUB.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/CasinoJackpot-B9xPGuUB.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3803\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=5ikdpHbKiOwaMnJtpZSFmcElqhDbxbdf5vKtOhQXBTc-1774138932.728012-1.0.1.1-0.DaLTDxlAcY1vZd9FiEqV9AgKp_xSqtH8cVJglsVilM9aPYewGIBq4hC5_LXZrFiBLSAtcSKA4.RCLjE3nMdoRX6LoKlWnMtdJUfep6ufa_t1rvd2_oc1lbJXnz.OFL; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5cxQpzaQkLVHGLBBZytzbVGjyZgnfYzWXyVestRnHgIBH2Mwka40WIbmXe9n9Ogc65nL5j1fNDA3rY4BixYfPoltGFp7GbFUAY3CX5RhHOoTu0A%3D\"}]}\r\ncf-ray: 9e010a680a19a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":14339,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14338)","md5":"c681dd00011ca8f396b64d03b78c8d33","sha1":"984d629f7a1c2f7d57a81c77cfeeb02d6d851e53","sha256":"cc99cd3a07b804e7ce37254db7c6bebf70961a2a0284038437e5dedda04b7279","sha512":"0fddbf82b4c4250aaae9c53cc10ba58e7909eaed6003bf15e48780bee54835b67ff55a40cd92ff4cdcdd8d8ceb6e786ed4b3f85863ccc23d29b3a37a5b402742","ssdeep":"384:bm6srKqqF3EjFOFEGOpOpeHMtGRxeG/Pcy7x299pP8FJgr:bmB7CEGOpyts/U3Qgr","tlshash":"19525c05f012b7edbcad54f7887ee0297a5e1aa9c71808b8d1bd6c313c2c855760b7ac","first_seen":"2026-03-21T17:26:39.564114Z","last_seen":"2026-03-22T00:40:18.034532Z","times_seen":4,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25320\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:02:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69401512-62e8\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=VcFsntj40ttQXXEJF4upc6rSTcOb166X.CtP7LPVXWM-1774138933.5820587-1.0.1.1-AsRpRGqq7PNkyfy8d78goAp0L1i4uVgRzO9gJq_GGYzdTSg0T9ICsuqF1U.Dgd_XJq.mGzVL8F_PpAWuX.DVVDg5IfsK5bUQBoYalAxxXLNIvzKydTa414aopTHCMJPz; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkc4O6H4SwGxPi3Q7EGGLiH6Vr%2FpEOVSaohHZAXNzHZbU0tKZN4LOM7%2BtgNnHD7cWU3%2Bjt0ujnpqv77mTgOCFaR%2B1uH921oLt94NLAfIZC%2BnGIFqVg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d7b15a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":25320,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"acc869e91de526af3cc37efa5e7cd714","sha1":"96a65c3c5c64e544be0a75f42e7578147811db69","sha256":"57b2bd8ba04c5fc5617770502b74fbcbe449dbb22377f04e8042147dcc5da51b","sha512":"d35b2e9c750078007a66162e0b7956edb0b85f33f4e5fdaa25c83b7a4bbbb8e7540ff6eaa60d012ba904f0254bf0d35ac531b422eaa44763a785f64f01442722","ssdeep":"384:2AJyeaoQmlt01QNg7DPEqZK5Ud6nw4Gw+Ma8iASXoK41z+I/gYbz0n89B/EV:ZyeaoQmlS1BL6uwLHSYK41+Hc0nce","tlshash":"82b2f1b0154ab6d3708548666c0d3e9017ce8f5034ae0bf4789020229765f5fe4cfb9a","first_seen":"2025-12-24T22:39:16.063814Z","last_seen":"2026-06-03T04:20:31.844925Z","times_seen":63,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1337software.com/jsler/84503772f8e0bb632ed456a62768855749bf973a5aa1e31ac1f74231a7e8416e_638.js?v=1774138922.657","fqdn":"1337software.com","domain":"1337software.com","tld":"com"},"ip":{"addr":"104.21.18.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:02.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1337software.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 21:22:41 GMT","end":"Sun, 26 Apr 2026 22:21:17 GMT"},"fingerprint":{"sha1":"5F:95:55:BA:76:9C:CD:43:A3:6F:A4:3E:A5:80:66:4D:D2:28:44:64","sha256":"F5:15:94:C3:78:66:6C:E3:C4:E5:0E:41:60:9A:8A:70:CD:D0:14:3F:44:71:71:C9:21:DE:EB:12:78:64:02:75"}}},"request":{"raw":"GET /jsler/84503772f8e0bb632ed456a62768855749bf973a5aa1e31ac1f74231a7e8416e_638.js?v=1774138922.657 HTTP/1.1\r\nHost: 1337software.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5970\r\ncache-control: public, max-age=172800\r\nexpires: Tue, 24 Mar 2026 00:22:02 GMT\r\nlast-modified: Sat, 21 Mar 2026 14:23:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kEt%2FRuYNDc3%2BXOjI7QA3Aqi%2FGjhq52jJWCJGug6O%2BKTqaiBKBd0OAztfYDIKjn7l39ccd04sYIl71aLKLBCVTsIP0rN8x6ZFcf9lbiryNhE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e010a2c7ead23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41066,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"6d91726555fe07a1154fea1c30ed0f40","sha1":"782ee20411bb074f0b804890c10d37180c3a8d4a","sha256":"74b494f7884e3ef32686d6c63285fbc2f99e2e5064f35b62e49bb8f6975b20a9","sha512":"2d43a74f22230385e6467c7f86e2c785192c6e83dd2651dc12a005ddb36307620e5e0802fa7d799c5f05d0c5b35d877ee88f3ee68aa36caa14ab83ac5213ef42","ssdeep":"384:Fcdbl8dYsbOSLiwi06cZTfwzHzbllIZVHHxGCEfp:FcXpN03ZTfwzHzOVnxGCEfp","tlshash":"3103639b707244e10a723770be929eacf7c2c12b92444d52bebc415e0fbbc25a5d5a7c","first_seen":"2026-03-22T00:23:19.335183Z","last_seen":"2026-03-22T00:40:18.140868Z","times_seen":2,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":75,"dns":64,"connect":1,"send":0,"wait":262,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/HorizontalSportsList-DFiYn3iS.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/HorizontalSportsList-DFiYn3iS.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1a6\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=_NsxwDAL3LwyysrSg6azUJwmd1SsggMfXoZBDac7bFc-1774138931.7783484-1.0.1.1-uDeNhxqzWBU2p4AgtTWzOu29sFeW9Zm.oS6IO6KtfEz9pbapWOSJveIlCaOaTEz91W3O0lk0IWEY.aMf2yl.JRHCPVjc_E5oXLPdlE9ZrAv3Db36okFTaNMVxlSR1bJZ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oxtpWv97s9qSX31SlwpDsN0uyKZvVcsNTjIwld1ZufRKRG6bP2in3PfuXm1fAwUJL5lqI5lZHHtyo5dRp6idflBXMaLr%2FUzeoQploZ95iWBLupI%3D\"}]}\r\ncf-ray: 9e010a61d8bfa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (421)","md5":"9e97ea9cb856db5aea93097b24ee839a","sha1":"3216ec0dd353cfd8cedc5dcb9bd06e0e6c04dd2f","sha256":"f0d7ceae5b03c9848b3e7891ff4b73462b8aaba69044516382b1a93b9369f97d","sha512":"14d66003f13803ceec3064b27084a362f95a796ae8724feaaa0596aeac0f16141f26adf5660e396af9ea9fff16e3d322c005a133c116c489f80f414be0fc1850","ssdeep":"","tlshash":"06e02b81d8618ef55a2a88efaa5c24846122087cff47a6b1d29492182b7508bf72a40d","first_seen":"2026-03-21T17:26:39.547601Z","last_seen":"2026-03-22T00:40:17.818577Z","times_seen":4,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/TabItem-biu5pdkE.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/TabItem-biu5pdkE.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FavoriteGamesContent-c3zcF83Q.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-19d\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=0i8uDoNLh0pyzK7UHsuq6_r6fjbjW_EswIsmZRSM394-1774138933.5129316-1.0.1.1-JlL0.OY0jz49BpSKVQENOhR8VUIgfB3BWM_u2gG7PVFuz6x_YE9pgnvadTmz8TDfYE.jlcm_Z2SeH9ZMBa.vfkKTdoUk6zx7ar7QG0ifITtdaaFeTHGvGXJMcW0uSrPa; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nro1RwkJU1ppE%2BGqYWozqvmq6KFAX9geVZSUv3FIHYXS9D35sJTvGkWICpwjg5kGK1Y%2BtebgmlSDuGooH7JmpYKUeqsJtF5GcHGAeWBZLMP9fas%3D\"}]}\r\ncf-ray: 9e010a6d2b02a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":413,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (412)","md5":"e572f7147d80a282b702909de3e002fb","sha1":"0c64bdba98c648a7f33e629de97d0fa6a3d04608","sha256":"4f0aee67a47ed48c4eee0cdba6b7f30408ff84fbb5023e85b2ed8963ca4a458e","sha512":"0276a4ce85222bc1c92cfe0ee96591fff70ff13f56fd7fab3d0607066f8b0ed98cafd146bf4f05d575c08da4d1b3328578b0a65ceb3c45b365215a81aa713942","ssdeep":"","tlshash":"5ae02b42b020f3f5982b94d6d27f94c7322209dcda9588e6a0a22440072e561f74ff8e","first_seen":"2026-03-21T17:26:39.549871Z","last_seen":"2026-03-22T00:40:17.82563Z","times_seen":4,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/content/images/casino/icon3/dacb4368b387653fbc8eb373984206f6_casinoGameIcon3.svg","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /content/images/casino/icon3/dacb4368b387653fbc8eb373984206f6_casinoGameIcon3.svg HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/svg+xml\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 14 Jul 2025 11:44:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Sat, 28 Mar 2026 14:46:41 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\netag: W/\"6874ed82-39db1\"\r\nage: 34532\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=SaHptfIipkLEYP7auLJQnt.dlcbZD_CIHIeF8zxiU1M-1774138933.9569461-1.0.1.1-7j3ZzL4GXwt7DGr.BlRSUNs1gg2A1L7KHBcO5oxnN6.d5buXS_V5.66WsC4X12Fx9ZCBn8b.SyDz.VyZka93RohaEbWrlFKatCFo1GY_WAdW766OkqMqWX2mOeV076th; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBhNZz77ptIVVU%2FWAsQ%2FnAJMr0wTQBzfa8yuyVOc4u8tyPEvbTTV%2Fq%2FOpQeDwxUpn%2F3hJCJQkWuR95Vv66EaupmeUpD9M64BlYE%2FaMsrfLwhMolUXw%3D%3D\"}]}\r\ncf-ray: 9e010a6ffba3a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":236977,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d36be2eaf9e04912fdb8808c5fb5ecf5","sha1":"92e5d39b817f8ca6fc19cb510b09abb67bb1cc3d","sha256":"65729a6d7b4489ef8f4a11df39cc309c6a19cb7aea054d125e719847336d6351","sha512":"d2ea1453db444d456101f6b64da01d1599a174694e152a11d62023eed22d51029b1316890e5f6a47a04477b70b615f778f712cb7f49216ddefe86a6beaa33cf5","ssdeep":"6144:ENJ+Upg7tzKcdWp+3nAPOpoKoD81z+kkqXjQ88EwU:sdO7teWW8lRHXj3","tlshash":"fe3412f5afdbd5caa2446a0ec3d72d1c4c4f699f6350907eb31076876b30a93503292e","first_seen":"2025-08-01T02:56:52.063415Z","last_seen":"2026-05-31T21:24:04.022542Z","times_seen":93,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/397.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/397.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":34,"dns":2,"connect":1,"send":0,"wait":32,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/459.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/459.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/pageBuilder/pageBuilderCssConfig.json?v=1774138800000","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /pageBuilder/pageBuilderCssConfig.json?v=1774138800000 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:05 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-115\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=79bxIloRvu8mW7KtPcl1QEBk0NWQai916IglD6Vojs4-1774138925.690441-1.0.1.1-UKKuxLZlsXQNQ_WOirPfLLGk_iibXBKyaxHfUIJopQQQTHt37Fe7ISHhgpwAozm.PeX2Txhy0he_92TRPq7fWc_rk5h7Kco.swWKJA2K1XhaODyD46bmJkNaDt.3BsQQ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TejYYdcg3kfEB0X8SzJx4%2FzEG1wvRMUqUhOYZI75Noy2ikq76ArR5feixGODzrZBbug%2B%2FboocoIkLRFPxmmTrWdvTvEjOgPBrtrXyQDR9LAoMOc%3D\"}]}\r\ncf-ray: 9e010a3b78e1a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b840efc6276e4fd17616273698453549","sha1":"ff864e74ee5bdcaa4e9d713064ec9e6d7f1a7c33","sha256":"01976b4e4832d5fbf632314e6b12424691dce201138109710061a398178dad89","sha512":"35bb7dc6b4e44da9f15700eeebe04d122ddfdf41af0834f0329169c0fd98d3a9de79ca9c879d92f1727985ca07ad519870af961ba75a865a898cdc2d5035fd6c","ssdeep":"","tlshash":"c0d02b119679cf52235a51b2028becc1641bf207118086896485e2bd70c96581993f24","first_seen":"2025-12-24T22:39:16.255341Z","last_seen":"2026-04-04T19:51:35.016652Z","times_seen":24,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Tooltip-BFFrse_o.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/Tooltip-BFFrse_o.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-334\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=F89BuS.k8Ydw0olicikXb1uXnjzdKOLd77hLk_CUe6c-1774138931.8160186-1.0.1.1-3eWESe1LcbpXzj8uONLU_TbqU5ztHIaxhgHFR3eMcJ14KSefLjZJ7KF5TKuKfpGLJZSNtIZqugv3Y6y40qvQDFSHB8yDZkX5Bm.9v3x8LZgtSXJF46sCNPz9xcyUltSv; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQcWL5YMy5EqeZRg%2FoFgpT2DUKnRWiesFF1OeLSwiaIaZGO%2FXD95smNlvBm2McG5DlS6PrY2yG9BP2%2BkBUHjvDfpR5GHeYfkIgmSq6HnTtjABG0%3D\"}]}\r\ncf-ray: 9e010a61c8b8a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":820,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (819)","md5":"5dbd6b1605963511da70c190fb431076","sha1":"32b83b773ff51e26a8bd8f6aeff9240609693883","sha256":"f8a2abd269bc866e1a5ae41159e53934a8d94ba6f6f8492eed8485e7e3d4ea31","sha512":"d09ba6a204efe8e82fd72310385d53c4c6fc14515407c0ba66c041ddc19ba91768fa100d5ad439a6362d8a263c8610e9a5bf86cdf8310dc55ddd146b64c2b9ea","ssdeep":"","tlshash":"0f01c246e032fbf4a17654da142e856d7153266c7e2f58f16038058e0ae4984d317b8a","first_seen":"2026-03-21T17:26:39.364122Z","last_seen":"2026-03-22T00:40:17.826468Z","times_seen":4,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/PromotedProductsWidget-Cu6mpMj2.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-Cu6mpMj2.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-84d\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=YpH9AxOUTchCZSI_S6s3iPEgAui_XRQYen6dqQ3wb2A-1774138931.8076553-1.0.1.1-AfKRKqhMnQFwGWeQ2b9A9V9l0IGjK4F2zmX9OfWZFHKR82LKSfyMIMSLuelK_10Do8Wy51aBbEkawDRwhnPfVEEufmkBndG6AGUUXSU7DQpHWwbq6qQ07SsGysRjUqHp; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KzlkEbaDCZFG6dSmWHjeblMX90SFhw3EyRvWZ%2Bi5eubXblfU39wJCqotvz%2BPF4zexHw1SCVEoHS5%2B2e6vYVnQG926xS6glNX5hrmx9MsF6FkDDY%3D\"}]}\r\ncf-ray: 9e010a61c8baa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2124)","md5":"7c3153e4aa4ebdfb11edb1ceb74721d7","sha1":"63a1c4e73b113fc5a7cf75360a42fa5e1d09007b","sha256":"0efd8b0b27b02dfddaef49296858ac0af81408ba031a3ecc38d2362f5b57f851","sha512":"31680001416098b2b40a7dd8905262064badc782cc6f7c7fc22afb10da2e29273384113d1b522894f476cf38f68e66ada739b7e8b3d94ad2fe13cb74e2086723","ssdeep":"","tlshash":"5a4175c2d838b2baf63e5cec214510c838267d18d96589b56077bc1a9139812bb57ffc","first_seen":"2026-03-21T17:26:39.657319Z","last_seen":"2026-03-22T00:40:17.80938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/SmartMarketEvent-BbcnqqZJ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/SmartMarketEvent-BbcnqqZJ.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-393\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=wMYUbe3dH0v1DJ.lLpQWxWr0_eYna3Wtb1LviSx0iJI-1774138931.8332028-1.0.1.1-n_3BItSgjZ.3TZmAhCC9usdWL4qHhV3kq3K0V3wZ.up1rsIv1IEGWeVXRjV72wYoBA_H06otlK4jRJAdPGgLyGuMMbYsGNMnr9KD8JkV_ZlFm6FiSRJxINdT12ukyCzJ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IX42XF0NrOcvazS7RjTnwr70K76VTmLuK8iUrZF85h05yP2z1x6ZQGrOSSuUCJSNJBBB%2B1lAqid%2FCws%2BoKLaJgUfhIZ%2F60f%2FTkJ6vhifyyD11ZI%3D\"}]}\r\ncf-ray: 9e010a61e8c7a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":915,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (914)","md5":"f2e243077781c5b4c30585af2daf3bd1","sha1":"7de46f25b06f1b64016b2f8ef354ecec2ca889c0","sha256":"88032c64572d2bf0740a517c16a6490fa0e009974f8fd42bbf8882e5a4937932","sha512":"4f46dfc7adc759e6df653732f6f6f1d2ad05d75229122d62478d3840ce62813a7f9c11d5c16b23ad193f158972e0638bc3f97e587dcfb8b1e595636313672fdd","ssdeep":"","tlshash":"1911cc96e480723a0672c8bdd1109f42416812d7db20026ae58b8af173ae0fea24ee5d","first_seen":"2026-03-21T17:26:39.407622Z","last_seen":"2026-03-22T00:40:18.157676Z","times_seen":4,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/SliderMarket-D-md2TM1.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/SliderMarket-D-md2TM1.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-502\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ydtfFwQDlrJdslbOehGfSVjYFjir6.YK2uG6V2X8pHM-1774138932.7881007-1.0.1.1-yqzWg.WoC_8vUdFOkx4wiLsrF3lyyuL384y89FOcDoXevfeyjlwplM6n_lqbW9bSQTtjMAoFbsh5EdpIZT7wl7xvlugJuHLpPE1MZIRsdib6ijIhEJr4MOpyfdyI4CRf; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t633itiaswntf1y9nW5o%2FE0iNhOzQtJo5N4NGflsg5OHBwVZXbVpicY%2BUzTQk3ERK%2BcQ%2Brcei%2B%2BFrmov75myQ3nLBcfZheJhuVHVZq7VEtnJdfs%3D\"}]}\r\ncf-ray: 9e010a66b9a2a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1282,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1281)","md5":"32d5d2bcf811f8d4c6b3a3871683304a","sha1":"b6ea75c35f6dbf3af65fa63667aceddb2f465e11","sha256":"eab3a50aec4e7691d32944dde37807869bc419ec8e7bed97f48c59acb0d85d60","sha512":"58163a7ecf99035db9755cb25ac4cbd82340113e82d909b582607517919cb9123bc734e6a0c7d0330e86cb9d1982b3f6ca7c1307bcf5d40eccbdc98a000a3f82","ssdeep":"","tlshash":"82211059e530e6b837668ccdc134172231351aa39bb4e2c1e06fcb111b38245b35fb26","first_seen":"2026-03-21T17:26:39.451705Z","last_seen":"2026-03-22T00:40:17.815239Z","times_seen":4,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-MCEY36CK22 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\nexpires: Sun, 22 Mar 2026 00:22:12 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154495\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":466095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"8ccb6bcbb859a74eecbf89903848518a","sha1":"76bf9404414341288fe2ad96c60ddc820bf9223a","sha256":"ebedfc94b8f12e28cd661e7da5820d9a1a89e1167e66b1d84852f065f7f047ae","sha512":"d7e1515a733637da536bfbdc8bfafae9e0162c9c6fbae1ffc62fbe0d401306ac7d47e131410bafd5082c488f985b714ffe16e16c5d596dd68cbadc6676f1d866","ssdeep":"6144:v4BG6hIFyKht23cw3KH4V8qCxkur5/wPPAPH8tiBM4QuAX7qO4UF:vyaygCcH28xoH4vi","tlshash":"28a4f9ceb3d670265396f478903f018ba57b28a2b45cc899f189cce42e7465a4277f7c","first_seen":"2026-03-22T00:23:19.338282Z","last_seen":"2026-03-22T00:23:19.338282Z","times_seen":1,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":108,"dns":1,"connect":7,"send":0,"wait":32,"receive":41,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/501.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/501.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1553\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Apr 2018 05:48:38 GMT\r\netag: \"91bdfabc58d1d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 11:27:43 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 219270\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ufO.Sxz6d1LOGED22px942muxnDrrenkmwthB3Dx_jU-1774138934.2541177-1.0.1.1-YsAL5AwaxEGqAQlYqMGu5eYibFLkdGG50Es9HTgvUuBYzBmcWC3NSEUAp24awNIm6LsHdRXw0xzzt_zA2eW2M.hkDkTS0oWntsAeA8yhzfoBCi3qQM5QPxZAVpnMaF.J; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMLOOSTcV0%2BcCJTR%2BEubx5p5%2BxCcAQx5zNUzRHY2Wv9B1lLShA6YFmZsCTzKbZXc7hXK76k%2BB86LDfDzjnRkcPoa8GRsWmvn%2BXQHlXIcoOs9z1w%2B8hotOkXz3qM%3D\"}]}\r\ncf-ray: 9e010a731e7a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"195e42a3ed0da86c469a643f5503d275","sha1":"f397e9c29e76d27a11122ac60780a47366ab8be2","sha256":"38b46854aacc74662d396179b8a5c314b60d439d5371a20225e6cc92b585b89e","sha512":"86ebcbb424eea7834f9691738cd97864463df6f784940b52d5b5048a6c75e1b74c73d93a69c19f4be6435268c71f4302343f97c1a543483ebab98d6bfc69c599","ssdeep":"","tlshash":"d031e8bdb34d5a7dd069239c3724e915ee26327f81110ee2321ca3604338ec94ba9eb1","first_seen":"2024-02-23T14:13:45Z","last_seen":"2026-05-08T19:17:55.831589Z","times_seen":213,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.galabet116o.com/","fqdn":"eu-swarm-newm.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galabet116o.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: rVFammvYpKVyyOcrPeBwXQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 22 Mar 2026 00:22:07 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: iI0e87nCW8yacf975hNa88MTB3A=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\nVia: 1.1 google\r\nUpgrade: websocket\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cf_bm=ex89NmATa2ffSeu1aj4q7l3axx99jeaJ8ez1N.9LGLw-1774138927-1.0.1.1-WwPyOrCxSTBLilW_1KvvlcsZP9L8GrYfc3bBo5sFC7ejSIG9sgo9ecfouTUwNy161nBbCikIXHD77t2waqLZ6_nwh8kDuvt8j6qf338bD9s; path=/; expires=Sun, 22-Mar-26 00:52:07 GMT; domain=.galabet1060.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5QXzDtKcBSkbmoSnG7mHrGsuSPgRM4VgqPq%2BOzQiMpk%2FKPGgk5S%2BxwIx2SvnOOTZOWbsiasmX6OaiO8jPSGTbeGbnJ%2F%2FecBNKRfs410affNqlAx5DmwDzyABelMIIgIf5xJQVOOolpanp%2Frm6OYaJA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nServer: cloudflare\r\nCF-RAY: 9e010a467d595ebd-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=78580\u0026min_rtt=78416\u0026rtt_var=22200\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2835\u0026recv_bytes=1576\u0026delivery_rate=36115\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=d05caaa511e53f8e\u0026ts=147\u0026x=0\", cfL4;desc=\"?proto=TCP\u0026rtt=479\u0026min_rtt=466\u0026rtt_var=155\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2357\u0026recv_bytes=1448\u0026delivery_rate=5474480\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=9a38213b77fd9e98\u0026ts=616\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":0,"dns":20,"connect":20,"send":0,"wait":604,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"eu-swarm-newm.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"eu-swarm-newm.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"eu-swarm-newm.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"eu-swarm-newm.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/GameSuggestedEventsWidget.B3VqF5zK.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget.B3VqF5zK.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: text/css\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1ee\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=MFzLm3we5Tz_aV_56.ejPHB4GDSlbeOIrChrWL0tGvE-1774138931.1028643-1.0.1.1-bZdNMdq93gNHfbKBuryITeooqKmLCmOcJDL6uHN8yFji5PDAxyigFboWW9APmgigZI9qwP4omWuzu4zHf1CKROCSKuIsP4IXl_ISfnMbbxG8VVy13qojv3G35GWxfjHf; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybdVrMoBDlCiXhOO2VFmOvM7kAtGq0ihY4pPhv6GHyPgpVzgwXclItp%2FAQbSaMcHv3EnBn8POgLgWnCsMXaH%2BBqDbCNcuL%2FTss%2Bl3uwybhmrnfU%3D\"}]}\r\ncf-ray: 9e010a5defc5a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (493)","md5":"3d3f0fe9e1a11530bcc5b93d9a483aa6","sha1":"5f6ec492c5fdf825ded4910f380466bb23a50332","sha256":"bee73c23ba614c70cddd4a90715357b4e5247e83db72e74289f80e59f6349fc9","sha512":"3fe221c3be766eda2e1f32ce4d86509e3766421cde94b5098cce1e9a4dd253c550901190f197e517d10e96322ac66e357e727e78382480d92bad2d1efd53d670","ssdeep":"","tlshash":"a0f0e9218f34ed35a4ac03ed2a77005a5760e195bc5039f86fe1bf158a087e61ce82cf","first_seen":"2025-08-13T22:32:23.57413Z","last_seen":"2026-04-29T13:47:02.73876Z","times_seen":41,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/DepositCountTracking-CxmA8res.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/DepositCountTracking-CxmA8res.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-285\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=wl5mcc90nkGBMWR1tLICKGTjZzaFaWWz2mUxedyZMFs-1774138931.3039765-1.0.1.1-HntALDsmjF9_Sm0kNn_6V_8lkERxhLrkTpT5YpLs2rgUBV1S_pRDwegAt7yqYGVkEgGMxbkCJ8TgNCTK.panGXu_VmPB7pmGI5BYwjqbh8F7c1rmM0u3vf2QJGBBINIu; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNY88KNQDtoyr88EBPkFivSS%2B6oRPx2R2tfOmlzWnzBydHXHtA797iJ32rCtOBdVurZoRoQBxlivh%2F3T2js8r2l%2ByiaXQQTmsibyN%2B6%2BLC9i8zw%3D\"}]}\r\ncf-ray: 9e010a5f481fa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (644)","md5":"9d4ba86dc1f2979b2061087e4b65ae2e","sha1":"c36d25550b91506c59fc28a1c9b6b59a818cb8f0","sha256":"0b444453f7ba634138131d4bab736e6d47b934a22a327e836cb1e4cb7f40d07d","sha512":"f5430ddcb6442609556f2f0d0aa7898a44c81b15386b06983ea5d12509976d70f1a6586b8c6510362579762c4634075f1db1171cf6679776be80b3aa1601efff","ssdeep":"","tlshash":"7df0dd5768b8d5f589493a8072c798a362f0791db906c8c386b98d470208042e4ccd2b","first_seen":"2026-03-21T17:26:39.534402Z","last_seen":"2026-03-22T00:40:18.198864Z","times_seen":4,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/513.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/513.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:15.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 740\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 11 Mar 2026 12:57:50 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: yfbKbHax_b7IMEA1WXjd47PBRdK3ZaCC\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 22 Mar 2026 00:20:24 GMT\r\ncache-control: public, max-age=120\r\netag: \"183e77df6417b705a7c0881bc6eed4ce\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb7e95405d9101d4320e2582fcead450.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: l9cpv0WeUvjIVRilctzBdsXyjpFiciugDhM2gYqsitsIrFaml2ks4A==\r\nage: 112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"183e77df6417b705a7c0881bc6eed4ce","sha1":"d3ddf81f8b2d425f75fbb248ae561cd60032c28a","sha256":"caf3577f1a9c90c6793784c2e72dde2cac1cb1ae6e454cd01af808ae90b1bbbd","sha512":"b082c0c9f92685517414ab95bd281be3dfd20a6e2e2ddfb48950906dc417c08d2b3321cc5b1029f1973aff44e4bfb87686739ce16860a640f8e0a3dd104382d7","ssdeep":"","tlshash":"eb01c0cc3410b1b78d4ecb23c9193d037ef58879188a653454be5b4c00ba9ad039ada7","first_seen":"2026-03-21T17:26:39.639761Z","last_seen":"2026-04-11T18:43:32.371083Z","times_seen":21,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":65,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/conf.json?v=1774138800000","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /conf.json?v=1774138800000 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-2e4a\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=hMuNUJTmdxgE2727.oI5bqLIA1YIZra4ZjZ8CpECcZ4-1774138925.6836166-1.0.1.1-MicE2bbGPjJUO.otWFGdeLHyVvZKTvHolWR43yoG5zOUNarMekS8ISqAJvhrxXyHqSzEJXAhMmku9rkVdZIQ62qsk9Rgwi.3jz3AWayEARN4HRMIEDPj9rIzWn0qjK.x; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsQtyAgFx%2FYOsNnzGn4s8%2BPEcWm7BDI42wjY6WutxrKHNacKWPEiJPLeEpNrdUQsE%2BN%2Bf0fiFq8%2BtDpcOltPG%2FIn0%2BgvPbZJ6KGquF0FGOVPNKE%3D\"}]}\r\ncf-ray: 9e010a3b68daa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11850,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ed91bed7ab43761496225be6b8c5df18","sha1":"e54d100517e9754814485eb020c5edaaac262c7c","sha256":"3c5e4ce335d110636bf15d33a1fa2cf28fb5aa19b22d87ee9ba44c41925b812c","sha512":"94a0c6e5f5abbeea47c3326a5140c728250deb7406a899c267d6e025a8c55958df8bc3ff57aff8fcefa6067346cacc923ca72d09d6d1b0b7b0b2111a9bdf5977","ssdeep":"192:NT9qoAsco7sco9vB9sW8Dx69AXWAoIVIa10dc5ZNdNH5SCb+eruUFDhGtC5L:NTAoHC9J9L81AAXWAXKdc5ZNdNH5Sk+S","tlshash":"e332b66363549ebe87c983c8b1cb7f0bd4bf186be9c5f495c94cce294179a590213a0b","first_seen":"2026-03-21T17:26:39.366912Z","last_seen":"2026-03-22T00:40:18.167173Z","times_seen":4,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/VideoBingo.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/VideoBingo.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=ueAvOijTIKyNv9zgfDKLGQuCoCDA_q1GDsyVo.v5njU-1774138931.3836374-1.0.1.1-bEXJlw3_f8hbpbFf_PWmNJ5EEMsEC7o0w_ZOevIkXLxUON8_BY5uOSfb4YXLz8EbGxdU8o5eO8XJtWNxsM2a2Y581ojc6H4jh6YTGgEKdB1pSGPQwK_y7odOcdXPFC12; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=auziPh4gDAysB6LN%2BWGmm68N5v2HbtRNj%2Bpj%2BB5UPWioCzhyOpyFNWId3edXizMhTRlbmTfSgfzSmhUlIQ4rPs9cWBuEmPc11Z5hdrTSBUucE%2F%2B05w%3D%3D\"}]}\r\netag: W/\"68627129-7c7\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eecfd1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cbae8aa582bac1aa011b5159e475a38f","sha1":"0d140fc00b303fd23250218e03c28ccf986a39c7","sha256":"dcd44096973914fc9f8fdeb79a3dc5379403c3d1411854e634ab7fe444578271","sha512":"05e2c75c337a1fad9f895fa0b1635725d1681e774084ed34084444508df8dc8501c01644b19ab4f9a948c1e5b6621fd67df4fec41eaaeaf187d1a9e90c58244b","ssdeep":"","tlshash":"e24133d5e7b0a6ac2ccca59d6f2148d7350ae0bf6db36a5ce22edc580b53e1c0611c99","first_seen":"2025-09-19T18:19:26.310809Z","last_seen":"2026-06-08T11:36:24.299552Z","times_seen":76,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/BetslipButton-CNMBkbkj.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/BetslipButton-CNMBkbkj.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1a2\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=RBM5impaVNUXwTFS7drp8k6cSdLJ4ZNk29cCm.6h83w-1774138931.5932784-1.0.1.1-TYl37y6SwCvDZg3h3bzHxbCPFC13yEQUjYjPqjJXAFVGxcnpQmAMUlG_CDXuYnIkDApUJ2BS1wWh4Zu_5uBR8fVTaOBbyXJm4rS7t_LJw_73LqbgGNW.CvX1fRawd5mJ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gRYhKWcynghguTEXB9qfbaxgFtpEO7LbAbvVC0kSBQSe%2B8%2FrBXacXt3gWnDLgfe0b9J2%2FSxKcNRp1Vtch6AJhZ9cQL9f2%2BFzG06wpaqDMRAdrGw%3D\"}]}\r\ncf-ray: 9e010a5f5831a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":418,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (417)","md5":"249176655ccc714dff62a32ca7344125","sha1":"b2405b4b60d6bc4ac573b2f02a73ccf50fb95d6f","sha256":"55fbe0abfc99ec5c3486183b6cccac4ee249dce7d36664b5fc8cee69ecef62ea","sha512":"29545a89b954d8bd838e455af8c8ff502c6cdcee4283698ee957784188664cb775b081edf08664d5fe201a8db623035e744a105952a58a07402ea03407da783a","ssdeep":"","tlshash":"40e0f1468948c2fe07465dc121078502343269bcb340e5d280a92c527fb4689c45fa6f","first_seen":"2026-03-21T17:26:39.706598Z","last_seen":"2026-03-22T00:40:17.78654Z","times_seen":4,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_c2798e3c84b9cdb7f38468addd0d2cf3.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_c2798e3c84b9cdb7f38468addd0d2cf3.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41468\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 30 Sep 2025 10:15:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68dbadc7-a1fc\"\r\nexpires: Sat, 28 Mar 2026 14:44:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34655\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=BK5_PdpEdEBx1aWF2LF6PvaZvONH9I07NYCVLkJ1pvM-1774138932.4537554-1.0.1.1-ydB0tOoKEMqJyXqJFLUw4XN8lqE0M9p3TfPxKIlqdiH8Jf6AVAJDX2iQp3CIiTJDvrzkkg3OVn9O7hO41.CM_OvT_5CwmE6JjhyYcXrgEetX0IDRgZ3KnBevc0E_NlXq; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c9q7P%2BRzTARdVfjZH0nizlx%2BmM41S9wOP3ciSOHvas3Sol4pvj7nJo6qjUJXaKNGVy%2FSi%2BNTlbK61QZkSRV%2F9nK%2BwL6W1JpECzxrrEe5qEggTPL44Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a65e97da0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":41468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"73cc0bbb436e26b9b598c9e48ec14826","sha1":"9fa3cc5ab9ac1a70c8c28e384ce695bd2904fada","sha256":"fa1c9533908deb22f89990a240a1c0ac2aa61a5a33e8faffc1dc0475e33c639e","sha512":"195f91ab33d65511b31e95308c95b79a5c097f78a0bbe4a99e081a5704085fe8fcc601ae0d0adcb0a439b0a9bc326f597d62e31c26eb359a610f474a41aaf2f8","ssdeep":"768:EeFn2FhdX/7CJjYdDHjp/VvUlF9791MUC2Fon7y+sHuwQn2iCP2TqbyTu:i/ajqTv8lF95+fTou7CEWF","tlshash":"5013011dde495ba80772339c878fee86d0924aaede24852b18ff112997047ec43af594","first_seen":"2026-02-24T14:23:51.089025Z","last_seen":"2026-06-06T23:43:56.054142Z","times_seen":53,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoJackpotPools-fAp_tFNt.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/CasinoJackpotPools-fAp_tFNt.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-371\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=xDNJ5j1U_gt3.UARMb2GXQ_RIMNewQf0d52O9.5gtU8-1774138932.6881611-1.0.1.1-sCuGXI.FgwS6tF9BdQE0uW5cHSrAKsKpAhMFll2t_nA9ksnHRMyPPG0Bomu35I_G96LRFsRAlqz41E3k19KaBnZGp5zNVA8S44kgRnPh5MrDL7LPQnOJcijYyODa7nQh; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHnugZhuG7WO8F98dQQVJJJ502mm5z2i4NaxBduGr99X3LC5QBBW%2BLAyJM4za%2F2eJ%2BxjRtSYCs%2Bho0NF6x%2BYtJzcK4iuuzoT3gMgnH68GQGXcGA%3D\"}]}\r\ncf-ray: 9e010a681a1aa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (880)","md5":"5918d349ea75aa702165e8b092d3b0fb","sha1":"753be348a9b1bd9cd842c8d6a3df0ecf613f9226","sha256":"7a95ae3b8b2ad563cdfd333ee422aefcf2307238e68e01fc031003f559450718","sha512":"de4df633ef185ed57d2964b09d2bbaa88b47a08b90463bfd9677bb3c6bd777f4961ebbe889a80df9636576890ff9d1bb27a2e052618458bfe4b1960a5e9fc248","ssdeep":"","tlshash":"0211008bf02bf3f4c88c08e14079495a073e2f7af71181c0946c5a285b66847f5a87c6","first_seen":"2026-03-21T17:26:39.606633Z","last_seen":"2026-03-22T00:40:17.962048Z","times_seen":4,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:08.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"30:09:A8:2B:50:A3:5C:0E:2F:11:01:80:FC:9D:20:3D:1E:0E:65:96","sha256":"A4:2D:7A:76:57:2B:43:3A:8F:A0:D3:F3:1E:A4:E0:04:33:BD:AD:1F:12:67:F2:9C:D8:4B:7D:42:6A:6A:FA:35"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 22 Mar 2026 00:22:08 GMT\r\ndate: Sun, 22 Mar 2026 00:22:08 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1013,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1013), with no line terminators","md5":"383b0ea01b33567b53a79051a169e4c8","sha1":"48210a781c5b0e44fa32949a209cf7671c8daadb","sha256":"5790df718df4241261c16ddf7796fadf57d33a04c16a0a795138ba9f424b0b73","sha512":"c9e831055aef8857f5f3d2b54008d695982bd69160d9869123b19191cde633568b9b1e6ef6d1af915b65f35318594b1c10d8daf729b093dced8f4f263e88f622","ssdeep":"","tlshash":"7e113eb22a06b0350b7209e1e1ffcbb5e852741cf15c89d8a912cac42faecdbcd05685","first_seen":"2026-03-21T17:26:39.652855Z","last_seen":"2026-03-23T14:49:47.264151Z","times_seen":6,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":86,"dns":1,"connect":7,"send":0,"wait":25,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/LiveCasino1.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/LiveCasino1.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:11:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=o1vOaUi1m7bIGmoJZ_q5lCdvZc2j5y2VDTejMovylcs-1774138931.3932588-1.0.1.1-naZ5ZjysA1M7JW.5OF6Wdapo3kAw1SLtYrqw5QnEw5JY3MAWrPGEjPTW2V.uMVdlcwJ4zIv9zrUhFuMmVfKKk9MvSlFemGIlmRIKwSgkKgDpKB3WxX7MML7AWGJaRB_y; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s64g%2BCL7TAfp%2BwxG%2BbkdkPCWGMIJYuHFJPGP7nVFLLCRQ4JNmkft3ObKxPmbask63IDAN8dnunkoxbAu9pshoIKW6UIHg5DhiOU4xToFQRI7Vtf%2FYQ%3D%3D\"}]}\r\netag: W/\"686270eb-5d7\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5f0d591525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ab76ddacc7177297110531bdc4b7b09c","sha1":"9e3a3721140685f8b095694cf6690ebaeac63278","sha256":"67de7a9984a8f57a460e025368985daf653eab425caaa5482cc1f3af17c43104","sha512":"16ce040d64e0b45e159c5a0bc2ee0ddbcffdf3405d0ae5dd70b5d1297f657f9067b8cb03a1e30811720c804e7997d3c57815e9b3db2ace852941fb2a7900ea13","ssdeep":"","tlshash":"ce316de876b0ed7c5c9d3a9ea7195d542c9ede6921007ba5db0c8c90c3cb4089759c8b","first_seen":"2025-08-01T03:40:47.847838Z","last_seen":"2026-06-11T14:30:13.413203Z","times_seen":1020,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":87,"dns":24,"connect":9,"send":0,"wait":502,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FacebookTracking-CT90FiR5.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FacebookTracking-CT90FiR5.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-2a8\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=BCSSGikdojeNNzgE4xbjRT_3fmrAnJ0jKCzl2qZ0ydE-1774138931.314851-1.0.1.1-85Ay_elGEzJfCSII3.SvJWlkiJCfKOQajAiRGAAk7JNb1w9BiMqgqZV8sd7Gd8MZaiDrBaeUdZuDc4Ixs.3SdKfeWY.WoUVUWrlUrOjm.61uHZBNLmZBx7_rr2_HZyEE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fRSteG430xHt1PKg0RB6V9VdmOcmZm0Ff9VOyuMJAfA9bARUwuF%2BF4gI2r6tu1cDiKVVgfBNahxIEMjCYIfurd3JGeh0E3sfxZC9WXQRke3FcqA%3D\"}]}\r\ncf-ray: 9e010a5f381ba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (679)","md5":"b0d0301b2eca6fd01c8c09252d6d09e6","sha1":"ef908a1000f37352b6d4953e7c167a79b92bf5ab","sha256":"6481d9f40bfbfe3c886be16fa7c69fa8857ddd75866b867992f82ad05ea17071","sha512":"e76daf2ef88da9da386b72ea073a4c5b5d62606628fc178d1b5237675b33cab92443f01354e8ad9fb130f419fbec9a44119c02e3105d229e1c18cd644e4e2681","ssdeep":"","tlshash":"ab01fe0f2c45b479167c18b8d3bbd81425ba590a358f84a5c6c3cda5262458640cdbcd","first_seen":"2026-03-21T17:26:39.417431Z","last_seen":"2026-03-22T00:40:17.952753Z","times_seen":4,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FacebookTracking-CT90FiR5.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FacebookTracking-CT90FiR5.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-2a8\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=62zbajEgyQtz3IociWxHH7NAv.4EADP7bb7mpat8A80-1774138931.6730065-1.0.1.1-7a8gYpJjrbkjx6kVDUXfEwppZWGMVit5pystq_hItejHjrxZyE.NJFYOj0QNv09uSAMehmHyOD.HCR1fHMItNa0e33pbmucOP7DmYDYZlkicbv8q8mHH8DZAUCf4jssC; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbkP58jIRffNO%2FcwkebHAelv8gx8ZuJQoOuDM%2BnY9mctAJCC1J%2Bi2qM5n2o9e2wpgt8whtT6MH3iomd7cFWE1Rjcy8MJVuyXw%2BaLJqdCRgypdH4%3D\"}]}\r\ncf-ray: 9e010a5f5836a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (679)","md5":"b0d0301b2eca6fd01c8c09252d6d09e6","sha1":"ef908a1000f37352b6d4953e7c167a79b92bf5ab","sha256":"6481d9f40bfbfe3c886be16fa7c69fa8857ddd75866b867992f82ad05ea17071","sha512":"e76daf2ef88da9da386b72ea073a4c5b5d62606628fc178d1b5237675b33cab92443f01354e8ad9fb130f419fbec9a44119c02e3105d229e1c18cd644e4e2681","ssdeep":"","tlshash":"ab01fe0f2c45b479167c18b8d3bbd81425ba590a358f84a5c6c3cda5262458640cdbcd","first_seen":"2026-03-21T17:26:39.417431Z","last_seen":"2026-03-22T00:40:17.952753Z","times_seen":4,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoJackpot.C7UxSYfT.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/CasinoJackpot.C7UxSYfT.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=ax3pYMDKGPKU.BgtML33Vk4Np8WhhyKfWxer66Dm3rs-1774138931.7317243-1.0.1.1-PUN9PzAbPUrZqAgAgpJ6UUZdLLUumsOeh4_ZOIJ8uBAYWc4KmM2b_qJEjnaPO9uWGW53jjnMCNtmLkcKoHOh5na_76BS3QV6BO1M1jOItjjXJK1UAeOKR0J64pmP3rx6; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UQsUFOy0mPMgIxz6b08jfRnyV0FNXkNdWsDVE5s7KVH5%2FOlfcZnZ%2BAawuM4D38mYzChU3tN0%2F8TmQRmm68B0%2F9FhIWWcOkAqfRPLK%2BACh0uSKs0%3D\"}]}\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-350b\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a61689da0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13579,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13578)","md5":"f4b765a9546788982525c8a3553e89a0","sha1":"7d63a87af57a4817902dff7028c5eb67a7cb3ab5","sha256":"40d650a4d6aec8a7b5d75907a552768f2df82848d3309a378029fc86accd4517","sha512":"7774259bc01f672c99b7ed40a3ae4f3f8ee403355d9f71b955cac3c215c23235852eb216fafd128b92396d4e3d27b41ad34f15a30c21e238112d176f3150e7a5","ssdeep":"192:5aKQrrxX/YyrspdNl3qLq/1R9z7g6mbftDxzNfDFDfhf3fOfNf5flt/1ttTptVFg:9UVwVELPh+EDaLDRdng","tlshash":"3752ee07656f33b829ef653726f0f7cc9a3c4879c7126564a8d2a2194b8f9b006717ec","first_seen":"2026-03-02T15:10:58.211677Z","last_seen":"2026-05-17T19:17:53.627904Z","times_seen":47,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/content/images/casino/icon3/536b7cea3286ea0352ad3fa2c18a3b91_casinoGameIcon3.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /content/images/casino/icon3/536b7cea3286ea0352ad3fa2c18a3b91_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27954\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 14 Mar 2024 11:26:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65f2dec9-6d32\"\r\nexpires: Sat, 28 Mar 2026 14:46:41 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34532\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=VOTvExxowUzFwPn.u4I4vInXBo7mYbLDYf2Nve3PLbk-1774138933.9564807-1.0.1.1-T7XRKQ94D780RZ4pAKl8FMa6WRj3VCuY7JQ2d0cYSY.JPi6NFJ69qdH.k6VunvNtnDI2dsGCxq7Ab.oK9H7bAx6akOPIohjDyuCPyGsC9RHNhE5TG_p13wFEjgXjU2OE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYBMJTUMxGb%2FaU8JIAtb1SG%2Fo6EMOlzQfIVJZonjvzgqPk%2F8V3EcR%2FnObS88H%2Boc0JVvlTObES8PzCHTZ7Q2RRvk9Dk6Fi79S4%2BJskLo2CiVI18N0Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6feb9fa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":27954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e376980c1324fc8d5a11c0589cb4d9e8","sha1":"f8248fc0f7ef0656544a163e7be39ba0eafc2cdb","sha256":"362762e2005b5ec8da4c5f98be076ef65fffa428365a44a7026fc924370b9dc3","sha512":"504a452738add174e580d6b1886dbfa0c3401f8cc6be06cf9f8ad8cd7dca81b2ffb9e55740608db932fece5155c653253b5a4889998ab51ada94a0d71aaa4d93","ssdeep":"768:QZUnD9GkOk47fv8568PlqS91CZckCLnWZ+Q23w4:Q+D9GkxH68MStQ23N","tlshash":"7bc2e17945ae32335ec3a20217226ce87226dc270f56a9db10c0e5de17954f73ac9d8f","first_seen":"2026-02-24T14:23:50.951828Z","last_seen":"2026-05-12T17:10:48.572757Z","times_seen":14,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/387.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/387.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1662\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 10:38:10 GMT\r\netag: \"e5225c581d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 17:25:41 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 24992\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=S8VCevVQgOW4CSKQ72pbWvuhqUC2s23XlIl7qA0e0NM-1774138934.2584593-1.0.1.1-scqLAUJiMAbfnpNjZRbHZQBfmLxsHDYo2ahaeYUwtIY0Xd9ijBE.OHz5sDunNIMipl0A_w07xbVqGVDzgFjNkZvq8cbG3p8ljXB4xV1.MkUnQwLn7aD3y1tAJAaL8FKD; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARedMqoPtG57c01m5EsRUoOPnsDx3LeD%2Fq2otSOC2KNY75VHF4RfIxJ2zCnDs7Ws1QtcDMcKhGxnZTr%2Byt5Ca5ixSW3MUAzH5u%2B9CH4uISAU0UmlzDE8fS9ZNyY%3D\"}]}\r\ncf-ray: 9e010a731e90120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b16f64e207e4368dede3fa6b06ff0e5c","sha1":"cc79b7af6a799d1c4dab98341c43a96638ae1588","sha256":"c28f5b69c14fa6cfd0ab8cd0cb5e5c6cfca7442268ad7c90e055104202987b61","sha512":"25f8724eb3ed32e6fa01a80126d735644e7c9c447aa30e69e0c43e877108349abcea5b47e5df524bab0f597fda0d6206bfc256ecf563e2c195c6b196f9924043","ssdeep":"","tlshash":"ec313c981f2d28bdb7c08d2289704853b4fb57d55dc33744273dd244ec886b97179790","first_seen":"2023-11-04T19:13:32Z","last_seen":"2026-05-30T13:54:22.884166Z","times_seen":497,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:06.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:06 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e010a4178bcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-06-13T19:38:05.164521Z","times_seen":22054,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /loader/fasttrack-crm.js HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 13:55:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: X9ovE_PVlm7QTMnZs7pgGdxk3XrTsm57\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FdPgu7nUnzBexktm1sdgiUglCz2wesAzLuCSbRjeAsvYpK%2BcroxhW4W%2Fq8qNYRYlSOT3B9dHDZk%2Fv5DcoV1y6FMAGw4wKHT0uZNcc79o4R5EEJf%2ByRzoYGHiuQuWg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5e29eae3156522edc7886df59287259c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: sRDbkR-LbAlPYSqnaE6V9Xu1Ra9iJHQJQ1F-Cv0unOc8ZGgj6wq3og==\r\nage: 2896\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"0e62b669f80928b5dac9ece193256095\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a679c6f0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":56,"dns":22,"connect":1,"send":0,"wait":11,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/TvGames2.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/TvGames2.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:31:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=BSjyKZPqZmiMBjYEsxfZAabaHw5d3v5AZ9bRGkPmXvQ-1774138931.4197783-1.0.1.1-FXt05zT1Y2iKOBcZgZmF54xq2ST_h.x06ddX6TwwQuUO6CKcU2fgl3zBMDtStstxmjXUVP5lVAEXTAtPYbIDzoLOl2JKX8MmoqzjwC1uKSn3rW1nGNQvPmT362U8cCOc; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TQI7nIUZjRr%2F9u0IMrnWShBGFaNAbB9igwz05Rm4awGtzHe5LQACiDiMIlnGLce3TlJvIfWa0oPQzRGDu0rSky1nUShcaSw%2BRIfLUS9cLQSvR2RuA%3D%3D\"}]}\r\netag: W/\"68665beb-8dc\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eed011525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60d24e57914ca41e702277a9ce44e813","sha1":"bfb08c8dce26d91b1fdaa008ffdea07bc100e0c7","sha256":"144a8bd1616f38a95bc6e7f59283e462f358a2dcf79e10cd7bd256d49e6e4134","sha512":"43503c3df559cc8b5fab3dcd299f5dbfc8d5a6f9dbd458781c53a409d859ed730ffc24420d462b914b4ef96f1d63d9bb508ef733bad33edadc5a2d12b22e4eb5","ssdeep":"","tlshash":"7f4165f9efb091f46dd94fa9ef324cec750e68fd9f220a84812c861c66a3d94d644410","first_seen":"2025-10-09T13:22:28.980997Z","last_seen":"2026-06-06T21:30:11.472171Z","times_seen":73,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/Mobile.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/Mobile.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=d2b4nAHS8Iq8lfKvnGIi4yD9VR.qkpM3kJQsaPh13Yg-1774138931.4333293-1.0.1.1-AgXO.LQFAzdKUiewNt2PrtqK1OEn4b50WktiORQBKpmTtMSrfhwM8Ta8Tsxmaw4pbOnHam1sIZJe791aQ5Sqqd3nRMIS_w_73wISPzMS62hTqZaiMOmRAs0O.wzGgil4; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TaMTceestCIfxxk8SZWJNSPuWUS3LhLY1%2FNznN5tOOIHLgJUUohUa25deeKziM%2FcluinFa14d2mbuJQfFQOoZlmTkzq44ZY0KmzhKs8RaTNXfaQi2g%3D%3D\"}]}\r\netag: W/\"68627114-155\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eed091525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b140aef15c3a0e2328970dbf675bda24","sha1":"77f0fce91e82379b75340bef8bcf39509d1c55eb","sha256":"08c2a0b66d7c329ce1e9e957188e98e920311984544c6d824a29cb8c73d668c0","sha512":"06c19a313efcafa154900f41bd864dc6bc5764a82dfaee82c91ec6fb360d61e0da1a1bb8fa6c58dd8a14f6cde01b85fe25e0ab56a9ba3009f4be67f99eb1ddd5","ssdeep":"","tlshash":"dde078e5b250d40ab5557d53b3fcd5a35e69f0d1da940c39713e791e0fa3034128d14d","first_seen":"2025-10-24T05:32:28.297874Z","last_seen":"2026-05-14T23:49:57.513273Z","times_seen":55,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoJackpot-B9xPGuUB.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/CasinoJackpot-B9xPGuUB.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3803\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=wgCEnuIJiNXgFJs9tgn4CHudhtys2DYwlx_8J_PSM4c-1774138931.7100272-1.0.1.1-FlHsAB64_OLwLFPN5qqBFkx1LDvCWxRiIK78mptL_XgHd5hOCaDuaOZoOTaqup80BNidsbs4cwJ4FXN2gKcn_Y1WVKtpMwALCA8YUPHGzjploQyzSCxDq9WwgYLZVO8v; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2B%2F7zkklSw6ORmAIJiabhT8LsfHKOrmAhCdlTBBxaam8wvTG0AQ2mpsLhp4ZqWIzo%2BgaVVS%2FGYBRbv1PjoOzzFf7Inr%2FFYVM4lifazG6NZYsrB8%3D\"}]}\r\ncf-ray: 9e010a61c8b7a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14339,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14338)","md5":"c681dd00011ca8f396b64d03b78c8d33","sha1":"984d629f7a1c2f7d57a81c77cfeeb02d6d851e53","sha256":"cc99cd3a07b804e7ce37254db7c6bebf70961a2a0284038437e5dedda04b7279","sha512":"0fddbf82b4c4250aaae9c53cc10ba58e7909eaed6003bf15e48780bee54835b67ff55a40cd92ff4cdcdd8d8ceb6e786ed4b3f85863ccc23d29b3a37a5b402742","ssdeep":"384:bm6srKqqF3EjFOFEGOpOpeHMtGRxeG/Pcy7x299pP8FJgr:bmB7CEGOpyts/U3Qgr","tlshash":"19525c05f012b7edbcad54f7887ee0297a5e1aa9c71808b8d1bd6c313c2c855760b7ac","first_seen":"2026-03-21T17:26:39.564114Z","last_seen":"2026-03-22T00:40:18.034532Z","times_seen":4,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useSportData-D5mIIwaP.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/useSportData-D5mIIwaP.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/SliderMarket-D-md2TM1.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-6ea\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=erfo5qu2KLnewiINb7dD9zuE9N2UtafoeeXt2ed0q5o-1774138933.404583-1.0.1.1-bPJ.5VQXZomlWQKQHo8ksm01bll4jCRFkkj34qSXUIxnMN4VTMSEvDSM7T.2WfUnoOG8izjdLtzbkpe2uJ4jTm25z6rPmK76.UrpZ.bV_0J78tHb3xD71mdbYUz4f3OR; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1k6zZ0APUefu%2BmhcfM4BtiTYtSy2%2FvVahIVnCzRof0XYZUAVsFa4E%2BZse1RuZo7E4Ui0OGdXPYM2snU1IcrMnwoNly6AS3C3GLr22AAVBEuApfM%3D\"}]}\r\ncf-ray: 9e010a6caaf2a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1769)","md5":"f7bc8fc6052d5a655061f7542db1202c","sha1":"aab80cd0d185ea5888d946784ec94f8eabca2227","sha256":"d61d6440417a3709d55589c4c2f270ad4bc8a5639a7d27a9c0cefaf90a5212e2","sha512":"f783b09da3370e101d9e384a486d58f3bfde3019d730eef3934a85e1118b581dda88ecbe89de383af7011cf602f7c77da49aa063faa46101b264cdff3a3f36eb","ssdeep":"","tlshash":"b131874cd074b070953944d5d1ad6e14e434191d3b32eed1e85c0a197b6368e027ed7f","first_seen":"2026-03-21T17:26:39.579526Z","last_seen":"2026-03-22T00:40:17.780877Z","times_seen":4,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/515.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/515.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1029\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Apr 2016 08:12:51 GMT\r\netag: \"cb921799a59bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=FXocYxouFEJ4_pHHgPHhddoUFQcTVfE5MZMNPdlnADY-1774138934.2606997-1.0.1.1-AxPbqNCPaALGYW76X8tXpDLAANl7qe_.ndB.Nnm.wp.LW1wu6HUjJ9TVIDCRjg7ZXvfAHXKv_DkpRilaXB4OH4l9kzJbJ_w8m6t3sUAe5QIZViARhVoHjvRnJ8wc8ImX; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6kDWO4wIWlebyjgRS9FBt1kPaEwaVHR%2Fq1q0YNcy%2Fv%2BGVvkpLgpsq6hH5%2BUpgV90Ohw8fQqLVlmN66AKQtyU2TxTfYp%2BQG60QJYOslKsHTNQHngQpokT682EPkE%3D\"}]}\r\ncf-ray: 9e010a732ea1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b29efbd9f9238d7495c60128a784de11","sha1":"7dcfb12c2a20818967e6d575634d7f6d327f351b","sha256":"dd1494722d6d16803e9d5a22c22c9e1239b1251899767eff66181bde7dcf0b41","sha512":"0d9abb38fec12198c30ac99c6dc61078d5090746994a4b02c386f55cd1e8c182076f3fad9f13bba233f66541e35d0223a7f9cbd0b9c2fe4bbd45a2f55e0d9f3c","ssdeep":"","tlshash":"4811827a194d3c3cab4a656604234465b45cabc8b362a329b35284301916e98299cf63","first_seen":"2023-12-09T10:58:08Z","last_seen":"2026-05-23T17:36:46.422746Z","times_seen":272,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"dataspot-wss.galabet116o.com/socket.io/?partnerId=29\u0026EIO=4\u0026transport=websocket","fqdn":"dataspot-wss.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:15.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /socket.io/?partnerId=29\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dataspot-wss.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galabet116o.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ruaDf9QrTSlEs5R/GTteYg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 22 Mar 2026 00:22:15 GMT\r\nConnection: upgrade\r\nSet-Cookie: io_affinity=1774138936.422.40.750950|a4492465e2c0cb857f789e83929ab8bd; Path=/socket.io; HttpOnly\n__cf_bm=7mfkKGuOEwomwClzIAU6BCHaiKqhq9BWW0VGJd3x1m8-1774138935-1.0.1.1-n0eicPgkFR9kFFsz2GDEQ4fvBircHWZoeP1.EzZLB5_EUQygUbK8p7O0owvLdp2XQFryFat0Lcai2_10UBqrE_xXWjl8V0l7jP_KFR3oGds; path=/; expires=Sun, 22-Mar-26 00:52:15 GMT; domain=.galabet1060.com; HttpOnly; Secure; SameSite=None\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: h6C1+Nbym1wB/xpyN0araUkAr/k=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=03RJUKxKR5huWfmRRfKfhluz%2FF8m4xfZ%2B7Hi9WFv94eIHo%2FZPdoj01k8sZ97L2HXoQqCuurh4G%2FYsHRKAZJIredeqUBzVCc7adXTMM1Y38ncUwnMQClqa5uZdDBca0YNc3PrN0MTooZnTsyRAje6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nServer: cloudflare\r\nCF-RAY: 9e010a782ead0883-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=64693\u0026min_rtt=64653\u0026rtt_var=18264\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2837\u0026recv_bytes=1621\u0026delivery_rate=43843\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=56a4a01b9c85d310\u0026ts=169\u0026x=0\", cfL4;desc=\"?proto=TCP\u0026rtt=476\u0026min_rtt=446\u0026rtt_var=178\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2358\u0026recv_bytes=1496\u0026delivery_rate=4984509\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=2dd681c7bd6eddd7\u0026ts=501\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":0,"dns":32,"connect":32,"send":0,"wait":488,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"dataspot-wss.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-wss.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/Predictor.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/Predictor.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=95ir7k16mrg0VqBgAD6kYlEvzYczCfFzI2kAQTjRWeI-1774138931.418146-1.0.1.1-tO0VuQaOOyrP7BsbBjHz_lStdXitDNAMOlk6yzT_5K.MeVj5an4JxZdfSwIVAEudFti2w0Q9S6utEaAE.U9TwRn9tBNSkr58Nc_VaCpKMFh4ljnYUTu8DN4moN2evonk; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hsspEAVPihx2p3fTt2eKZG8q1vyzVsvcFpyySzWbNz33o0bR7R24b8zq0qhcsT7g8x70psCkV0tbZZWfe17cPRcyqwHlIiAkP%2FoLJr2%2BUye8MvwBfg%3D%3D\"}]}\r\netag: W/\"6862709c-2ce1\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eecf41525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11489,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9b3949596034c0e170589b0d298d8d80","sha1":"3ef85a6cf846b4e3c0453652cd192a92db48165c","sha256":"14ae74f8558911ae15ae063621fa5b3f92699ca40af8034feaf7da18e1c5b5f8","sha512":"cadc1b604d9bbb9116a00b9cae1c19156c46103627ff76f5040c8f249ed6f0215f662f45a25d9fa1654671e8c6cfa4b258cc01d7f165f4a6d1c443671b91f68b","ssdeep":"192:IDzUUkrlb5YU/aMstNifMcLwW/ykO8piJesLUoyua7aASt5KsM50FgJGPbdGl+Jv:Ehk5b5LCNi1LJ6gsM5KgEPJGl0v","tlshash":"d2322fe7cb30c0e038de25bede2a5ed93a1ab4bd5ab1d044536dbc09d6c3dcad628540","first_seen":"2025-08-06T06:15:59.472831Z","last_seen":"2026-05-14T23:49:57.427522Z","times_seen":97,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/ButtonWithAction-DLXWMp1-.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/ButtonWithAction-DLXWMp1-.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-10b\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=vVNZRaGRC7BnFbp1zayV8bjE4WY8bksrxuIbTQexJ18-1774138931.6486096-1.0.1.1-MKXUx9z7nLGn4On95MfVp0J8n9VRmz77Hl10COJaQ91BZjrz5q2sEzUg3G6iHMbjZndZjNa4w8KzrooNWD5mB4YzmUz6yXowedDuygS36TrHzeUWNxUSTOxWFLbNn851; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TjcsI7rVfOIS9oYW9sMnLmXJabXeO7egMd2dPnSfhOZ15nEvOhRl7B0oNKnw2rV3zbgS0Ll6pqTA%2BU%2BMeWKXMXu%2BuXI7%2FkgGH3ZzcWyYs8NKCrs%3D\"}]}\r\ncf-ray: 9e010a5f5830a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"2e89d4b67c0ce532f32cec3235e50823","sha1":"cd66782d133d21562bde53ab4bf77c8e3753728d","sha256":"d8c3af745c755279a4955eb849c11298796114efe59606016a33e13402edc40f","sha512":"909db2d090af51aa3edd713ba8c6171b576535f7507409d5af21c8735726120f3812da1c036c9d58f717c15f4dd2b1321bd4ac4658db2883c6ad48901aa138bb","ssdeep":"","tlshash":"0cd0950f5451d1f603c5fdd0a22bc41139257d60f7c4c451804819403b7179dc11ef2f","first_seen":"2026-03-21T17:26:39.607991Z","last_seen":"2026-03-22T00:40:18.009198Z","times_seen":4,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/LiveChatInc-BwBeRgTB.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/LiveChatInc-BwBeRgTB.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-b68\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=RbM46_cUfyHWOQAeTPoO6jP1sGPq01vrQJfCrMha6uM-1774138931.685912-1.0.1.1-GduerFpk9ouuxX.uMK5gRY90SLo4857aagE8m8dp0FwOVEOrxEhYBq8rvMVvCzS2AqiUaS_4H3woPUrGzbtsd.eo_Iu_BE2tTdpo74XAAMonJoQWRx8.OfxtBueYXPDp; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P720O1%2B%2FQNlV3%2FvTOnjKGEHp1TYk2LngzXOPnmrkBVQ12chZvpYT6%2B%2BHdxxkKIIPb4WbPO5Uto5%2FaNwQ4MS1QEDSqiLBGaXUKPSUTRq9Z9kYd48%3D\"}]}\r\ncf-ray: 9e010a5f683ba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"ad95729555f741c465445ebf3651cf28","sha1":"35cd25bbac874733d0a3858af8b224eef62c8201","sha256":"50bdec45d97816d59745395248bc7435f2d1da33aa11b764e9f933c1f4d5c4ba","sha512":"79a4e2988c4d3515744af4888469b744d228f5affdaeb7716bce28e24fd9e26cbbfe20cb40095ddc128d26f953b50616470237d22bd98d2131830798ed737955","ssdeep":"","tlshash":"e95124dec43cb4b192ae67d1323f7b5f71165b1aa4048d31656c4f0af62a0cbc467aca","first_seen":"2026-03-21T17:26:39.425495Z","last_seen":"2026-03-22T00:40:18.011274Z","times_seen":4,"resource_available":true,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":694,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/check-auth","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet.winwingames.io/","date":"2026-03-22T00:22:11.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /check-auth HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet.winwingames.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLzd%2BKQhVVQfoemMqgOlNT5tEDih1wvszgGhrMmwGVlaXkPfUk4kSp5Fsqcn0mYLb%2FSjDZLqmQnwI8DkJPRRqLO3Oef3Dlyx0oBNoap3HYvKH%2FAXAtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e010a609bc6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d0ef894fa1c5fc383cce96e2d857de6","sha1":"fe19a48e71f224e79f27804ed7d5632c065e5de3","sha256":"0b3443a9377c829f10dc4dbc281475c7bf89f141d56af637ad5c59b74d00b2ca","sha512":"988a2be034f9f80c25a7cdcbd2659e4310baea3e590b0f9fe75ac9d0d7b1d90a8e8b07f33fde07627f3f61eae405d36f9afd6cbd20061b3088ab844a0821abf7","ssdeep":"","tlshash":"4c70000202000222ea80000803002a3388008838832020200008a02000230880002802","first_seen":"2025-09-21T05:18:37.922942Z","last_seen":"2026-06-09T00:47:26.092103Z","times_seen":91,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useJackpot-BDZnzus2.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/useJackpot-BDZnzus2.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-58b\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=7NF_4RuCwZEv0x4dABGkRruhHMCe4vfAvvYu7sSzoqI-1774138931.7327883-1.0.1.1-_p38UQWmUbT.JWJ2ir2qzPOg4wZSjZWUf1AkhXyqw9MvWsrVdhyMt4MV96j.suEy_jeoQg7Kfq3e8He1aSVx6tnu8MzNC.YyEi85Ubt_3Wni34EE2j4EL9i.i_FvnCqF; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=10r%2FfaD7U7Y9Tl29ph9le0%2BPH4jlbPhrg1z0n5j6dS0mJJL5ENUAX4n2IcPyN%2F7pAS9HBqlhcziRDyXMdctjF4ubfWaVXt7hFwwqvA1wuY5rcPs%3D\"}]}\r\ncf-ray: 9e010a61c8b5a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1418)","md5":"b91eb26317c6780c283223b75661a38d","sha1":"a0914abf4e0d8af2b94ce95c878e0a49ea138cdb","sha256":"0c253d85994a8748550577e8079833492bdfd33a1b82fa7314770e22f81bc51e","sha512":"410c33c726832bb0286d9a569b16e16b35697721b3de1c84f4ed5c67e60a40e5671c281a1a57639c6341c438efc5477beb869b37b08a8f69748cb66dd2830bde","ssdeep":"","tlshash":"46211045c069e5f8f48d8cb10177cb2a1b3c3f7a7440e0a0a0ba5ebd57a8d41b6a0f92","first_seen":"2026-03-21T17:26:39.469762Z","last_seen":"2026-03-22T00:40:17.938534Z","times_seen":4,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_1e0032d5ab6bc47ae0ff53da48c1e21a.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_1e0032d5ab6bc47ae0ff53da48c1e21a.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18886\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 01 Oct 2024 12:45:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66fbeeee-49c6\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=hrL40yvNe_5wPYfqj.QfKvmz6JHYxTAs00iJNMpxXWA-1774138933.5852625-1.0.1.1-aT7f8TfHH.W2kH92yRJizjWStbPotAe0ZSPovCbV_Egji1m8kCJXuR2Py4xytIaHUuM6bdv5hpvmQbZIggksN7aY68HHuhMmSYVOG52GgGfsLAwC9CsbE0iNt_2yT5Dv; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLcuhZbZKDzLASoD1w3I1HA7zoRvlix3SCvqe%2BbXzdmX9QQPhTA%2FH%2BkDLxOnBoNFtsh%2BXjtrGvEPqGjlymlAXwDq9gSNomH5hcrv8SqFm16fCurBkA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d7b18a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa5bb675b18fb9ff6ebcefc6c52b2b80","sha1":"aef0af185eab795ed1e66b6fd386bb2bbdf99a51","sha256":"9e57aa30fe310aacb3a5660d08ad36e93609014c63ab91e2674217cc81ebc5b5","sha512":"bda4926c3f51a68f3466aad782bb0e212b59ebc698591699ce3927038ba8a8dfbd52ae66535da875700c6ef2cbbdabb67fdab3a92629c17cf2bdd2d909459623","ssdeep":"384:uTMJDMzfI4dhbysbrfdO/1rYKo5nvpEg8SA21BvLQzOSMGz:XJozfI4/ysbr1O/1AvlD1LQKMz","tlshash":"4082e1099a7934e9329308fe1b21614d31f03ab66c405758db7ccbe410c1d956b6faf5","first_seen":"2025-12-24T22:39:16.22703Z","last_seen":"2026-06-06T23:43:56.14056Z","times_seen":55,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/Popular.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/Popular.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=hbI4oGMEAdTtr96GXXsrFJMg5m.tTk0DSyPfcH54kHM-1774138931.4097733-1.0.1.1-ZNMO.nWzgRf.6ios4oj42Ic1itpV.1007SAd3BoMW7JT.vOvbWxwxT4nrIUctyc4sN16O5P1EPAPdWstHuAPCF.1fZIAkHQpjsCtTvcNLRJ2bDU6awNdRP6WnIbZkKSa; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGZmWYo%2FsJW%2B6%2BZpdhOPoLStASBkmZ5sRS7agrLEvCPvaHGoivjLmLbyQj4q%2FAOEX0NARCADpFPgCrwDQiXh3jGkXg8lNtOonrL2YeaNYGABvSuCFg%3D%3D\"}]}\r\netag: W/\"6862713b-6b3\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eece91525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c5f467071e8144988f2ffda2539a7fc1","sha1":"8a2e6953f7f16e38d2c4fa1273ddc217cd623d5f","sha256":"c8979e47d3d8b0c74956b41914c9b7628b362e6013d9f040fce1ea2219e64857","sha512":"1e58d1f9a594b6d9b0e3968c137216904a37abef225ebf00b88d6764df8c8ff0226f5f6307a23e48944071bdc36ed786297968db893be66cf7ddca778015e6c3","ssdeep":"","tlshash":"463110e8da56ebf43c54a30ef7386cf13157085b78d38224052f1e8a23dd519afa8862","first_seen":"2025-10-26T18:38:27.855792Z","last_seen":"2026-05-14T23:49:57.482171Z","times_seen":63,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-BgO3MW-h.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-BgO3MW-h.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-173c\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=S.QioVp794WGwNJPWNep5G83BRz16qAjtnjMyJ9x61k-1774138931.4082465-1.0.1.1-_cpI..6510ZXnNBbtzjeOAw7oUljYzuBoxNfxxl5xh7P.tFF5MLNTziFck9a.PtNipv3nPbtlXzlZLoxm0mwrQ7_LBFwKbdlTiVekjx4nCJ2HIaLUZIr.0KlKe4n_kTs; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40xuu%2B5RO1TvKPMMCewZHq%2F%2BVfRb8eswbxo8YFl7Ae0BurvSioL5tYxPtNo0lnD3EHlrjKOFzbugqX8BvayPs4VuKd9AhXCI7mV7cex5UIcKIvU%3D\"}]}\r\ncf-ray: 9e010a5f3817a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5948,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3085)","md5":"21a327b0619c3c1a324057951bbd14ab","sha1":"4f00a495a58ee62d19e6b5849989cc5618177634","sha256":"f69a26ae2b8c112785730a553e7f2b7d2b41ae889627f26f0b866746c536b6d6","sha512":"b0b3795759a6c3180fd9e4fa453572caf9644e0f2dcb10b11f1b5e526ad304a6fe0011fbf80296459ff6e8c516f52aecfad1f5ef58be025985b6c9c261bc7841","ssdeep":"96:q1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:R+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"16c1a65631907530c6d244a6914f42aeee3e7638f00f50a0b23f9c6d3ba1525daa3ebd","first_seen":"2026-03-21T17:26:39.40142Z","last_seen":"2026-03-22T00:40:17.987168Z","times_seen":4,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galabet116o.com/storage/medias/galabet10/media_751_d9ae3c894307358d99e0d666e91a8018.png","fqdn":"cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_d9ae3c894307358d99e0d666e91a8018.png HTTP/1.1\r\nHost: cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3192\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 23 Aug 2023 05:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"64e59bcf-c78\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=fZlUnR8NgP2_5njSyu9olZxuSm1F5xvjhujmIxZFXxA-1774138931.543171-1.0.1.1-1KYrb2PH7IaMYErQd9xCgzit6W8NGcA4V7YAgev8p6obLc9gPubzkkhGYXkzwPXu4HMAL8TLYn0PisGZ5GBHQ69PNbG3AHXutThTZV.B8EFKyr72LRx57e0zH5hBSC5l; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Bj%2FQvHFMPN0SgKyIsrJVatpMszp1BuwDhIvVG0j9wVxldbO4dmIuXb0J9RChoLkK84SWX%2Fdg2ilygeJqWzZV5GWnylKVEWUT%2FMZxQrYNh7lzT4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a602859a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3192,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7abcec36faa73c3c894b361fd966fcf6","sha1":"46f3c98f019e59da6263dc8278edd18eeb5e36eb","sha256":"1084b9e09a8774b738e99814bf9869be91b3c154d88bde64c9eac5e399153b19","sha512":"bbe0c85875f870eafc2ecc05b3c21d5a8c0022f1fe92224e65d3fb3f11d68f5793947b810d00c612361e96bd113a510f2329aab9437de415f5be3e1551800cb0","ssdeep":"","tlshash":"ca616df43548b234e081f076129690e50436be4e219eee17b597737cbf2515cd0c7149","first_seen":"2025-12-24T22:39:16.116509Z","last_seen":"2026-06-06T23:43:56.103943Z","times_seen":54,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FeaturedGames-DmW74qti.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FeaturedGames-DmW74qti.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-1ede\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=AOXMPHk_VY8jYgPSXAIwR6nML4XFqoFxFK65kZQXlyM-1774138931.7980647-1.0.1.1-uEL5SL23bAYRusxAUv7gR.WmqwBcgTcX7HRPrv_I0cTJn6WXCwVtoloCgg2GbWa4OUAyzgdbp74V4l6aOJIDc9vA5agTRrPRuVbqWVdKCYsADT0syTX.G8eoUtQhKu7h; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wcgtXdlCj%2FnN9LO0xGO6ZamhYudn3UJdiICxQfYYlx4ehukcEk3IcHOAufQnzUp6BgT8Voi1KlaK6NWz0iCfFX%2BB2WC8MbFtL4axL0s%2FcN%2FyGBQ%3D\"}]}\r\ncf-ray: 9e010a61d8bba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7901)","md5":"19d9e6b05b0ea4c2aaf5ff097f62ec60","sha1":"74da87d2807e21cbebe3f99804c583b50dc62a6e","sha256":"1008f34230526be542075acb3e641fda44c1617623c017461ba74c923b97e742","sha512":"c59507f99048474eb0597fcc27a39d06f2b2d9231d85354a2d78d12c6ca76c71b2a90f1d4d56984429591c0cccefa143a20eeed9eba60200d42da244f93e5375","ssdeep":"192:xPV9D3fNHnEUDuHDY2bBEoOhC62JmMwL4Bflg2yD+l:FXVHnWHVbBE3hmS2Sa","tlshash":"69f1fa0ae015fa7de67b49e7b53f5108f47a0ad0e7280890d07e5e1919e9246733ef8b","first_seen":"2026-03-21T17:26:39.389562Z","last_seen":"2026-03-22T00:40:18.039261Z","times_seen":4,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/Mobile.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/Mobile.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 30 Jun 2025 11:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\netag: W/\"68627114-155\"\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=vzHugjggQk7xdtfpfn3dYxNeqa2K2.Bahkcmq0SHp.o-1774138931.908649-1.0.1.1-OIr6ePRZvY55VRzzdheplZsGFqGvtipddUaS2H2UONcJGHork5SxHYlyYfw8oPZa.ghJcxJ7OLOPLAjOdv38Qcz_Zkg26l2_d2_ZTUKsMsZGcBaJejB1M3JEKdMkNB57; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMm0ShINs2zp9xRRiW4DgvkVi3axJ9o98WRfoLPhka68NVq6Mhl23EX1EFwfUOPeyXQ2k724fzqDgyGIdApKaZpA50OE0Y0x9XrYNjtGWG%2FI4mv66g%3D%3D\"}]}\r\ncf-ray: 9e010a62f8eea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":341,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b140aef15c3a0e2328970dbf675bda24","sha1":"77f0fce91e82379b75340bef8bcf39509d1c55eb","sha256":"08c2a0b66d7c329ce1e9e957188e98e920311984544c6d824a29cb8c73d668c0","sha512":"06c19a313efcafa154900f41bd864dc6bc5764a82dfaee82c91ec6fb360d61e0da1a1bb8fa6c58dd8a14f6cde01b85fe25e0ab56a9ba3009f4be67f99eb1ddd5","ssdeep":"","tlshash":"dde078e5b250d40ab5557d53b3fcd5a35e69f0d1da940c39713e791e0fa3034128d14d","first_seen":"2025-10-24T05:32:28.297874Z","last_seen":"2026-05-14T23:49:57.513273Z","times_seen":55,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:15.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 22 Mar 2026 00:22:15 GMT\r\nexpires: Sun, 22 Mar 2026 00:22:15 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 154361\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465721,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c6ecbdd6e5c7c35706e6b7290b4e711a","sha1":"e7504332313b5faba158d3371019ad44fe8949ba","sha256":"1d0520b144e29124777398bb9dfff2ccf5663f45275ceb1c5f70e91dd297ca99","sha512":"ff20dbbf2ee500ce426438f4a1c77da9d52c2138d9c1ad5c54311f0670b7a4ee6202ebd366cb291818dfa5e2964647c945f8d9e5c057d32e12726b2145ec6efe","ssdeep":"6144:V/J8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:Q4RfICAbHm8eeBUX","tlshash":"d8a4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","first_seen":"2026-03-21T17:26:39.447772Z","last_seen":"2026-03-22T00:40:18.112422Z","times_seen":4,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:02.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:02 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e010a2c1e1d5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-06-13T12:48:43.86992Z","times_seen":78129,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":5,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","date":"2026-03-22T00:22:10.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 20:26:41 GMT\r\nexpires: Thu, 26 Mar 2026 20:26:41 GMT\r\ncache-control: public, max-age=604800\r\nage: 186929\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-13T19:33:34.401641Z","times_seen":653659,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/Promotions3.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/Promotions3.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=eLmY6ofwh9qWlOWTmWPhcom5_YTY1ntOvny3jDYLpgA-1774138931.4001002-1.0.1.1-PWPyUFTryWJnzFEN9py2fdZ9AsA5_IkOaDxsPkvSHnJ87dlOjjrd5V0u.hhivk4vWbLQ4sqWineRHbChSdmbXqoHQlZIN_wAsXzLdO61od5ngfNC7amCqZwPSP94.fVi; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfMZtt2oHATS8oQ3%2FgdCiQWI8pOUoh8JTR0MBiZZqhGtwZnX9D%2FQd96nGsyk2Th0mvfBwmBfx%2Fn9gNhAsCKWdd14s5woYzjoQjrn7%2BbkTEQsP3AStw%3D%3D\"}]}\r\netag: W/\"68627085-710\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eecfc1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60e5a10a5bbcc415db7edd6ea60aec4f","sha1":"65af716c48e21ed7c837e77c4b7c3e2f33205dd3","sha256":"a8c1d1768e9efff44b10ffebd02cb4959af6be79610cdc02e44e840f0ec39a28","sha512":"418d3b818cc59a64f5261e2cc27fa2234ef1bf94a886866217d032d211c2ee47b758410154acbb7721314b855778c3e6bbd73fd57fdb092c5703c9270796ed22","ssdeep":"","tlshash":"ee312cd8ee305570eec443ffab118988795614bb69328edcf22c83886b8390800288d9","first_seen":"2025-07-08T10:50:27.664088Z","last_seen":"2026-06-13T16:03:38.814232Z","times_seen":619,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/TvGames.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/TvGames.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 30 Jun 2025 11:10:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\netag: W/\"686270a7-c81\"\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=NZKoBxuqjFDUPNOpupbiVIsgoGkgLVhrOr.6ehNYkw8-1774138931.90989-1.0.1.1-cloBTM8jgI6QAKxT8nm7Kg92pC_riPsgWUodji2Ykbu6UbfIj9IXVBDrqNMLqG_KL2I.He_qshaj_pl6xC3U_.tZGlogZk38g1JZ12UeAvGFxiUuJoeRW2n2n_rVjTU0; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwzBGWLoTsm7Z0LLzJrfRlcZbfpt6FNjIu2SFBbq4%2FTGggnOBOYWJJJTI0NT3BxQny7fsAO9egRje5uflWm2cuMOCC%2FOklJhu5aqmC0E%2BXo%2BrbYU6A%3D%3D\"}]}\r\ncf-ray: 9e010a62e8eba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8cb4d739571507bd6cd3b25a15163537","sha1":"f8061ea6ba5d599b463f5f146b407b0f6fbe4bfe","sha256":"3b2f15bcef3e58ac040feea4d073d42f18e48bb6f399c4f9f89845931f87085c","sha512":"38862ca5d9bb144dfa4b9c0568f05439e788848d45f8891fe508570322d34200ecb0e3f70dd9f1e8ae5659ae3333fe154d439e797c556ee94fbf88f47ddc3cb3","ssdeep":"","tlshash":"41619c87ff3089e04a7c5f99af6840d76689c05dcf731118b23c643e5af7d5884ac9a9","first_seen":"2025-07-08T10:50:27.694177Z","last_seen":"2026-06-13T16:03:38.79732Z","times_seen":504,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-5iQrWYQ_.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-5iQrWYQ_.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-b6b\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=6OEoCNvNZsDIJA.i5_1a7b8gJio.e3iNvJ0EHvDyEws-1774138932.6575706-1.0.1.1-lbXsY.FKC0JNVYxaIDaIbDy9sf0ctGHS9HIPowSerNhLJe2DJgOiX8E_Kdqi7vfZ1OlpAa8YS1nDe0EIuT_x0boG5xb8owHzFYsZcC8iIXHhdng0zTMI0lCOoRPG8Cb2; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7RKk5exWmIc14LNXYqSac93UeI%2Bs0GL%2B41aCF9QKK4JGInaVEoDeBBjr3oF3AqUpj%2Bemxx8NBywKioNFO2P%2BYhnrsuOeNhYd8NO0N%2BQVH8ChWQw%3D\"}]}\r\ncf-ray: 9e010a67e9faa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2922)","md5":"31e010232dd36469670cc2df8c881344","sha1":"029d5bedaa5607a234dfaeca2c6714d403d0f283","sha256":"d880db5966832fe6c39364ab8dfefe271f514cf8e5bf8aa1b86d5875c2c591b8","sha512":"6ce98fd2a8be27394661bea778cf317e1d971c3394c71ee899cb6fe0cfc4e85cce60a1cb676d3b7ae3161e368437ba252c603b73dfa3ec77e31a9cfa7dc1c3a0","ssdeep":"","tlshash":"3c5121c76042e7f4afe748a6429b10b074374d5cbe1f84a082be58964998792e35bf8d","first_seen":"2026-03-21T17:26:39.375997Z","last_seen":"2026-03-22T00:40:17.988097Z","times_seen":4,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet116o.com/api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANqD4HyyLYjsHrjHu2F21ckewxYehOR7TpeuC7CX8DQlLPbrvcS27P5fcH9t0pVBkU71fWG3UYy8MGDZ5jYrvnimUuo%2Bq8TnlGeiSun1q0yI%2FhGP98k%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Mk7B9_.GITGOS.uux43p9yt5qxXWHNhY5p3MMI3xKGQ-1774138932.684846-1.0.1.1-jAXiWP_F3HxbIWBT7nyR4nfo2iveNI5Z5Lms_A7aLx44mxPoRnV0S7ZxtEcLVQSM0c8vkSpi7W8Gplr0JHDzk_muswmt7GJ2QtEh2TCtlVSZp5oysXuFDCsOJjVWB5po; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a680a0aa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2222,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ce3902f4bd7f8f07ef19311509e56859","sha1":"4f8dac69410d4feb2f28963976a11de31833bd47","sha256":"e95f8590f1b24eb82a9bcd46e69bae80f375da5a9d273d5111fb19ec40fce0ff","sha512":"ec76ed398930c6fdeee5bf27adfa17c668ef4d344e8ceb01367f6f2251bc83502c04f7cc4d2cac53b3ffe176e1c0b850a266fc233aff454e7c5ec42b1480d1a7","ssdeep":"","tlshash":"c7415933b02c98a65b443b40b4c7394a94dd54c7dc0b8570dc899f8d86eb6298ad32d7","first_seen":"2026-02-24T14:23:51.361484Z","last_seen":"2026-05-14T23:49:57.392496Z","times_seen":49,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BjgPl3QA5IK1JuZYhXx185roQriMTjA2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHnmtlzJUpBlb7LLeTs5JV23ZZ8%2BWwKLQJyD6HuLFmj2pqNWdYGaVb2hUvNjN0WJR1WAC6fDux%2FUUpDebyD007f%2BdSpftMZtz30G1n0rHlT8YwOI%2B1q648v2iEKweg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6a7eeeb375db56eafe74d447721ccbb8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: yjJreJ8Rdxr1A_-y7tfL5PnuYYUJdSROzXayy_7A2LCrXcdy-XByvQ==\r\nage: 110\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"a2363889186e23777b4b704661794f3d\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a690e764c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1831195,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36723)","md5":"c466e082c7495db98ee1686d003d2484","sha1":"ca5c126c2d6e71c98050cceea0e3ff60d908178d","sha256":"36ae79bf11f0dfe815aa2e68937b7aba68950aa0b3d80ed783ce3aed9163058b","sha512":"7da32c99dedf46fd8f78fd0dd618f9d9987d5b831eaa3d6f6066cd8d6f1b4a5f47557c4826bdd27859bd5974202cbe9af75ef124c5a76117d9ab8b37d5e266a8","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJya:xGBzd6BgJn+wT8ZI3I5Z7yq","tlshash":"16358288295ef7500957e0e7e03b2d08d22ec635f847a4409f7297b36ab2357e3ade15","first_seen":"2025-09-20T10:36:49.604845Z","last_seen":"2026-04-14T09:08:05.833697Z","times_seen":46,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":66,"dns":3,"connect":2,"send":0,"wait":84,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/940.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/940.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/___vite-browser-external_commonjs-proxy-BvjNEVMe.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:07.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-BvjNEVMe.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-b2\"\r\nage: 405\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=RUfBkmhpuvVy1CJLn4gxRPQy2WYWMIduRZwBtxXXHiQ-1774138928.1106558-1.0.1.1-nR7W.sNqOkBcNyAYgTDITDVRXObLh9kZL5sOVGPNo8ZC1CD3mu8cDvq6MXpXC50JzbmV06kTxc3wLXyJTXhANpUPGsnNGGnEUYdj2wPTOJUdFLWmC8m4cujKRfD7I1Je; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nfzhj913toAcY%2BjrsXVOHBTi8dbRwjn1NJU0bsp88gJhy09PHhaFCVrcwqrKJabgJLFAgEI8zDcojlyGvZJGH7s%2B0WhDgPpDivggPhyFMEahzeQ%3D\"}]}\r\ncf-ray: 9e010a4b0c6da0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":178,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"0453c525f1f5a151cf277c20b691a2fa","sha1":"a708a4aacf7fd35cb4a8e0123fb8f1a61c37e8d2","sha256":"c59d3f5325da91eea5c987c2e77a946acf12669640c1d2de58a18d9704fb914f","sha512":"fbbe4db43256f047f5b6ee830b42799cad28672ed2b6966ae31f586386e67e4e13ff6c003dc1778ab408edd0f562e5dd3670a5a296cd7136061447180425afb6","ssdeep":"","tlshash":"dfc080491694dcb0525b1d828615d402d55c4d6e73f8f5d0bb088d51020158b62b8f9f","first_seen":"2026-03-21T17:26:39.615425Z","last_seen":"2026-03-22T00:40:18.04969Z","times_seen":4,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/JackpotMania.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/JackpotMania.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=yyMLJeLBBtK0yqZgNHp8Pq3RCFuFppgqx4p_G5BIL98-1774138931.3922145-1.0.1.1-av62pg9o3fGvwODKQMjll2.fDWqlu1dbqHGsm9UupNXhyv2Lho7h_TvGqz70fNtLFpZZkG_NW25ULYhsjMy6s6qCbJGKbroGJhM5NRGSxsXTUEImNDLPyxBpN1EjHGX1; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z3%2F09FrYueMfOEwQmfZoRl5GvkF8WXHbyeZSY%2BZkC27xXJuZq%2BorTxrn5CwWgjDI%2F9Chf6gFlqO6mh8n8oEKRC%2F1dR%2F1DD%2FB8Wz4WZ1zxuf6kRIESA%3D%3D\"}]}\r\netag: W/\"686270a2-1796\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eed0a1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6038,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"829680ca0f2f9d1f5faae192e8e40d75","sha1":"cb4c7ee7795a21eddbe36de36ff6c2e16e5f87cc","sha256":"05bca82b332ce5b8d3ab2c1e26331babd5f33d3ba924bf3e2b63b7fe44f8ed79","sha512":"173fad7120aeaf6cb2f7fb730a95b9af4587cb8804d09fd8a506e5eda8eeaa02d828a05e4c4e34bcc56f542e68abe6443792c891cfc8f2eebea59e21388b7a90","ssdeep":"96:NqjNrGLUu6fBaLQk9p0ZG7mi47U8/UA+5pRxq8uK/DUUt2TEojLdK7HiBe4I4erG:YprGYdqQkQE7mAQUv5p3q+DUU0Xqio3a","tlshash":"aec145fafb75a0f96ec753cadf223e3d79495d3d9e618794512e9a8907439c803018d0","first_seen":"2025-10-24T05:32:28.41634Z","last_seen":"2026-06-08T11:36:24.209341Z","times_seen":49,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":16,"connect":9,"send":0,"wait":530,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useOpenLiveChat-BqpHSaBt.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/useOpenLiveChat-BqpHSaBt.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-247\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=HITrMjxnpzVYLnzRhzYEixhxhtgUQky1x89WqP51y0M-1774138931.4124515-1.0.1.1-vK.ybzrZDF5rpeRyBb0P8i4ARIabilHLm184ch_N6Z5fPPmi7QnMn0oTSwZwiiFiaEE5cPOI1JJ2Nt7x1.ljt_CUOmlrzsy.Dr6w5R6vE.PdMj5zvnGYsQieEtPbnNLH; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2B5d3s4hwCzBIglSx94NvsSuaHLKbUcwwEc9XoLZkxz07CWOge1I0mZJHGupQEg8tApcp7CR2IgH6KXlZI%2FEb%2BUyz3KAigvC9tZU98qJCQH7swI%3D\"}]}\r\ncf-ray: 9e010a5f4822a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":583,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"681eb5126f2ec9c2aba7812d2e626840","sha1":"9ffe76ca1e901f691ac60faef61309d95902c760","sha256":"b4809c2e970036d0b7d9254d9d823fb9b020c888f18f71ed96f3c22224f9cb54","sha512":"b2dfefdd86cdd501c26c715bfd02b9f1a64a8145710d4acb1e91f57fa2fa4b0db743350947a0cefe3d5913be116aeb6c1758bd8f1cb54f07c8942c7fee79c554","ssdeep":"","tlshash":"0bf0e19e86544e7c81c0ced1516be5f85b3c2ab4300cd851a93b6cc8682484457bedab","first_seen":"2026-03-21T17:26:39.588879Z","last_seen":"2026-03-22T00:40:17.995274Z","times_seen":4,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Odometer-DagrzJgf.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/Odometer-DagrzJgf.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3d08\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=2hExkz1u6mOqw9DMSnO86MWC7e0.wKMnn3BCx9La_BE-1774138931.8084571-1.0.1.1-Gk.6CdbjNYqQuDEyU5OAS7UEmL7XhzTh2LH1YXyuBHKtUq9ypbTv39Qp8GLjkWWnpTfnSVGbh1E09vN2h1k.PlrO_Rv3QnbA8YYdRQCbzJQYXulBAinG2cdGa3juIl_R; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQXyj9Wihx5u5LKWl5VWFq95KXgP%2FURuG2xs9oyvppFTVec4Ojlq%2Bs3%2BkBvkE2rFuVr73oVT6gK%2FCT7QxYfl2v96XToTulUikDxIxh4nLTVLKD4%3D\"}]}\r\ncf-ray: 9e010a61c8b4a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":15624,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15623)","md5":"8a74ad83f4d1efb621438d7021c4628a","sha1":"120a50a42082236b3e09009ec567650ef3fd9347","sha256":"dc82bb79f276cb80002d3acf0030ab12ab8708a6c49ccd3a6efa43f016a699e9","sha512":"6b1f7dc97e1051af90eb7b72e4c5858e98aa819f42e7fa46c45cd42eafa7f088d6bd156a5880dbbe207de909d54a5dc2090721f104153898bb4029ae8c05525c","ssdeep":"192:J9d7KNJtQak5S0CGvDF2pXokmkvm6HjI7kauLPH7BNeSYpkYxSBrC7TlFa4PBD:sVQak59CGbM1mem6HjLPyFtUhkNPt","tlshash":"43621a897922723443a3b1e055bf4609773e5d6a3808405db67caedabe32c09d12bff5","first_seen":"2026-03-21T17:26:39.710671Z","last_seen":"2026-03-22T00:40:17.816907Z","times_seen":4,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1404\r\ncf-ray: 9e010a6c7a89c759-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfvWH7-l2WGZEJvxD_-cbyo5fufmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=722+3 c=0+3 v=2024.10.6 l=1404 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"434c7550a1a937d1e7e8bb8416691d9b","sha1":"d837654b42d1474560a5698cfac3514209cde2c2","sha256":"5f0f065528ec2543e34a03df1cd588b4c4ce7764d1ff62e67cec0677f638c549","sha512":"eefe6cf29ea82af55070456f2bf2cf1ab3c3328938ea092695f0a25370e6cef7ed1da43633a4548b22b46d7d7a87253ef01b2c01847ea84725cd4acc7be813fb","ssdeep":"","tlshash":"9f21e6a32c3914ddefa65f1485a00d8dff03c1a5983ee3d896e83548e5788da6ca00c2","first_seen":"2024-12-05T15:42:26.602777Z","last_seen":"2026-06-13T15:25:55.949732Z","times_seen":2582,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/513.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/513.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1364\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Apr 2016 08:12:43 GMT\r\netag: \"ded4a394a59bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=giYXRaNBtJFY83qtX9s1UlGUtlOrdXt_.7WJfOAjCI4-1774138934.227723-1.0.1.1-MjvGgEOASSy9.WdTcL4A0x7efNkMt2.tZQNcbgrEGCPydUdEVvoHSXoZ1_m51qV_gDGNZgvGhYheBTQZw4UQFJa1WnMgimVDaz_36kxDn12ExNW8E5Jxfau5yNKOCTIL; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqUy10pj0c9ridKpAaV4xDoeAgS%2BcRkOyvn%2B0d%2B4Z8bDnhQ5W69CJynb9W0HleKIW5wcucEqivPkm0AV5vfjSe%2BW0fSOxErAIqv55%2B1nQxOXDzK44h%2BEPo%2FRSy0%3D\"}]}\r\ncf-ray: 9e010a72edd1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"799214e3c123c2c234529cfd3434a773","sha1":"7d3184ab131039863c128a769a3d9fb20f40b06b","sha256":"d43b999acec30fa2dc263e01a731de5cdccf7c3e0741c89c569e4aa804da7934","sha512":"2af226456fd958eda6772503cb1177afaaae8c4c97ab7dcd06ceabc83a4be3385bae5780a00341eea6a387c09335af2643d4d469c1ef132e049e7753e89d1bb8","ssdeep":"","tlshash":"e721d8799490c0b8ae9412d7957b9a15dae520eee051e1ce7e72c69c452c2458387cb3","first_seen":"2023-11-04T19:13:31Z","last_seen":"2026-05-23T17:36:46.411089Z","times_seen":162,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.eu1.segmentapis.com/v1/p","fqdn":"events.eu1.segmentapis.com","domain":"segmentapis.com","tld":"com"},"ip":{"addr":"52.51.51.56","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:15.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"events.eu1.segmentapis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sun, 07 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6E:BE:8C:EC:AA:F0:8A:50:90:0A:E6:C9:91:BD:26:DE:D2:1F:39:C7","sha256":"F9:2D:36:7B:E1:0F:B9:06:71:4E:07:2E:BF:99:BD:75:4E:49:9F:E6:06:C2:E7:98:EB:1F:A5:83:10:CB:27:41"}}},"request":{"raw":"POST /v1/p HTTP/1.1\r\nHost: events.eu1.segmentapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nContent-Type: text/plain\r\nContent-Length: 838\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:15 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\naccess-control-allow-origin: https://galabet116o.com\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"90749a50019a27e1f32cebdbaa7a1bc1","sha1":"8329e3339f928f8591024bb0f938dab99c0ad4b8","sha256":"12f71cb993958eefc4bdb41d7dbbda490779a9c7aba448f7be52bb63912e0254","sha512":"b3959e671f729eda8aba59886df18c60ed5a768a3357dc09b29069b0da9c9fad7073d0072dc47f3ecfdc945351fe82ad3b653dd5d79d01096e5ae8bb42af2bcc","ssdeep":"","tlshash":"b8700022000000b200a0b0020028a802a8a08c0880820028c00a000a8a022802082008","first_seen":"2023-04-06T01:58:03Z","last_seen":"2026-06-13T14:42:19.932192Z","times_seen":6974,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":248,"dns":15,"connect":34,"send":0,"wait":35,"receive":1,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/GamesOfTheWeek.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/GamesOfTheWeek.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=w46li9UkoIx.6kHIWOQSWjriQ0UqSItrUPyYn8vFmx0-1774138931.405847-1.0.1.1-5IeZMPIlPoMPWhC.qCqVr31BCU30E58_HQliucauwvEXFIaCq0sNi0VXUw8a6D5L6C4FzvGptTxIqzDsmD3Kadt4WTla2N0470TI5EZe7s2VtNWid8D2_qZSb16vSvPm; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6NAXGceCf6suLGeg%2FEr%2FWjr8AGEDdvbo8c1khUOkebhX7njcoyFXjPc1e4%2Bji8bq4rWn2nFAIVaCqf%2FpLIFQ5A1vaWjOAS1cHT%2FC6HhclT%2FWRt1GQ%3D%3D\"}]}\r\netag: W/\"68627086-be0\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eecf81525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd48bcac13b7af9a43338fa39450069c","sha1":"b39e0dce82eec16651566913e7d8a1ae26ee25d8","sha256":"e67476d135f1d3e566d62c017b8a4afa7b3013dc29540a85de3c9f071a11812a","sha512":"39c26cb74b8bea9fd071edc07b5fe1ef144747ebd23593b409aeb8f0e6894daf00a946805f222e2dca66dae48baa4adab0196a4ef71720fd109aeba8f11e1026","ssdeep":"","tlshash":"6951b0d8c5254afa1bcc335e6322542b0cc92fd6f7a35cd8b27c85985b13d062a7e883","first_seen":"2026-02-24T14:23:51.265611Z","last_seen":"2026-05-19T18:11:41.282935Z","times_seen":52,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/bookingBet-C2_396gf.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/bookingBet-C2_396gf.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-ed4\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=7szputSxFZ6IK2bIp5KZDPPptZOmaOvQzAK6N2l6mQ8-1774138931.289668-1.0.1.1-LzUnAwEUvdApkPWfHq52Po9qqh0u7bEkEqslgoyUc8PWxLCIfFLt4jvHo6Ii8icqeWkygkTK81JyrFChcsjO.WfizyovOJT0O1M2kW42FERZi3HQc1HjeDdUzJIptB7o; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGYiEci4kPSkuacCl2nfO7fVW82WEwrL3w7hfHdm%2F8L5qxvfIrc03thmYde9hm3rLndS0jQNvuchatjwO93VNGIlvngEg0o5AkuC%2FJ6A7b62mdw%3D\"}]}\r\ncf-ray: 9e010a5f1807a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (3795)","md5":"382e197b84b36c2e881c5ad55ba49ffa","sha1":"f53385f540d98c26b3acd7bfe2a714778a3cfad2","sha256":"f49f90a92b84092e924250b9ba4c6d9ba49f9e1a5b7cef9c2cbf1ab9267eebd1","sha512":"ebd00bf5073c899966d24da20876fdd2296b624901691607e3e3d5dd0dd682ea0d751500286ec765da9763dc4a150be86735c8d08548888228cd3f7cb648bce2","ssdeep":"","tlshash":"2271e664fd30907e67f2317df4de7b426b2c4ba871a19a40fb6b5d0841848cbb534638","first_seen":"2026-03-21T17:26:39.649126Z","last_seen":"2026-03-22T00:40:18.176308Z","times_seen":4,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/TvGames2.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/TvGames2.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 03 Jul 2025 10:31:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\netag: W/\"68665beb-8dc\"\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=8bYkU0qmhtonpkK0cIn3VMJ9CwM.WP.pzAN1flNRfaQ-1774138931.873848-1.0.1.1-J9Dx85XU4jOkmD9Unatv50MUYHILl3O36U9y5VpS_dQPdhdQQE1iugmqkEvT0fqWblIefEUFNIYMigBQe3YQlT5c1Oh43ix0_.gzCEBD5RnpifSpiVg9K.ozbR0hyWAN; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U9NqGp8h6hqq5xBb7smXE9Nj3owryYa0tF4p4%2FyD6%2B0gjJxNJ5aLIeIdtv%2BL5JsrDPBQNzpaBBdysE3qnDoKBTjZlm5Jd71oRu9huvcu82vLSgdh0w%3D%3D\"}]}\r\ncf-ray: 9e010a62e8e8a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60d24e57914ca41e702277a9ce44e813","sha1":"bfb08c8dce26d91b1fdaa008ffdea07bc100e0c7","sha256":"144a8bd1616f38a95bc6e7f59283e462f358a2dcf79e10cd7bd256d49e6e4134","sha512":"43503c3df559cc8b5fab3dcd299f5dbfc8d5a6f9dbd458781c53a409d859ed730ffc24420d462b914b4ef96f1d63d9bb508ef733bad33edadc5a2d12b22e4eb5","ssdeep":"","tlshash":"7f4165f9efb091f46dd94fa9ef324cec750e68fd9f220a84812c861c66a3d94d644410","first_seen":"2025-10-09T13:22:28.980997Z","last_seen":"2026-06-06T21:30:11.472171Z","times_seen":73,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_ce21d61aecbdde7a2793374d23ba2279.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_ce21d61aecbdde7a2793374d23ba2279.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39580\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 21 Mar 2026 08:27:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69be5685-9a9c\"\r\nexpires: Sat, 28 Mar 2026 21:38:05 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 9846\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=ccXECi3tBPW4G4hqZpKw0WRm7nRUttkKoqpXzunhNuo-1774138932.3455453-1.0.1.1-sOvbdhgF_BCovLUhxDlzB1rG8BTT_WdCVMtIy1PTq5JY4GiayjFv2JLNSo6KpegfuvJ52bVIDbR_jUVUvchrZbAe.b8L6AZt8S.kuoLpZxJAh.RizchiynwL_uSecDUE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G70AT4or6s9OMk6rpY0WhQXMXeyhnaPbe%2FpIsKWmIhc6nugcSjDpaXMz8DkL1bw%2BWSmXvvEKLDZ5n%2FslUbne1QpNcGUdF8MkYqsJPF55exNu0Pn3yw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a65b967a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":39580,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07e6802410c00e36a91fd6c2c6098a54","sha1":"a05d8f1775b62763fa1fe66087ef33e1502e7ecd","sha256":"9359cf01f04e5beb9f3da92598952e0c9ea789c4a8c6eb2672f204612f9a6f00","sha512":"6f7247bb2a4f43195818690e972e562fae483bbe34ab1f29dd9c095f9edf158e147682a9c65f8713039e20f1fc5f0294c9eefd4ed9a148246c2eca239b770d72","ssdeep":"768:XANciDPtKdffShNyjiSisPI2+zeTA83AmbcLKsp:SVMdnu2ig5lk83AarU","tlshash":"cf0302d5d08dd8aa2f1e333395d8f8c25be6c4528394558a6fee28071537416efc9437","first_seen":"2026-03-21T23:21:16.87342Z","last_seen":"2026-03-30T02:15:03.266276Z","times_seen":11,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/useNotificationsProvider-B6RWZkIU.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/useNotificationsProvider-B6RWZkIU.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-5c\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=AsBVbaABM3dFqxIftiMjozcR5XjqFu5CQhWERnumyVg-1774138932.6105444-1.0.1.1-nilZLvW5HH35eQxVwf46NzUxi8GchzpeoSLfgj1XawfaAXNPI2BAyiR8GY9bc137wqHbdcll5MxFjS50AmM9BtJe4IhkDAJrpYza_p3PqPthyKYYAarydsqoOlyruKUK; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2upzrlR1gnt16HjA%2FY7ap0s%2BReUn87wKq5VMgcs7faWtEnKiLbYwCFGzQ6DpRn5bFgf9lICHCasad53nEzYGe0DvJv1Zb6czBcq6i3Qu5pnsS0s%3D\"}]}\r\ncf-ray: 9e010a6779d0a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"6a107b604ba11023c433398a7069f684","sha1":"530390a2949705378fcb2a483d2706b3de06d63f","sha256":"3261bee16420406d05ab5271fe9918ae8c11452027b028fbddee83b242e8c5b0","sha512":"fbb4b371e140541e0af34872e340d31d851f73ddb1b6731fed79b3baabc34f36179628277717b3d6fe082d81f0e2940e4d4a551a1ae0e1d89f4937a0ec0c5dbc","ssdeep":"","tlshash":"5bb01213485053f1210108ec12264c290e30083d3381cab11030414811e40c5930e905","first_seen":"2026-03-21T17:26:39.536834Z","last_seen":"2026-03-22T00:40:17.926035Z","times_seen":4,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/456.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/456.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1061\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Apr 2016 09:04:21 GMT\r\netag: \"2e222cce3e92d11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 15 Apr 2026 22:48:36 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 437618\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=h2HIirevDaX.t8f45DIsZBXSNjzJohLeuRL5j2lP35U-1774138934.2657225-1.0.1.1-ZLrDtlj47gQKDdxqjRmxvdyT_SPK4bZdGjZNOguE0X.zvjND5Eqdm1HQaa3WssT08hQy1mJ_5mXJ.jrp5Kimzf6HHOC0gfPxky9XqxmDkGsgq5.4oZTMwoENVPRy.ppb; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ozr1ZsKNhEnaNSqvOe2%2BGPikhVEjbeqHdvbmJiqwj2anro1Qzlj8iH70JEnVgi244er7fhvddnOPwf6t7cCNW4qfzxakMcdNI08HAg8Qz8BJBbfIpc62VIjuYdM%3D\"}]}\r\ncf-ray: 9e010a732ec9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1061,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"dc142b4286c2f4c542da122edb7851e9","sha1":"d20c2d8239843bf6425c414ddc5482e59a591a54","sha256":"0af21af658044292876f71a35dfe316b9dbef457850d6c671c617e06ec680da6","sha512":"d2c1775972d49129037507f0a17113ca9f42997707fbd705b018a87dd57bc4758b6942602fee3c9dfb2faee3baf26b174d16f4d6dbde638770625ea2a66467a1","ssdeep":"","tlshash":"6c1186d2bdf8302da5a8212bea435d95a591736526931844af59ea1c0307d48c487594","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-05-08T19:17:56.083287Z","times_seen":204,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/immortal-db@1.1.0/dist/immortal-db.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19803\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.1.0\r\nx-jsd-version-type: version\r\netag: W/\"ee25-pMHxoJFNs7/Bok84dZEhK2Ol9UM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220067-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 2774422\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLGoYThJRt9wzgwfb%2BTIKxW4sS41s6z9WcwU6i61eM4qSNb5qw5zFyz%2F761VvE3yRvkwHmaSn3SzC48LqEP0PKKHJ7YwTqGAlHNCsIR1zQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e010a751a848be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43474)","md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-06-13T16:30:41.608267Z","times_seen":397,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:09.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 06:53:01 GMT\r\nexpires: Wed, 17 Mar 2027 06:53:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 408548\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-05-28T06:01:00.163084Z","times_seen":12910,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":68,"dns":1,"connect":7,"send":0,"wait":9,"receive":39,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/BetConstruct-Icons.Cf1oAhV4.woff2?vt93w6","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/BetConstruct-Icons.Cf1oAhV4.woff2?vt93w6 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 418540\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\netag: \"69bbf7aa-662ec\"\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 109\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=A1FlVybFLYyu.5hMwznRE5Cu2QFYK6CYqutxjGNLn_M-1774138931.4415636-1.0.1.1-eJtoKfm.WkoG_IoOgWTSLeMz52tRinkMfD9v3ue0iO5rq4Q5EIVVtI9caOlzDE3C4nHtWfqGjA_YoifWe5oCqkCT6cbZMq5K8bEw3jR7ZkwPXiHy90k0K5_6s7xaY5fe; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QugsSzjU174mz5yD52Kj4iXSgWkHlNa8GsLZr9vb%2FBHbyoP6lvGzrgwVIqmI0QHOGbpEPw6SLu19LRaz8nvlztw%2FH%2FIBcCXLRYcr3%2BwPfNiRCvs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a5f783ea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":418540,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 418540, version 1.0","md5":"eeaaf2532d764ad40b6968d98359bc16","sha1":"c9e5f877bc951f0c3f4e0beed1f3b612c5e8ec44","sha256":"93e28b4326dd21727cd4462ed3ca668b5bf1631a5650e7ba204eea84aea08719","sha512":"23ec0312f94bcbbd294727d806ac320ccb1885d6ebd577c72ba894e48fcc0e248b65df103070fd59ecd86069ff849da0b77f1576eb95760022b23f2e62e68ba4","ssdeep":"12288:Avwu11O8l5sit6BMy66o9WMkNy/4v2sqvzVKnVR2f4pF:cxl5zt6BMyAIt27vx8X2WF","tlshash":"449423e03f529d2971a1968bbf6f0da8c796d35c19d28a02ccfc0665395c931ac9ccdb","first_seen":"2026-03-21T17:26:39.52114Z","last_seen":"2026-04-19T03:33:37.387538Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":375,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T00:22:02.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=1,cfOrigin;dur=51\r\nexpires: Sun, 22 Mar 2026 01:22:02 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=857uhtEkNnB7ZqA1XWTWrF9Eu8Rcw8o32HmW8mC65dotXN%2FwTIrj00p5vPb67cJyPIvVK0i4yKJ%2BcpU%2BZikDae1525zCp4%2FGL4bSyjuWQHO5HSI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: SERVERID=s1; path=/\n__cf_bm=1tDlShUg7K6gv5oPJ7ENbfpJichbT8dp8hEguCRDuUk-1774138922.54261-1.0.1.1-lD4kM8GWkSSkML7opyM5PBH7Bw2sGLwT8pGUY_sFPAZJrk2.RNxI_Il_yUreiWjDw5x5RSGPi_FQpuk0KfbiPBExh18W0_EP37M3N6NiS7q10f1PMlkQ5ooZOVPi9eJo; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:02 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9e010a28380ea0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":3970,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (503)","md5":"81e37ceaa549f7b06c626f29e16b35b7","sha1":"d2a24e5bc653e8d71c568b6037642e05bdcd6589","sha256":"6be85f34495fd49117eb73b76efdb3f41c7b36d93629ca6debcfd2123e2b49f6","sha512":"6e62c589a5bccf2fb464075758de692305a4f14be014fc585c750c21d6bce5a39d162b8bd6766917937941906c1d0b022fab1ca8e15a060dfae36175f5b4ec7f","ssdeep":"","tlshash":"768110572a10f818122545b8b6d2f808cf16b95bcb05ece4789ea6fd1fc5be48cf3426","first_seen":"2026-03-22T00:23:19.35902Z","last_seen":"2026-03-22T00:23:19.35902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":40,"dns":26,"connect":1,"send":0,"wait":431,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/lodash-kwDFPdct.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/lodash-kwDFPdct.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:14:41 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-28615\"\r\nage: 443\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=z4lOPaV92Axm2ydBu9_xY_w7ablaApEN7qga3H5VG6g-1774138925.4667108-1.0.1.1-8oykahrEfAEPI70zaKVBaVZSBInUX_TurR28.mX.b7a5ns9.hNcGiamjy6ceaV.BWtJg47YEllmM3dT_ZTBiIHCLFaWMs0pbkwidHzW0gu8GMvIHo6jkaxs5zxI6LUUR; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YlFp%2BMhWKvjTBmqkZOgiOq9D8vOxrnWzhBqrXFqvsyiApSGpqmWyJYwXPu1glzeCR%2FPxYvgOMXc7wHxnQ%2Be7q%2BYXC9KdLwlmvD0jboY%2BXZoiTGc%3D\"}]}\r\ncf-ray: 9e010a3ae8c6a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":165397,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35467)","md5":"12e56cd99d8f0069e4ee81a372fe541d","sha1":"44e49f0b5438f713c4e9cf76e3659a00ffd35e87","sha256":"d77e40234c5d8cda5978d85ecd94a77ad1231619bf0b371d67fb2f3074e96425","sha512":"69908919839d062f0d861cf4591600c01193ccc7fd4438009bafeff34258217d381b6581a2142725c495a3a1bdf7937964c90108d0a6fd6e01ce2b90a854e9a2","ssdeep":"1536:RU70QnXcPZMTC7X/7crNuU0OCbgjE3mhgELujQjEO6epU3nddIIBQoMbPDFLufvn:RGc+rh07XgLujGEOtbavkeLkDYlwMh","tlshash":"74f391c835d7f4a183a7287440bf084bf23ead65a84cc550e1aae0dd7db8919c277e6d","first_seen":"2026-03-21T17:26:39.43969Z","last_seen":"2026-03-22T00:40:17.967811Z","times_seen":4,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":447,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/HorizontalNavigationListItem-C9W5wxFK.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/HorizontalNavigationListItem-C9W5wxFK.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-2d8\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=IOQYVYNG8yA9eEJf97G2ZIiKyvAHFmP34VOMfdlD2OM-1774138932.6132548-1.0.1.1-2gNbKRu0MIwd4qs_6UMNszpmfAyzSxaKVVl9BTiz2lTJV_5Vs_jJIwWNgjE1UfZUKxg0DwMCt9Geqa2SQpqkd7YF4y8gdwiSJVivQY5C01EJNctSp7mU9MtGj0QSKfik; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6b1fj3vAJVcv%2Fc4QPx%2Bx2aULsyw3ow0rRox2UE6iInGRSL2wnMgkmrHBc5YacBrlhmKfis2J3hPUoPM7QJnQTjOk3EsvuI0%2BWu11KdG%2BdAjgrb8%3D\"}]}\r\ncf-ray: 9e010a6789d7a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (727)","md5":"ac06b8982ccf6ca471baa48a0c19c40f","sha1":"2beae61a21fd2d59f9f03a8795d2efb19aa6baa2","sha256":"9e4e946f9caf7daf8a634127530fc8588afa0ed9668f7c6bea709315c09f99d2","sha512":"5f0361d32bc8cc698b97e0c47b49f3de892c438447041a8eed5c71097b6e390f96a6759981c40b8f446f53ccd31c4af978881cd7a86261306a6034d18552fe67","ssdeep":"","tlshash":"a701c001e014db7c9a2b55c86b9e1089b1579afeef382cf1a0f4e11209344593646e8e","first_seen":"2026-03-21T17:26:39.54095Z","last_seen":"2026-03-22T00:40:18.030844Z","times_seen":4,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/1273.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/1273.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 839\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 07:16:10 GMT\r\netag: \"82dddfc7276dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=khjT.A6FNw6RG1ZWOi4v9PCqePm6WFDFNbgnTj9G4ng-1774138934.242825-1.0.1.1-hUbvHMpC8vm.jrK83zAKD1vziAtK08xkxhcNX96RlzxR7yvpr3.1s2lluTG2SFGLVXxpnUR0XUYO.PkwBLofqBukNOAuZtSGLfGG3OxaJQXC7DxV7TEp8hgIUSEyjcEJ; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CD0fazRogmn1QtsjIlSwkqjxAxbE1oBrJodSNkbtIBDuze8CKmS5ohASo1e1%2FmpA2xlzrgCh747jPlAfKLHEul8MYqOv38hak6WMLVJIqeuaTKE9IfiCO3UZKWs%3D\"}]}\r\ncf-ray: 9e010a730e28120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":839,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"77a34a889a6af7eb92f91b878ffe9cf8","sha1":"90cb49bf52962a7ab37a94863bdd49d13ddb2cfb","sha256":"0fbc0f5a14f9a37d841dd6557e947df7a9e7fb3d2817fc67e37d9c89849702b6","sha512":"48ac0aa90a425fe87279da261c8599836c531b2d1d3c70fbffea6b717fee6aafd37b82d0b1b612e149f6d4cfb3f04252c2b8a3472fc372b0eaca0425d200c478","ssdeep":"","tlshash":"7d01d6c290ce08ffd22035a433078023e0b74776a5082929c329805dd7ec8594a0ff68","first_seen":"2023-07-17T10:48:36Z","last_seen":"2026-05-23T17:36:46.412136Z","times_seen":251,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/516.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/516.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1472\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 06:57:35 GMT\r\netag: \"8617722f256dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=vzCAnHFO88QvGh2GPH6kQ7maufG1WzSE6a99M6MfX_Q-1774138934.2699938-1.0.1.1-Z7UDt4XHJpGUTe4rYFemp60hao3tMEv7X9vyINi1wFjhALyWElwoqfNMHWuveKxSElmNIAIzBDU7IohtKzcurfz55ylTUcQA9MfJn_pFrNcjdtbCA7OVhwUKo_Lx6TEC; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXXF1pcaTmGy%2FA8yzAy3nP5EJg7HMYLyTMbh2i9t5pWrTR2N4hjwLv22uJVBEz3ppovGaAuay2ZsTHugyXdux%2FGctw4EFuFs9Cdf44xRxP7tZkFfUOV3plGKlOI%3D\"}]}\r\ncf-ray: 9e010a732ee2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"89b635b0ed7cec4e1e12b16f04656cda","sha1":"fcc530c57d81c1bbf38e109bb2cfbce7aeb3c5f5","sha256":"f48ecac68e3a75583c6e33b1c21465f522e65955e020bfc5512c6a2ba29abff9","sha512":"a9894fb07e11707ee91f6e4b91b5c7a2bb172bd14f10839341974221898ee061e09f1a62fce7d025d5243165619faa7f10b2cdb6069b55a4e2c3e93707994345","ssdeep":"","tlshash":"0e31c97e6958defc32dd20610e1a2e34a16903495760761a3ed1e21c923e6d444d1764","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-05-23T17:36:46.227729Z","times_seen":414,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/DataspotTracking-iQyfe7l_.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/DataspotTracking-iQyfe7l_.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1fe6\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ixIfytGt11vyLZgvE8eHaDRcg3HJjIqByCdNzR4J.UU-1774138931.3809485-1.0.1.1-tk7mcA7hF911eO5B0S4ST2zpLkX0KSTq8AzDMlRQLYUScCb4cikgwi0vXRHh6YGKV27cBMlM8AvCZpoQgKUJrHgThsLSmQjmBJ6Kk95bi4513csGimaxPvye9Idk6YRd; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k3LNM8vqZQ1BexwJiPA%2B4hmJmAanSvM09RkggDUBk2rf09kMFELMho6lJfOiqZj%2B1%2Ff81tcXYOQRdSGFHs4gU3NBB3r1QyJt5%2Bs7wuaC3EATOuk%3D\"}]}\r\ncf-ray: 9e010a5f2809a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8166,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8165)","md5":"f1553761c57f3fe8977e11f9a5acbcb2","sha1":"0428d0e7de8fd59cd72a53c25c6d1646dbbbcd2d","sha256":"14ee5210761d6fceb87796096a7b97d4bf6dc77c671b081746ccd47d6b96c94b","sha512":"d31f722b3000e1fa4286ab76fd77cc4d84cce25893da33e8315bb220f0ba8103120a06a6577becd1654cf17895d99a128a4fd6fc3b4161f0a1ab8dd37dd4a805","ssdeep":"192:cEwDqXQcaXE/ucCOi1Kb0cHHnBxCHenNvuvXvqvxuhqVeDt8VZuS:TAqXQcaXE/QAxCHen5Q/0gh8k8juS","tlshash":"1bf1f455641e68bc7033c6ad0d5721a248387051e2329de076aacf5a9e3d9c28ff77cb","first_seen":"2026-03-21T17:26:39.500998Z","last_seen":"2026-03-22T00:40:17.814005Z","times_seen":4,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=galabet116o.com\u0026t=1774138931442","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-03-22T00:22:11.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=galabet116o.com\u0026t=1774138931442 HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XovFhus8TE7zZIezlrbxMivT1qemlZWSwV%2BJ24qe2W1UVaXnl5hymvH4dv0UNEzDLxhfvvMCYJZ6ndOAoij86MVHPkfjP3ajNorqv2yoFwBVfxdkNYg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e010a617eafa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3049,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3049), with no line terminators","md5":"ab36d6ba03220f8ed8807b6424822280","sha1":"3c00e656ad89f892e1f68369656a231ff5dcde58","sha256":"15df31091b00093ac8503741e767f90fd0b4eecf581bcb2f9cd8a33712b72382","sha512":"ff73efcd4471511df2475c0806cc16582bd55904a079010f054a5419cbbc51624a6c115ea3cb51e34ef1f72e50aa6e394ca21c825499fb430ec10d6bdcca4888","ssdeep":"","tlshash":"d45164ca6af081ed379a89e71b25b3cdd12f84873d850716746c78a4f605a1cd337278","first_seen":"2026-03-22T00:23:19.360957Z","last_seen":"2026-03-22T00:23:19.360957Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/VideoBingo.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/VideoBingo.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 30 Jun 2025 11:12:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\netag: W/\"68627129-7c7\"\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=dCNWl8E1M7KiSLcIm1WZatx6UXjG9NODJygdsCaM.uc-1774138931.8548522-1.0.1.1-Nf7ivWOwPsu1eEH.mL2VmD64D2FVkV7ontO6GGYEW2O151AMo57ty8PYzp8CxiN2KfK0wTOAJLDFOb.VfacfoRRwOyo0dKGUTFeU5feGJdaC4Tcg0jXYT1_t5_lkxFWx; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ZlJ0M%2FeiXsRzw2fpJlyRCsdNCJsDcmWv21PaYO%2BlOLyNAweO4O%2FY5eHE7co875oORtYbUJGaWYWY0wW3%2B1aGEUB0xf6teRP3ZTxS2Ezm%2FJ1CHaWuw%3D%3D\"}]}\r\ncf-ray: 9e010a62e8e7a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cbae8aa582bac1aa011b5159e475a38f","sha1":"0d140fc00b303fd23250218e03c28ccf986a39c7","sha256":"dcd44096973914fc9f8fdeb79a3dc5379403c3d1411854e634ab7fe444578271","sha512":"05e2c75c337a1fad9f895fa0b1635725d1681e774084ed34084444508df8dc8501c01644b19ab4f9a948c1e5b6621fd67df4fec41eaaeaf187d1a9e90c58244b","ssdeep":"","tlshash":"e24133d5e7b0a6ac2ccca59d6f2148d7350ae0bf6db36a5ce22edc580b53e1c0611c99","first_seen":"2025-09-19T18:19:26.310809Z","last_seen":"2026-06-08T11:36:24.299552Z","times_seen":76,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/DisabledMarketEvent.BUY5t_rR.css","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/DisabledMarketEvent.BUY5t_rR.css HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=G35cCn2qcSrJu0NOY0IbRM8C_sY1QN6hzksyY9F3KW0-1774138931.6327944-1.0.1.1-3LH8xHmGZ6MEnS8.0oaSHvLNnMluW0RsZP9OSxHDx1fzwKacRMvI6IXwL1EWe7z52gj3ttVRAwHmnoNTNjWLG7nVr9D9qjsQCowekN8ocB4mhsqitvPYNBLBb6Po8Y68; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=egVS%2BxJSk57SlayJRIOXhR0R0euoPTnYa8nw4CzIZ9WqTpna%2B2TaU850DDvxDBhoCiwUZwnoNp7vW72R9gJ775pDBcNEbAxFXS5LIl0Y35zs7U8%3D\"}]}\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-2c4\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6178a3a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (707)","md5":"c0742f5af30b5e1ab1e9e3184a8d4adb","sha1":"06509c5248ffc14505b70fdbb23fa513986eb50c","sha256":"4b6712623061506cf21b8296602cd61def3d0a81b5cee16bd0d245e7275715df","sha512":"7050ab375c9e4b209bda0bd7ce449e76da69f00d56d7a9504a52eef1e36fabfb8b36f9f560d810edb4522247e15d17cf736e929f40503802df2035007d1494ab","ssdeep":"","tlshash":"4701d4c4f98a25344c3a9d0c9abc8fee560a93705ca15d33789a113a4bce08a4a20d26","first_seen":"2026-01-18T14:34:50.585531Z","last_seen":"2026-06-13T16:03:38.737223Z","times_seen":503,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/HorizontalSportsList-DFiYn3iS.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/HorizontalSportsList-DFiYn3iS.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1a6\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=UwwAN0Ho9.Vfl6xPJDdkdwKGIbiK_sb8muD7qO7iqR0-1774138932.6833723-1.0.1.1-ME9wYsZ3ETX6a2gKjJ24bzDvFf7sS.I5MBoXmbq87LSxqqaPhXKqqpYu4YDsy.tHZEM3N9AFSIWvMmXrg8sIMpZjZBFWR_VG6wZCX7Kd9FoWXBG2wZYYz9Hqf5CRTZmr; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sz0IO6aM%2FXwJ83HZOALZDGui6G76XMKhJOM0ORiftJUpudZAjrYnpETN5o08%2Bljejc3Lmv28WLeaBGXZ4uUpRHK%2BFE0GqnWuW0Ov1z8ZrSZhlek%3D\"}]}\r\ncf-ray: 9e010a6779d2a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (421)","md5":"9e97ea9cb856db5aea93097b24ee839a","sha1":"3216ec0dd353cfd8cedc5dcb9bd06e0e6c04dd2f","sha256":"f0d7ceae5b03c9848b3e7891ff4b73462b8aaba69044516382b1a93b9369f97d","sha512":"14d66003f13803ceec3064b27084a362f95a796ae8724feaaa0596aeac0f16141f26adf5660e396af9ea9fff16e3d322c005a133c116c489f80f414be0fc1850","ssdeep":"","tlshash":"06e02b81d8618ef55a2a88efaa5c24846122087cff47a6b1d29492182b7508bf72a40d","first_seen":"2026-03-21T17:26:39.547601Z","last_seen":"2026-03-22T00:40:17.818577Z","times_seen":4,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/CasinoGame-ltYKuqgq.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/CasinoGame-ltYKuqgq.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/AiPromotedGamesWidget-Byj5O19S.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-16ee\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=HJmvfdiYM7Y6EwVcXpuRr0JL1Yn_enFdi00FUGQ46C0-1774138932.818413-1.0.1.1-oQSeqT0CQ4R1cCf2cwp..EXdT.4fPgbER.GJttYbtBCYuADNSObpewgPreZz7ivPF9YtfsRKLNQNABnbNdVpv1FpmrlWKdkflAhdVp2V_ktuQtuq3sQhKQS7D5mkpSXV; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXshV%2Bpfz2uO%2FkE5P2J4HyDdYIbMUA0l72bIzMDWzZik3ibFzYL3vjW64Kv9v0ANKUlESG91WTYo%2BvSjls5PYm7Tuh6Z0UzFln2mKH0GWCTJYZE%3D\"}]}\r\ncf-ray: 9e010a68aa55a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5595)","md5":"9e451ef9a803c3f7b894af280148f56f","sha1":"8e10a59fadeecc945cd891c09f4b35cfcb109ed7","sha256":"ccfacd7e71cef622fd86d8549b91f69eef2eb67ba6604f9e7117a03d58a4e8a4","sha512":"4e025ccdc94278573d5a9df211da737ba379dbcee75021e6607a73f599fdcefe50af54c76174bdf4f6c0fb0ed1a66d3b4dfacc75d5f5854452e1b77d3a16e8b1","ssdeep":"96:jL/bVqh2iJMeVZhL+no0JzxF+zZZ9Losc3MM+xA5Z9gvWUwBVTCV+xRbK:v/xqhCex6rGFssc3MFxABtCV+xRbK","tlshash":"b7c1b445e024ebbeb83a08d9982f102574192fe5de198076f4bda839323c15d7627bde","first_seen":"2026-03-21T17:26:39.386441Z","last_seen":"2026-03-22T00:40:17.789882Z","times_seen":4,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 628\r\ncf-ray: 9e010a6c6a45c759-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfaRKjj98wG78-Q94g8ciN3whHfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1019+1 c=0+1 v=2025.6.1 l=628 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07a8ca43077147f4b93899efbe31ed8d","sha1":"bb87180866adc635991e4867c8222fc4387331ba","sha256":"b22b238c613c9bfcf13e8340213b734fea3bd0b9b2fe67648e3ba6decc104e89","sha512":"6d9a2235c65c224e78bd78025eacb630cca9bc9c4a838fd540de031cca2e8c442460eae186359cb98dcb1f1eb867414c6b5b77c78a2f3e1be6f6f36b254111c4","ssdeep":"","tlshash":"90f062be0d21c29ae04842881a0c6c5da472a9b9fb4424c4eaa5f7a67c0319433a54b0","first_seen":"2024-06-15T18:00:08Z","last_seen":"2026-06-13T20:07:16.655627Z","times_seen":2291,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_d74a4ebe29a311acd768d7a041714545.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_d74a4ebe29a311acd768d7a041714545.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30648\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:01:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694014ad-77b8\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=nYh5BqdJ3xS_WmvMxCI62H73zCjf.32Q9ofa0b6iwuA-1774138933.558065-1.0.1.1-3Om9LarXd7DlgusH1B_rk79baYIKQgzPGj9mwP7rCroPiZ6G3SuhIfZFXOZ73_dNT7gU45WHNxPv6x4YaBPo3nh5V.8dbBTSJm7M592R_A8VdMOsfN9.xI2hTwx2xA.w; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVhISBwCxbzOorhIwjC9m2hYAatIlDqfRG6yOKCMXEZGzrzId9yafCT8RVlfg1bdXF%2FjtCuy7I4Y%2BIpV2Lpmao6UII%2Bvxe0NKeawuInW0UE%2B65RV8A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d6b0da0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":30648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e44c769c8b50867b3c5a5f351efe25c","sha1":"13946ee2cd8c9ff6b74ce804ffc950b06d3b096e","sha256":"ba8112aeb4f696d5320c61972a04ed6a623bcab169a49bf3e4c15309c1b8e013","sha512":"26c9ce08f0b8b8059777d5dd806b09613006bc84cedc0ff3ee4b8c01e3e1b07f3a5e06a698ba2674a46128901ae5dfff43ba656124bb8a6ce9b135d6008fb378","ssdeep":"768:wj3t8z10BKltBMdANvhvUsEDcb4f92KK4cduloRN1YfSh2+:wjY10oVymvU9Dcb4fkN1Yfy2+","tlshash":"0dd2f1f45e14f4d273822d3b6783643b64a7c0ff2e9b5db1279a007d9e36859540e28e","first_seen":"2025-12-24T22:39:16.17862Z","last_seen":"2026-06-03T04:20:31.99561Z","times_seen":58,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet116o.com/api/public/v1/tur/partners/751/notifications/whats_new?platform=0\u0026country=NO","fqdn":"go-cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/notifications/whats_new?platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqhCZ3Qbdzy5XDYAJLw8LuccbzcENzBas8vjenXhNUTAzazYH%2BBZxdutehPGw5quuhOW1wbbgZ8vJk3Z6EkyoQOrvSgId51BvN1wSxUmAdBHp3FhJlM%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Ln_obzGH8WFc8ln3Q1F8ldGoGhtiv8Rrjw0.JPPMlRQ-1774138933.7921689-1.0.1.1-u4.NmpdfxjvIUfQlYIokZWCBIEFaOxvKNUGPC.RvKEdBigsAFQKSyzTiWI9C85pvAbRv19NRSKbNXOTCqN_xZC2WUCSgnLofyvxyFU0GIIWBZK5TFpnTZHKtLWRinYGs; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6edb73a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d3c54fbb58bdbc049cdb0511ebe72bfe","sha1":"952c530fa5e60d5e6f4092dca93e957ff475f0e4","sha256":"e937a0e69c3616d29c6b6d653f7b58c1dedced93f6c31b8c4c7edc0aa70af0e9","sha512":"dc0267bfc82cc2bb6c9c397203c45bf5c4515432a8fcd8f0c50bedaf985707d1c2ad0fa8bfc057e3e25bd40b82e41fc3d6b57ffa4ebfa26699345edfcb66571d","ssdeep":"","tlshash":"b8315335657d4f4c8f81178a9487f12ea40f035aec54fa34d658cb6690686b8d5331e9","first_seen":"2025-12-24T22:39:16.028828Z","last_seen":"2026-05-04T14:33:03.573483Z","times_seen":59,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/1055.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/1055.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1666\r\nserver: cloudflare\r\nlast-modified: Fri, 01 Jun 2018 12:08:10 GMT\r\netag: \"ec3d3d35a1f9d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 191488\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=IuI.OtCg17agdph_cgvz.Iz3QNEULjovogqNt71esqY-1774138934.2486594-1.0.1.1-cvflRHKq.FUgW3A8IIEGqWAuKuvRq_szEc73ZhzrnElhGTl6ng0QU8hpw83DC_IhI2NiDByqSbpVtoqAVRPrPNilLb_MDkF8FxnscRkTb_9epnaGt8yxK0DStwToR.nH; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uj9HLR7mIWD%2FP4yf4gcIlskoQswx7HFlzWJ3vWYVVol08TbTbCelK5vSU4Lw2Uy%2B%2BO0oCPvYzGS5IZuqjTsZXsl4O2zkykgFe6mun9d9z7VyUmRVjzVlrPwNpxI%3D\"}]}\r\ncf-ray: 9e010a730e58120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"322960706bc027089c04c5c6662e0d99","sha1":"25ce1aa31202acb4ac3a75d8f74899db812b7097","sha256":"bd3095f46bcd2ba38864bfae3906ec99797df53d2ac534fcf57cc5bff0e9ed7b","sha512":"0ab1a8abe1560d9bbe71b06d84f47e1de4289b96d4290b5dac7ecf91416511a5126b179875ad6cf54b6b47f1234e72dbdd74cf1ba1d1426680071fb5a9ec83fd","ssdeep":"","tlshash":"3d3138c209b57c08088c343be904737af3b02c5458aca64c3e7ccdeac992288fe26630","first_seen":"2025-09-19T15:02:44.908763Z","last_seen":"2026-05-11T03:59:00.710377Z","times_seen":35,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-D3fSQXEs.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:02.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-D3fSQXEs.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:13:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-113a25\"\r\nage: 505\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=7cTqpV6pJe8K3lVK3fpxpzMbaeAp1xmty6hr85TfJPM-1774138923.179845-1.0.1.1-Tzlz1cuwJrrNPAMcgUrP6jhcFh.Scw7xit6WlEb9Yk4JX0FV_X.Z0LbCZ59ukRiAj_a1ipn4eNe4YQL1cBI16FhePPSBNHvRRmoTxEKwZibScu0oFdq1AMg_iY7.ZDQR; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:03 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1KyfCVIMv2zL2EGXEBVH8O8SWrcuic7KQCCVAtCz7ILxfeQDC9emKvgoCmSlaE51vrdYqxyGjX9%2BDZHnUBkXyxLRl5kIvff1TcrdlDaOwZcU890%3D\"}]}\r\ncf-ray: 9e010a2bee8ba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1128997,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25207)","md5":"929fadec37e51bc98c507f08534eb166","sha1":"b55290765e2b2b36ccba7e4cbf769d24adad91d3","sha256":"ac4eac97d9c552ffd6e9ee38cf494ef9adaed90bf18c04fedc8f3604533acf04","sha512":"1178f47e487a9a6914759a26a6c9dbb5f3ba527d6527bfcffa99474d8c9b4fd3e5eda41af6293b3527ae764236331d3bccda1d18b6ce9275c6080c4507294c7b","ssdeep":"24576:5Dauc8xbGV0CzrP4e5DkXfhPy6L2Zmv6IoVxZK+inbuVIXEt70V/vazSCMlAjRBx:5Wuc8xbGV0CzrP4e5DkXfhPy6L2Zmv6h","tlshash":"cf257d85b155b97997b709e560af1002b2391e00f84dc4a0f57cedad29bd808a2b7ffd","first_seen":"2026-03-21T17:26:39.531015Z","last_seen":"2026-03-22T00:40:17.795538Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":618,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/localConf.json?v=1774138800000","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /localConf.json?v=1774138800000 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:05 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-1177\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=BZp5tOUkCXwBsfvSdi3r1aI9yuzMgoI.ZL_c68ziOIs-1774138925.6484349-1.0.1.1-9YibIyJ4xxFbr1vRPfLyaD1l7A7Ygl2ane8D0qsYq89y8ra4vOeocpbqjDVKAK_FYoN5p_C.V0oy5VUygWvbd4i5My6VSyhKe4zNaM3iFX4UCGZC2eHX9bpWiUgRD9AH; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuYQDuleaatOKNLYetetlr3T4y9%2BNPLW%2B50NL6l4oxSnjRudl%2FUqOmBRgxmEvGMxXR4zOKjj2gqO9LSZ2bVG5q15WcCk%2BymWOWg6bqKSCaLfu14%3D\"}]}\r\ncf-ray: 9e010a3b78dba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4471,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b406e9c7fcaf80e5ab91f27ea0f0294c","sha1":"54ddf99952cf9b0fabd829928125026af457240c","sha256":"a327cfe81199467e7773a331449db596ff5a5da012ace64d4ae1889c757bdf15","sha512":"50bb2149cb4177578ffd52d275d2f399922cf5dc4fe93ec9e32b840532d1dc7cbf148a136fc965a7e353fab249d5849f33dba3146a47b9f8053a574661b71f4d","ssdeep":"48:YuTyTbGhzyQnA8qA+9nIok/we+NPhwxbwPAjgCfk/wWp3Copi279lMFDQJSLhHan:xu2ByQA8qAHTwAsAjgCuE56szUn","tlshash":"7391cc9d31458cfec75eeac3788b679f3042811387982c06c27cef4c5676f19650a2ab","first_seen":"2025-12-24T22:39:16.189594Z","last_seen":"2026-06-03T04:20:31.881043Z","times_seen":82,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-CUbLXDx4.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:09.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-CUbLXDx4.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/WagmiConf-B0zYIpvp.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-466b\"\r\nage: 406\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=PLrYHJrn8zVu1QIiUx3uDKdInvxNcPWnElUJmjW_OMo-1774138929.5509706-1.0.1.1-fOqmgb8YW7XcoHHY2VOxf4T8byMgjEuymtLUfsg_N95.2oiIPW8xtKXNzXoWagTFUhiRtYgSQtEjQpI.xofF._5eiA8Z_N7WliusrHkJVPuJeII8mqGSQvnUFqHVa_ag; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7d92XEKix7%2BvVLY2yM2bIfaO9T%2FB7ZSu%2BUrrzVYxj901lFCXPV8015VmDLHayj6vPFrRQbln70rIHCVYUEELEHEPojIJrjEzUAwpno2ZFM4gfk%3D\"}]}\r\ncf-ray: 9e010a544dcaa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"f6345e5eb50070d1207ee46af95b1cf0","sha1":"8f5cfa73b1aab00daee26489e596300ddccf15f1","sha256":"ea360197e86b31d860efe7abfa07659d673d5508072c4a9f9494a0893921c804","sha512":"99726a9e011902acc4873e4538ad29c6b47f34c6e64550a2d9d37c97ee22c9d772544d3f33fcfa9c6eb16cfab541e5ac981fa61b9875a8bf8b54298bb4e6df05","ssdeep":"384:fvMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ6:XMci408FFnJrIjE3D/OY2E0xqpc1NKkT","tlshash":"818209d0e2b4f7a642e8aadd80392074f2208c2c347dd0f1b6b6edd974664ca956dd37","first_seen":"2026-03-21T17:26:39.594746Z","last_seen":"2026-03-22T00:40:18.08786Z","times_seen":4,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/homepage.json?v=03/19/2026-17:16","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /homepage.json?v=03/19/2026-17:16 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/tr/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:11 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-938\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=EMWO61iJF04RTVs9W92nrY7tVJ4pC0QCueFNrqlQwpE-1774138931.251933-1.0.1.1-2eTqeKrwxVe4SqWamS_vN3Ghdce.VyClrHX8VZUS0ZDRl35qpfXI03Ymmk4K4dN_aRvj1up2aLDDk.85mqeaQHXf5a0ANA.CcLvygSSavlQPwLYYnI2jJ09cozWrZ2Mr; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWMffzTqlrh42eVy8wRxXRRNMSqoBnrtGOJGiczhTO0ef1EQHMCYfWNRLd%2FOrp8zFXNWL%2Blb6e49jiA71281xl9aEniIiHK2%2Bw9X7k9Lxyerrkc%3D\"}]}\r\ncf-ray: 9e010a5eafeda0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2360,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"675b507b70f39e07be8925f75058608a","sha1":"42590b5b7e3a6f6bc8551077e3a98b0caf859e48","sha256":"947b6764624290fda0991b5e06f0cc8ec17f469fa6ea3abd374cebd9a25fdf93","sha512":"a11bbe53280dbad32c58212b454a474a02a254a4704964cda44d191e82e32cf6dbf79afb0329eb54200f9b07a4d89a5342b62c726bbe3aa8fb0888cfccfdadaa","ssdeep":"","tlshash":"39415d3d6c10deb8b3a08a23d28267c16546d968c7d44c5c1cedea6ad3ed29d1484fbf","first_seen":"2025-12-24T22:39:16.115426Z","last_seen":"2026-04-30T14:34:08.174115Z","times_seen":30,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/FastTrackTracking-Dwszikk4.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/FastTrackTracking-Dwszikk4.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-52a\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=9WYHe7JdkTfhIC2G1DsBlvYKjmoTmOn0dZZvVBelGQ8-1774138931.30118-1.0.1.1-MyLTr22L73e6yzplPsow9pWR.zyaF2AWx33SyuUUaJZvJ7i6_FX2Fwd24LtXH0_HYoia0k2c.LbRIqURbqSSkD2JoggnCtjKLiepOhvCHZpXI3udLExblzG2Te8rHn6M; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AiMTC39NN7Ndpir1P2UKFLYeNRclzGpG8wPzFHkJs1lBvE2WfLUoc32cyyW%2F4dsDxZhnoN4GBujwXA5qSyEu3PnAQ2PJSecA6vsRUWMkGKDjg4w%3D\"}]}\r\ncf-ray: 9e010a5f3818a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1321)","md5":"af41c045995fcfb27926ad6c22ae3283","sha1":"da167a71a31cd4d9b19e13d37095544f149ec6fd","sha256":"81450ecc7999e92453a3446ee6b61a01893fa5e85735a4ee749d9f9cf0c33bbb","sha512":"86af573598eefb92f27bf94d1c58424af046dd8ab98fc108284ccbecbb76bd74555dfeecb9148d10e40dcdfa1fbe53c6f0255669964d7a2d353fdb9bd08cee2c","ssdeep":"","tlshash":"c321750f90e443b47c804e8da3e7a261953d5871711ec4e1f0760bad3f0ca6583dac9b","first_seen":"2026-03-21T17:26:39.373556Z","last_seen":"2026-03-22T00:40:18.035421Z","times_seen":4,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/DepositCountTracking-CxmA8res.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/DepositCountTracking-CxmA8res.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-285\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=klDctmJo4jTi6gz0OB3W2MaiCQJr6Nd4pAdNcLZD4XQ-1774138931.6805978-1.0.1.1-toVN9hDhtUeotOmZIMvvT8dL9JGLnZ.zpPfAnHqlUprBPLXosmvrVzyiaJhx9r.pyp0WdJZdUnSDhE9VAEudKILRr80wQYT2MFjkAwC5SkPlDWpu8D5G8rPX5bDNiSPL; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEJahxxJn9Fe46t03e7AVDdJYUYBc5HS0HkGWlb5%2BiSUzWXZae6zpXD1Xe2RnmTfgzZPYUir9dyx35hp6I5Jg%2Fs97Otv%2F5%2FrPqIVDyTd0w3bu7E%3D\"}]}\r\ncf-ray: 9e010a5f6839a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (644)","md5":"9d4ba86dc1f2979b2061087e4b65ae2e","sha1":"c36d25550b91506c59fc28a1c9b6b59a818cb8f0","sha256":"0b444453f7ba634138131d4bab736e6d47b934a22a327e836cb1e4cb7f40d07d","sha512":"f5430ddcb6442609556f2f0d0aa7898a44c81b15386b06983ea5d12509976d70f1a6586b8c6510362579762c4634075f1db1171cf6679776be80b3aa1601efff","ssdeep":"","tlshash":"7df0dd5768b8d5f589493a8072c798a362f0791db906c8c386b98d470208042e4ccd2b","first_seen":"2026-03-21T17:26:39.534402Z","last_seen":"2026-03-22T00:40:18.198864Z","times_seen":4,"resource_available":true,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-22T00:22:11.703Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T19:33:38.803897Z","times_seen":16394044,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":74,"connect":5,"send":0,"wait":0,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/SliderMarket-D-md2TM1.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/SliderMarket-D-md2TM1.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-502\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=KriYoj.NWr8mK4mMnNFsyGSjfd3.I4tFdoibDjrNp4k-1774138932.4632912-1.0.1.1-xW8OP6vzdMpzoVtEuRyVjttsd2tCk7To3vvoYupBXHrZrzHQUgOz53tEMw7DUeXXoz6PgHVK95Ce3i86s.cd1VNn4YhSFy7WuYnyoVgaw7Lr6iwHOAtObIxYyxo7yGd_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PbEhp%2Bo9xFOjkSpJ0izlj8i5pjgQfODkXjIbJumggj%2FsLL7CUIARLbBdfwFg9y13w0U0UqQMuL6PTty6dBipQCddpKs5%2BVEqf8qNJEu8YeqKQ2I%3D\"}]}\r\ncf-ray: 9e010a66b9a0a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1282,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1281)","md5":"32d5d2bcf811f8d4c6b3a3871683304a","sha1":"b6ea75c35f6dbf3af65fa63667aceddb2f465e11","sha256":"eab3a50aec4e7691d32944dde37807869bc419ec8e7bed97f48c59acb0d85d60","sha512":"58163a7ecf99035db9755cb25ac4cbd82340113e82d909b582607517919cb9123bc734e6a0c7d0330e86cb9d1982b3f6ca7c1307bcf5d40eccbdc98a000a3f82","ssdeep":"","tlshash":"82211059e530e6b837668ccdc134172231351aa39bb4e2c1e06fcb111b38245b35fb26","first_seen":"2026-03-21T17:26:39.451705Z","last_seen":"2026-03-22T00:40:17.815239Z","times_seen":4,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-BnlPX2hH.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-BnlPX2hH.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:15:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-26774\"\r\nage: 406\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=gMl2eoIthpwz2VfjuWmZdOoopwq.JLs60pVUmi9Bj1M-1774138930.500044-1.0.1.1-GaBLlXQYjOdhCRdkgwiwBqhDi78XCOZIpIKy18Y2NymZ6zz3TLJfmBuGNvsrpBqNThsD3EdO7Ff5o0C5LxA7TCqHGlVOCVsvCEXC04dvuaUPvYHSkpQi2L6Y1Db6s4GJ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUMpcd6f88%2FdBgI15gTVrNKfCxgetZmDDDDkCZu6pvgCudGDsxOqV%2BDkadyjiqHSOyL41NXyuJuyyexgsvkq5MmW9akeRlf3Rw%2BKpEh7L%2FtSKtY%3D\"}]}\r\ncf-ray: 9e010a5a2f12a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ceba5fdbbb3a97901b9dc8c2ad5b13da","sha1":"34eb6dde8211dd82b04e0b064b89fd42c9347721","sha256":"ad91370fb603d1ae1fb182b1dbc011d8371c2d98850658bfdd0177eeb6d693f2","sha512":"e971aa680fdb7fdcf8ac304ba0062cb5cd618a9c2b95eeff80250378e39441a1e4098440a3c80ad3f6d6e0ee54f37e54aa74ff34b2f200af61b68f72cdca9c45","ssdeep":"3072:mbwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:2whFHU4HNwFH7MoOWexZFHV","tlshash":"02f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-03-21T17:26:39.513457Z","last_seen":"2026-03-22T00:40:18.06025Z","times_seen":4,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":276,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/getLiveGameAdditionalInfo-B63DAlG1.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/getLiveGameAdditionalInfo-B63DAlG1.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-47e\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=fN6BsBq7ZD5RqROTr2d_rQqGfdSiYCyq.q9lysa.bs0-1774138931.8265133-1.0.1.1-E6VjgupDOTnDtssvEYLtnsTslh6E8IDKFvDSVoZTJmqFL3CKrMfQ5RRqSeX.vBDUzcbqPAdN2G1qAqEPOLI64M07BLZ97PE1HAr.dUwqGn7dTgie9ajw3IpokpVJRwDf; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0Fj8Jw5pF7sOnN62jZVK66yt6HzdHYY%2FUoSFq1pW1M3db6Ew6MYuOnLV2GGr49T40ThGrrDNRa7jGJJqP%2BCAxdXssncJbc4UJ3aObkpJNtdp18%3D\"}]}\r\ncf-ray: 9e010a61d8c1a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1148)","md5":"81ebe665808459b6972bd41e409d2812","sha1":"aaeb597dde98ffa62584343db6067d94ead9998f","sha256":"7009459d3d46221c69360e4b75900b5915e58f769e93042ce6517ee95c856afb","sha512":"5fa482fc2763c005e76333b79999e5a4115fdd63a3472b1328c7700eff2291336c84f4f12715b6a0f2f91faa6ee1fb363bfe313b6edc5ec36ca16740d5b12acd","ssdeep":"","tlshash":"c72114b6707e92bba5d94d9457b01b31e2b5ba05384485ccbb3cc91918774c4a7e203d","first_seen":"2026-03-21T17:26:39.478099Z","last_seen":"2026-03-22T00:40:17.778154Z","times_seen":4,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet116o.com/api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcFI0BluwJkHpYtY0nd0KsvJwRWbxh5wgM%2BPdVPNUTu%2Btb46hzftp6%2Ff8K7bjMcd8P2tYXT6OoBrh0drojnpf0Cbl4kVNvwd4eS5oD9U5ZZFJgXLcoU%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=2MvaDiDU7.0IPvj6hWaMLkCBs6GDvrpPPlwwvipJatg-1774138931.9334183-1.0.1.1-x4xy2p61rFseOIs0ghd3rMoNfQzT0SMclGXtWYYlnoUMwsTfEcKbj9ZznLOuAkTaFm3ovMu9tjH_LBRWxlymOssolSdLnOGMkFhj47_qFGBA6rKf3KU2g9al0ia.ZsM8; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9e010a62795e1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13356,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13244), with no line terminators","md5":"192b6f174b733f9a1c7973ab41f33867","sha1":"462e79f02261e593a9ee785b0eb1dbfb168eb9e6","sha256":"f278e63b1b8e91da5cc122b90efd92b12ac03abbbb199aeda950b21627dd40e3","sha512":"8114dd9b7d96a092a5d586b8b008bedf9f562170d5b411f9853acc57c0889f408e673ed845bb782f570574ce0a2a6f3af6b081e3fab4e7a3902eb70f2672dfb2","ssdeep":"384:Jca8gLSD59lluptzIJQhYUEMaLpsUi75QpaZtRRus5Cr3A/0QqiXoV7vp+doj:qTCS9ncjzIWaJD1t4S8dIQEw/x14FxuE","tlshash":"0652dd23b02d9d7a5b543b40b4c3384ac9de5446ec0e9a70dc458f8d92ea62ec6e33d7","first_seen":"2026-03-21T23:21:16.98986Z","last_seen":"2026-03-22T00:40:17.936619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/UnavailableMarketEvent-CEcm-hzZ.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/UnavailableMarketEvent-CEcm-hzZ.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-134\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Tyjb51dkIW3EjWRy6rs4ZealFg7G7VJ8VAgjUWAppjk-1774138932.6370134-1.0.1.1-IsyqoKpMRlGdQzU0ZvWvIr__LoTJNlnfoniAqGqt3prfTmr.wsgO5.OdZuCINihnBF4GNAUshC43IE.m1TOMpxxv8Jj09Ojb7U3YiEVbvifak3Nz8o.kn4JgXFw1zH9v; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75pU%2Bqi8Cs0xibw17sVEepROYmepn560S%2FExodhucXqCcRmYKwbdsunDox294m1oj2ywGm6JdHNRMPhdcWnlLNvJ0eot0afJj8VSPVgYi%2FD1E5c%3D\"}]}\r\ncf-ray: 9e010a6789d8a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (307)","md5":"0b0ac8ff4ea1cdf1c6e3218d90af5f8f","sha1":"560311f83f0e70f7915a340a709fe175752e98a3","sha256":"7ae2345a86ab8a00f2b0a3019769022692d90986cb2a311f42aacf61a63cf460","sha512":"3d2d8cf095d4b2a186b587501f0908a86da704cfbce63b6f5943da761aa4661d7c352d57164d1ea49fbbf8a17c0668bc008b062f0fbf409e30b41ed85dedbd78","ssdeep":"","tlshash":"bce07d09b004bbfac02518ccce3e4f0d541207a5c7e945d391a910181b34261350ebaa","first_seen":"2026-03-21T17:26:39.660084Z","last_seen":"2026-03-22T00:40:17.841734Z","times_seen":4,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/css/fasttrack-crm-app.css?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/css/fasttrack-crm-app.css?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zbjvR4XmwNBIJlxjEvxcm_sn.IUZfztx\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2u9xe0brUXPFH%2FXjVNtppxqU%2FCOBO7Ri2VzVb6hjGVRL9I21rjXCKi1W3QP3T%2Fu6NGosPvCx36as19cf5Fn69ei6Tvz8rabawAymhKYDAX%2B7Mh9YHVw1dvn3%2F3SOw%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: xb7nK-gfa1JazaR_34yJVQwI2ikQjZMWzezgvNTuZ8FMDVUG_wPblg==\r\nage: 188\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"7906aada543698dba1005a917ffae2a7\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a68fe3b4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27953), with no line terminators","md5":"7906aada543698dba1005a917ffae2a7","sha1":"7f00d6655894909587fe280ebf09bf57f66b4100","sha256":"5e2a69854668603fcd556f0b8a3da306e3de6d5ad4dee7a9e9a57ca998269d76","sha512":"262f19709cde3e7abb7bb6d9724437b042fe626636083b80376e35a91d1ea9b39aec82463626711cb60a8c516a1b909d53aac644f056e77929e736fed6d1706b","ssdeep":"384:cFukqharVUf5rKbHWkAB1MG4TmpcHyH3XHZw/XNPalHfI:ckkqharVUf5rKbHWkAB1MG4Tmpc+J6aO","tlshash":"78c2442302c02288ac2b892b73d50599d93ec836651b6dedd7433955c7cb77e3a6b34e","first_seen":"2025-10-24T22:03:16.572036Z","last_seen":"2026-06-09T00:47:26.088616Z","times_seen":142,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":58,"dns":3,"connect":2,"send":0,"wait":49,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-app.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jD3YWZG5NtFt4BcajB7OMpiBQ.UUxxmD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zw7xihCBsjjrs3vQGNGTxO9IU7t2NqAzVeeqWJDCN49VBLvJZJyL9V3EsBSWCAtN%2Bq%2F7QbE87I2Tcn0h7wc1d7%2FQVsmRNnZ%2B2RnxJEy7vygAYWj1ptyzBD0bu4TwJw%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67fb37d4b7930077be54eaea3254b4ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: OI61jBQGd4QK_FlE35495MHORK8IWfmsE5c_HeEMDFe-PskFz8djPQ==\r\nage: 52\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"c2b96460440b1358a43a511913fcc46a\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a6ccc804c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":75107,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/fonts/default/Roboto.woff2?v=159","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:03.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=159 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-faf8\"\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=np6kScFpesMLjVyXDRd31NKm80ZFD2PlbkwZGx5lPYo-1774138924.2972877-1.0.1.1-z6ohJebCLa0EBXZivo2dNvNdHRKXM46OdhfQAZSF.3qBtbqQxiBQP5XoM1n4yWCxiQf5Km39cXPz8qDWX_nF6YXOrQWaq8Eek6_gj_IUksbBH_swu9g0OHUeEpt2oTRV; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twb3L4COnEVawYQE9%2FV%2BwrtAR3Y2Ol7cqGPzPbLWzGMF907zvFGQEVLuFZfjWTjH2ytqjCJUZ8dqowfUOD3fAL5HPWIbVKDtvV%2BXGNpQFHUgPAM%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a32df73a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-06-06T23:43:56.100029Z","times_seen":2788,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":517,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","date":"2026-03-22T00:22:09.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 06:53:01 GMT\r\nexpires: Wed, 17 Mar 2027 06:53:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 408548\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-05-28T06:01:00.163084Z","times_seen":12910,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/ButtonWithAction-DLXWMp1-.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/ButtonWithAction-DLXWMp1-.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-10b\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=bFRNBd3IDgjd06siY3.4bcyHWsYVa2GDdrhaVJSb.C8-1774138931.3339574-1.0.1.1-YibQNa8L793AehD_rrA2ZOxSm96raYOwCajqaDwXqQfhY4kaDU0Pa6YmMsbm_7Kq.EWCXCbHJcUWcOD8oGEJYApOM2iu8R_i3D169sKrT0jztJZZrYM1Bjv5.vkVVXbj; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1IP9KNl6A37Bgw2lfXofxNVmFK3jqVa%2B0smvl8YfHMU5qv193Alb08zA3TI3%2FfdGaY20y2uEOuvm4E1Tw8rtWdgB3%2BVczwRQBRYNFPK9x1YvrA%3D\"}]}\r\ncf-ray: 9e010a5f0800a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"2e89d4b67c0ce532f32cec3235e50823","sha1":"cd66782d133d21562bde53ab4bf77c8e3753728d","sha256":"d8c3af745c755279a4955eb849c11298796114efe59606016a33e13402edc40f","sha512":"909db2d090af51aa3edd713ba8c6171b576535f7507409d5af21c8735726120f3812da1c036c9d58f717c15f4dd2b1321bd4ac4658db2883c6ad48901aa138bb","ssdeep":"","tlshash":"0cd0950f5451d1f603c5fdd0a22bc41139257d60f7c4c451804819403b7179dc11ef2f","first_seen":"2026-03-21T17:26:39.607991Z","last_seen":"2026-03-22T00:40:18.009198Z","times_seen":4,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/Promotions3.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/Promotions3.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 30 Jun 2025 11:09:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\netag: W/\"68627085-710\"\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=iR3qEwv.hhtv1qm2ltoST4ij1XQb6.G9pWK32a6myBU-1774138931.890777-1.0.1.1-EQ7ivmgc0.EXxGkcYl6C09BsNlc3_uQw6SJZHw35gtyi92s7QbR2b7FizOP1v0_uhGJmKN3nPPFAKbVJzw86kW2qdYWKVWz9Qq0uEsKk3DI6_yexJ3Z1uP682rc66IZD; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wDAv0kHqb3%2BOJgzmob2uItCi1%2FJsraWsdWGR4%2BJ%2BlldLFaXgygpqAQ8aMCitfXLu7WciD4TY6j%2FtoMIG7uE72PV8FbVtBGYkDg2HfP6Yp4A%2B4fwQQ%3D%3D\"}]}\r\ncf-ray: 9e010a62e8e6a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60e5a10a5bbcc415db7edd6ea60aec4f","sha1":"65af716c48e21ed7c837e77c4b7c3e2f33205dd3","sha256":"a8c1d1768e9efff44b10ffebd02cb4959af6be79610cdc02e44e840f0ec39a28","sha512":"418d3b818cc59a64f5261e2cc27fa2234ef1bf94a886866217d032d211c2ee47b758410154acbb7721314b855778c3e6bbd73fd57fdb092c5703c9270796ed22","ssdeep":"","tlshash":"ee312cd8ee305570eec443ffab118988795614bb69328edcf22c83886b8390800288d9","first_seen":"2025-07-08T10:50:27.664088Z","last_seen":"2026-06-13T16:03:38.814232Z","times_seen":619,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/Tooltip-BFFrse_o.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/Tooltip-BFFrse_o.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-334\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=WZkTcpN2YeA325NH6jH3i7.aSMRj_F16FoQoqIPZcTs-1774138932.6081965-1.0.1.1-2iOvNtKMKrAXDdHsXMQ1f.5TyhkNl1uTYx_hE.dJB.JwZ_kxFibVzmBaee0PzmC7GuIBPUKm54vqSeHm.y_WU8jthP8Wkriz2qfuLuwMLCbvX0AN8f.EjubUTU6qIHIX; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUhUvgvs92hfbM0qmYHLFcSbZHCRNabAkVP5tJyyc1BWjss8ZphceCvsQUxN20FeUGcwfVnaULSfTYmPB07QvCVmDqNf%2FljDBY58JHQvWMU5TU0%3D\"}]}\r\ncf-ray: 9e010a6779d6a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":820,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (819)","md5":"5dbd6b1605963511da70c190fb431076","sha1":"32b83b773ff51e26a8bd8f6aeff9240609693883","sha256":"f8a2abd269bc866e1a5ae41159e53934a8d94ba6f6f8492eed8485e7e3d4ea31","sha512":"d09ba6a204efe8e82fd72310385d53c4c6fc14515407c0ba66c041ddc19ba91768fa100d5ad439a6362d8a263c8610e9a5bf86cdf8310dc55ddd146b64c2b9ea","ssdeep":"","tlshash":"0f01c246e032fbf4a17654da142e856d7153266c7e2f58f16038058e0ae4984d317b8a","first_seen":"2026-03-21T17:26:39.364122Z","last_seen":"2026-03-22T00:40:17.826468Z","times_seen":4,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492816","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /wc/rewards-main.umd.cjs?v=492816 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Mar 2026 07:57:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: b8yeTtvajr3_ju.8a313lC_ASV0iVU7x\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2tXOrMsF%2BO0Sr9Lf3OKd4%2B8uZ53%2F%2ByXVOEMgSKbRn8gkeDXdtmOt%2BZVQdm4VPzM%2Bf7VdZFLV1tMXEvudCcQLCTc%2FPo%2FXGjl8D%2FPZTcZd7pEaHS8SofGwLa5fkJj4zg%3D%3D\"}]}\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67fb37d4b7930077be54eaea3254b4ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: HMHjmOJNf_13p5cAB9jIQTqClbdCD9aByiBfHtDcFGMLa81Q_0oF4g==\r\nage: 188\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"a90bd08562c2b9ffa19b9fd0c10a8790\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a690e6b4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":994390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35569)","md5":"a90bd08562c2b9ffa19b9fd0c10a8790","sha1":"4417a4b58c1bc7a7ae0609d53ff30d14d99f586d","sha256":"a1193fdc8d0ee22d154c5fa8476594c51162fef2bd7ef36f50b6a9639055e481","sha512":"e1f04b124317829cc29540ff65b30f690410765717d284c6a648b045839501c084ed4addb13b3fed885002456185297a31d0148976f553a9398c056c213f4a68","ssdeep":"24576:PlkKatcX3lkC8MLdI+hRInTp9Km1rHOm+QToL2nlkxaCnTzbF6P37Bh:PlHatcX3l/8MLdI+hRInd9Km1rjToL2h","tlshash":"bc257d9072567534c3b795a260be050c723c5b03740ac5a8f2bc99a92fd7c9a627bf7c","first_seen":"2026-03-18T12:31:46.587385Z","last_seen":"2026-03-23T12:48:40.312382Z","times_seen":7,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":66,"dns":2,"connect":2,"send":0,"wait":45,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/397.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/397.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1824\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 11:20:48 GMT\r\netag: \"9e30ff4c7d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 11:27:43 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 219270\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=R7tb_TcpM7rVhZikLJ5D.46CYkUcm9iQOtwP9D1_8VA-1774138934.219811-1.0.1.1-kSo9shRfHo.jB4gQXmjScuxrcKTeaHeAIzEhZtzkIdHo6TQiNqAlBuVv8UCa1MRU19MAO25BLfqU0OXFFdr55ItOPv.BYlr5mtLK4S8RqbpcvK3.ux6xL9CP_C5vUVCB; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eb5uXC98YIUkFyeytVerL0ct3jA0ltDbtEe18spKhJ0OaSzVmp%2B61Mz9OqDppq9vS4hT9aMhy896VqsU%2B7Cwvd%2FauE7uFCCzU9BWiXp%2BtgbHC3%2FTqvMS1EWTpsI%3D\"}]}\r\ncf-ray: 9e010a72dd86120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"777348d6c88c0f9752d20313165bf7e3","sha1":"ec83db9126d3827e51a4a09e714562525618eaaf","sha256":"b33304692a78a1ca4b0591f7bc94dff978ec0f74bdd34a8b5825353a3875160c","sha512":"5487355868eab4280f747f9ce6c66f206df35f886c5a49bdb93ec55fb7799d84412cbda93e97e7aef6ac66932b7fefc5d1bf59d433744b1e31f9bbd17f558549","ssdeep":"","tlshash":"96311903626c6fdc8a096493d32a628760684af5c075bd28bc0c05457e3006ede7968b","first_seen":"2023-05-28T18:20:13Z","last_seen":"2026-05-22T22:07:06.352544Z","times_seen":335,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/GoogleAnalyticsTracking-DzsiAHbD.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-DzsiAHbD.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3588\"\r\nage: 110\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=GuXflYxRokMTa_HiOJYRTXSXyGp7zMQ9CR5w9MH.NNM-1774138931.873808-1.0.1.1-1DAnl9EqtHMLk.w6o1Ct.NCHi8isH1vSq.2VsLnLPObxfdytvwCNT4c.XYTIql7JFjnrUywPimlcqZC71G85kMKr6Ou3_s9LJDZHDStQK1SOVbKKefQIzThJ8.NyAn1K; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vbgMlUfR8ymmb0RU6wXRJhJPhJUvLK66qraFw9GltWEzeSyzx6yloPEk7g%2BvfhN8TGrQ0JlKdGluLqfSMYruRHdWH7u9DlIkeUECooiXH%2FNYGoE%3D\"}]}\r\ncf-ray: 9e010a5f5837a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13704,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10208)","md5":"5c30b07b6e6d96a02961fa121d936f2c","sha1":"b9a4142d99821eb90ab286e8accdd5d8cca5497c","sha256":"3b654664159054341a4e796d088aaa15d5b0ae7a460e47c74748a3768db23406","sha512":"f10646c49bb35a7ce60f4021e5671e9bf71ca8e2b1865132dbe0b0c70794ed01afe084d178b81be5435d1efc99ed275c78aa0afaaa2a94d4b5eac54c79d694ed","ssdeep":"192:sWYceR0SE+m/CTb3bHXCT76h1QxGE0VK7D6L7kBNrnPsh52Lz2PM7mBE:1YcoE/CzCuEP3Bky2PdBE","tlshash":"7852b55c32adb0b682df6054587f720bf1755910a458f480a265edf46ef8caf02abf36","first_seen":"2026-03-21T17:26:39.415393Z","last_seen":"2026-03-22T00:40:17.807909Z","times_seen":4,"resource_available":true,"data":null}},"time_used":993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":900,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galabet116o.com/core.js","fqdn":"dataspot-int-bucket.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /core.js HTTP/1.1\r\nHost: dataspot-int-bucket.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 09 Mar 2026 13:21:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 00:22:12 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\netag: W/\"69aec960-3da0f\"\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=aqJgWuNKhtvLwXshD8uAPVC6fYT8mLHFe4YAoEjgKC8-1774138932.9356723-1.0.1.1-AD678hcXL_vSjoAot2kcNm2p2g2DRB2QXP9cpIKjrnvl8oehHbhguKSRdispWWRAm2yMMD7pmNJUtWQzDBY5iY_WdFBAog6pWuqbM5nIO6z6mjYfxjD0fbgu4jVV.fNO; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OcF%2BhDLeB9nmn1AdWjoq%2F3IJ1u5ZjNyfuAeiCyOfrbgdanjVFuRxh%2FMdT%2F0hJD75TwzGfgFevegTpYUgYIcReAH82VN%2BdNMmbf3gih1voBAc7cJMI1jg0iRaITIYbFOUUycU\"}]}\r\ncf-ray: 9e010a697a72a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252431,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a1a23321d0a7b81fc124eb474f519164","sha1":"7302a4790a11a55a39af27b5c5d95391f36c7449","sha256":"ce157be72b0feb99d83e0ecb45dee49f9e8f69330da84cf33d65c8a80c297a63","sha512":"d6277696b3f9808906a75fa273e27c5777028965b625be99a466119e25cba96e635598bfa686bcfc065bb901db6dbeb2262b56012d65014d784bebc2382b5815","ssdeep":"6144:D1Osubz6j/kbklCp/5Kbb09tg8KSFO6JxC:BkbklCpxKbbCtg8KSFq","tlshash":"8e34944567f11c2752f6b0f94b0bc1d6722ac003251a9c8878ad73b85fcea7896f5bb4","first_seen":"2026-03-09T20:13:42.687398Z","last_seen":"2026-06-13T16:30:41.661759Z","times_seen":116,"resource_available":true,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"dataspot-int-bucket.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24390\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:03:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6940151d-5f46\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=W4gZ_L8IdSb7CEdHsOHrCxs4xYdOLbwqLEDEhjL4kNQ-1774138933.571729-1.0.1.1-MAjCeGdYTBAKbQHulByDCFjrxJmGDQuTPtjYjhPlUOMGy601GaSy.naXl8WgjLfQzBuudQ6egb8M2UGo_CpSDGzU49.y3P.VQ3xTGCnqK6CV777JUEcORX3LBn9k7yHt; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BkrEm3ZLPqC3pK8MnNjQa3PrH5srmhJiD%2Bto11w54HpmlJif4HPtFFhVvR3T473oRq0xwv9OX3BzXifx98dliftUyOC7%2BZsd%2FjHuS%2FkUvSc0x5UFLQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d7b16a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a343e21bbc8dd82b9a351018ae46fe","sha1":"ea31b5994a6dbc5e2c49d5f6eeaeb1c6b16df3f4","sha256":"08550d26480f3f6cf58fb6b50ba9c247d35c1eba70b6f2ca467abec7c84a19e8","sha512":"7c2cd2364f94f5a82d27ea07f251eabd2b42a03d1e2ddcb671abb80b897803941c05d8d3e2910c5fcc9844d5fb0e608c6b2063f1bf7c932bcd501efc709f5921","ssdeep":"384:lKjKORGzizM3XqK4PhCDkQcL5F0cqx1/v+zgxjfTE/a7PPY+xbyWBuPcCgfLdC:lQ1GzQM39QEkPF0cSN2zWjfTIfKjBe5x","tlshash":"5eb2e089da8861645c84f4483f4e24d7bb7816dcebaf083e978d0ee835c99b577b610c","first_seen":"2025-12-24T22:39:16.06566Z","last_seen":"2026-05-14T23:49:57.36494Z","times_seen":59,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxhYmV0MTE2by5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=fwvbs4wszfda","date":"2026-03-22T00:22:09.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 21 Mar 2026 20:57:32 GMT\r\nexpires: Sun, 21 Mar 2027 20:57:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 12277\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f85ea9249eb9545e59913387fc758490","sha1":"634c279c5a8f4484b2ed12eb314b72d1b9a650c4","sha256":"f185130589517d6b00eefbe9144c50320297d37c73792a012cf2d7faebe233e7","sha512":"e02abecb04f2bf6cb2ae4238f7aa36293f6ee36690f45d2084202392bfa5a70f7bcc7307dfce0d3f9d22ef65da523452f8646e267e695c052dc389e33865ef9f","ssdeep":"1536:K7Rpgh9C9ToL9gTNfWNfK4RxvDldthXwW5l1Dx7:K7ArC9ULiTYNC4RxLX1","tlshash":"29838e7338913a1afc2b8b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-12T21:14:04.643151Z","last_seen":"2026-05-06T20:03:27.67867Z","times_seen":10799,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/GoogleTagManagerTracking-DAQdr4EP.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-DAQdr4EP.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-4a35\"\r\nage: 109\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=lAUDm8OtqPHlXM8TRllo5swSdnggB8vzN6jXthIoQDo-1774138931.6974454-1.0.1.1-9CByISfRiOaiy.jZC6zW6JTsPAZaXFkb9V4gAUsb35OTR00cn76WDabY7HcHspw5.ZEmbKqCvD8yyvHFGSRiPs42PqO9oxiOMEKHiTykfoHINE4fYk6Sy6.mmyvBACBM; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNZiuMLXm0UrkAtQfASrOrC0Uj8NKPRXFGD2bxJl5n5byOooAOKnUSAqkS8iUfDGxxICrAevZDdtlSqJqs19vSQGqd53r6Yuzf%2FSn7PLWV1WwHE%3D\"}]}\r\ncf-ray: 9e010a5f5838a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18997,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17701)","md5":"1851f665ed369b09c168336a0dfc7620","sha1":"56104bf45809c75b4adc2c608aefe6cf8b84bbb6","sha256":"278a0f52fbce8ceed2a9b0a736b6ad7b2d4229c55e7546093d62a9a550d265a6","sha512":"6c441232aeb4d969ce40dd487a293f6a0efd543b5a5f92bb46af589c9487f433f660a280888d7fa139778497f08bfe7af278653166345a79197242731ceca54d","ssdeep":"384:db3bEI5wTlaZdtdoNc5GRU52iWD+FOTVKWZxxqyuQPfg1F0TQOmJNw9vU6:l3bEeSEDdoNcwiAiWqFOTVJZnqyuQPwU","tlshash":"6182b9d7f96548e0a5bc1fe81f92428b35b1b669f48140747c9e7c0c233cc4ef2a5a99","first_seen":"2026-03-21T17:26:39.471571Z","last_seen":"2026-03-22T00:40:17.99841Z","times_seen":4,"resource_available":true,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/getLiveGameAdditionalInfo-B63DAlG1.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/getLiveGameAdditionalInfo-B63DAlG1.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-47e\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=vQm3lE632YALZW3VLD5H7eK.Mq78.luetk_a2Ns7JyU-1774138932.6005492-1.0.1.1-9.y5tM2kuVeNSZ1Fynj_KR.6hEFbq3562AmtkdRtaLhaNnzRpJ1Al47cHPTw7emI3AvM9dWXP9r0uhWc2bLh7FDBN_aer5K2QbwdmJRj4utkIjJr2vYr0h_l8ppdSwDE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5otm5J5y43VHXVDwCPdYQr2heN1gYyZGVKd9sxcU1ADwEBvfGXwwwCjq7lYcZjV%2Bo4ihHWbRFNYBAFAFZWWXsrETW7OVM285fcspsgmr5s8AKI%3D\"}]}\r\ncf-ray: 9e010a6779d1a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1148)","md5":"81ebe665808459b6972bd41e409d2812","sha1":"aaeb597dde98ffa62584343db6067d94ead9998f","sha256":"7009459d3d46221c69360e4b75900b5915e58f769e93042ce6517ee95c856afb","sha512":"5fa482fc2763c005e76333b79999e5a4115fdd63a3472b1328c7700eff2291336c84f4f12715b6a0f2f91faa6ee1fb363bfe313b6edc5ec36ca16740d5b12acd","ssdeep":"","tlshash":"c72114b6707e92bba5d94d9457b01b31e2b5ba05384485ccbb3cc91918774c4a7e203d","first_seen":"2026-03-21T17:26:39.478099Z","last_seen":"2026-03-22T00:40:17.778154Z","times_seen":4,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/fonts/default/Roboto.woff2?v=159","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=159 HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-faf8\"\r\nexpires: Sun, 22 Mar 2026 01:15:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 409\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=fOyqxDKby2N9S758Wx2qlaD9Qu8fhkysm92NqykGrn4-1774138932.7027395-1.0.1.1-6HP5weQkXbRomvi_fmNxGU6Do9Bn2qynQfccarq1bMHG7ooUMc3LrP17knGVS2jlLBcXXDVDnzHFTKSeF5F9FVbydNGS4Q0bkJTf_6xKePa7FgxrWxi1f.ig1QOidoT4; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o11WZHNmU%2B3n%2FnRwL8FFGicWiWvd%2BpDmqZKneSC8k%2B%2B5a%2B0MNeiWTRA6Kv196AeZrUDbD4qelNoqqgtux792Tv1V49VrEMr0QjPYPjIQXeNfMOU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a67e9ffa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-06-06T23:43:56.100029Z","times_seen":2788,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/403.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/403.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 945\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jun 2023 13:09:57 GMT\r\netag: \"6c26b2b54abd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 15 Apr 2026 22:48:36 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 437618\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=S6xBadZC4eNpt.gylAHHE6CYFdWbDD_YTjDwlrivtuU-1774138934.2280042-1.0.1.1-VaeZTVj.plplTJhh5M1J6QO0J1BpcmkoCodMdou967rAfvkL0TArH5OeXoSA8W3ehLMHpnIOuqJKMwVuZvJjx3VolBAjiv9bEafRNU6grHwwv5WaL8ULL67MuCu3tmzo; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PYFokYD9e7vBQTJH2E5f%2FEc9jv%2F%2Byj2vlRbul6pbU3L323XJQMR7yWK9N59KyS45rMVPQZ9L65ZlRe0K2sPF351yhlbYq4U8UeR6P%2B0168x7t6Sy6ieo41tM08I%3D\"}]}\r\ncf-ray: 9e010a72eddc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d6792d49d3439ef0c5a88f2255f568d1","sha1":"eba8e82d1fcc6228e955d50f949f992c40a09ee8","sha256":"5e0c37b00eef60d609e7d5456aedf5168e4fbe67df8fa9c3a30176217f669918","sha512":"c5a00d4ad195f700a89bad4ce29a11e37be62e636bb8e924328c2389c5923c1d98f2914c801332a73a1854d117d3189e103087bdd8bb1b26bb68a55f3bb48c8d","ssdeep":"","tlshash":"6e11c8e605bdc0fc0a0f49a2c21a5d62161951f5273923caa416e27abd302c6005877e","first_seen":"2023-11-04T19:13:32Z","last_seen":"2026-05-22T22:07:06.661466Z","times_seen":389,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/1/2294.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:14.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/1/2294.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 714\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:34:36 GMT\r\netag: \"b0f1ee36f5ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 3707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ICBVgxX3aTu7Ar.t7bmpNQRjccKErdvTVO76la9OaNo-1774138934.2775295-1.0.1.1-KYKeya85MBN6Iia9ANRz70UdOcpHCBMBtDqqhBsbq.8aaZUmo2QtLEHneBerS36olB6ichpSa3l.JYyj680tzye.fReKIDnoCcvBnXBU9H2tAG0E.DIeQ7bmiI2Ro_uF; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sun, 22 Mar 2026 00:52:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7S587ArxToaAdfRLNGy4Nm2LImHdHLiFuKKhPRw%2Fcvw8oC%2BJ09sUDt%2Bhwie8j9F0WUzZmVgetSagaUUGoCFuvxgRYa%2FjUqDo9b4PXO0IiT%2FJgNTJIJvZBpY%2FM%2FI%3D\"}]}\r\ncf-ray: 9e010a733f1d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"0c0e3e175d653bd196e747a2d12bd258","sha1":"7d80131896a7f37573137b5ce07cc5919e3bec83","sha256":"ba0d774d456a2fc03949eece01f7bb544aeee31f9b06ecc2cdf9ac1ba86945fa","sha512":"2d336591daf90fcc599b071f168dc7357421fd5633e663377dc6bb8931ed1268ca8abd4445c15deb8a70c7856a3b605cb913448f4bcf769613fe487887902bdd","ssdeep":"","tlshash":"7a0144d50d8f48faf8896f5d89a128104926a5bf09a32cc94a2dfb1837496bc16b4dc2","first_seen":"2024-08-19T19:02:25.982034Z","last_seen":"2026-06-03T19:17:53.428735Z","times_seen":114,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/svg/VirtualBetting1.json","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /svg/VirtualBetting1.json HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=LRhzPXmO6dSK2meSjAkc1hyVfLxetmGeB6xSPq21agw-1774138931.393676-1.0.1.1-rUdfW_TkVI5Q_uTG0j_qPsTKsPtyyxpsPbh8r93n7EUmF_kjgd1xZT4fPAfN6b_0FsGY3tlmCU1CrD5Mx9bq.b_FeCaEnlmOLdgJzSbqxsEiURI8ZCkAhEv0oZYWEaut; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSRSngZHgxexqHSQOJDl%2BVZ%2BxE1ze6fRXtlSMGj0RUWRS%2BA%2FJ%2B%2Bvdc3Hm%2B5H6ew69JeRwIO3wOaQOPnX4bjJ2vx2wq4PUuLSj7Chq1dm1uGdbcEpnw%3D%3D\"}]}\r\netag: W/\"68627104-320\"\r\ncontent-encoding: br\r\ncf-ray: 9e010a5eecec1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":800,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d36eb3cba0196446e5ecd1a41eb6a1f1","sha1":"d6f113e0850fe1dcd80528c0efe40b1b9b0e38ba","sha256":"9e07f25c6032cecf5b0bb0c9fd6411af2930a1fa4be994a7c9125a9047e3db3a","sha512":"6eb0be89ad9c5f90473a271a751901c458c9dcabe6116b8fcdd95d97ed741328571fc081f4652f41f81a6a23eb7ff9e89e290b39af1799fe5d75b96ea78743b7","ssdeep":"","tlshash":"9201f1edd57025f0c4882befa76905652bff443b0552bb28ceaa0d0c3fc796d9210422","first_seen":"2025-07-08T10:50:27.844023Z","last_seen":"2026-06-13T16:03:38.770743Z","times_seen":1574,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/userJWE-DjlZLNdN.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/userJWE-DjlZLNdN.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/FastTrackTracking-Dwszikk4.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-c1\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=_VaeefPcnHn.FxNWFXz2z8b082eH6ss8X3wY3gg1uHQ-1774138932.040928-1.0.1.1-qQYf10VJkKaUnkHFTS4u19ALt97nnxtF42IGmqkqDpYBCbaIr9eDkgo.dttxr4nW4au9dk8WSHdATbHphuYnYIhBrkwm0MQnSCkuiWsr3tY.GS.0uhNTprP7wmqG334H; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uOo50IEzZPwCiSNuatsvtJf6L%2FyHlKPrkXX%2FfEo%2FFs14kt9Z%2BmrLmiYGJ0Vhm8xgI0MXz0vtxwv%2BBzPzFp0s4HyIg5JgJEbhyqrK4cELZlJXVH8%3D\"}]}\r\ncf-ray: 9e010a63d906a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"508c7f0a90ffbb5b03c98a9a7dc24c36","sha1":"b9e31f5961c5466efe981d1e76f0d812c251d678","sha256":"8deb2e3f97ba996e49168980142a357c49d4641bb9e2278358c5630cc64cfb8a","sha512":"a6bac2efcf8d93fc449c37c3606834bd751181d3ce3381429e8c5f955c263a4d0f582e8a0e13a584fbe412848395e8ae1f730a2255ab5162e4c53c81163a5aa5","ssdeep":"","tlshash":"d5c0c0db0cd411f7c5583c501007dc138230391473d8d3525b08c3ea7e5104bf10ca14","first_seen":"2026-03-21T17:26:39.726618Z","last_seen":"2026-03-22T00:40:17.996301Z","times_seen":4,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/index-5iQrWYQ_.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:12.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/index-5iQrWYQ_.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-b6b\"\r\nage: 110\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=RHOjg3bb8SdAnsZ5x0YSSLj2ZTJ.1HmRLPRD6i8dTbY-1774138933.1368532-1.0.1.1-MEhuvRXdRfG0Yb5KKMoEHSLbvozeqvwPLUzULQy9ADSMkK4vJCS_Wo2thym7z_mOgVXOs.7EnlpYFiGKlASQQWTL4KMxcfj3bMF_m9N1zPzlbmowRXQEl7ZCCjz1.7OO; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQnf0G40sCf%2BO6LiZFpW5I9Fji5dbc%2BLZp9r3KFoIOviuMmbq%2BZWGeMIkzngqgjYPUvsHI%2FXxqVQUjbh0hI5YPl2Pp%2F4rMj80mfB%2FP4m31pqeJg%3D\"}]}\r\ncf-ray: 9e010a6ada92a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2922)","md5":"31e010232dd36469670cc2df8c881344","sha1":"029d5bedaa5607a234dfaeca2c6714d403d0f283","sha256":"d880db5966832fe6c39364ab8dfefe271f514cf8e5bf8aa1b86d5875c2c591b8","sha512":"6ce98fd2a8be27394661bea778cf317e1d971c3394c71ee899cb6fe0cfc4e85cce60a1cb676d3b7ae3161e368437ba252c603b73dfa3ec77e31a9cfa7dc1c3a0","ssdeep":"","tlshash":"3c5121c76042e7f4afe748a6429b10b074374d5cbe1f84a082be58964998792e35bf8d","first_seen":"2026-03-21T17:26:39.375997Z","last_seen":"2026-03-22T00:40:17.988097Z","times_seen":4,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet116o.com/storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp","fqdn":"icons.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:13.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp HTTP/1.1\r\nHost: icons.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30858\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:02:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694014e5-788a\"\r\nexpires: Sat, 28 Mar 2026 14:44:38 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 34654\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=1C5vM_ITZHikY4DISd.P.7lh5kfOhzeA_Gm4BoRr0i4-1774138933.5786014-1.0.1.1-m25hSG8pHB06IRlMxA3ZvbBLlLwrKp696gaXG4kGVG31RKpR0iygj.fQWlthpqW_.7pi33szQl8exqd4speOocchqQk7hyCP5nzoSQlxawIWczLH1KenDGhKZCWCzKa5; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uiNSl%2FsLG2PRy7w%2Fb0oIdgYq27Au5yJRJ73gGxtZkZZTrq1O%2BP6Bv2GpnEOtquBjezAoSQnJ1%2B7MfT0KI%2BVDnBg3hpzW%2FUcYrfRZh78nT96XHuWUg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a6d6b10a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":30858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3a657bf250f0501b6684593c6d3449f","sha1":"3ae10ca24e1ed4fd7f3ee97a04029f84edb29c60","sha256":"4df91740f4d1d34398bcde4b0e71127587fe51241c3283f3e7a3bcffefdfc21e","sha512":"c70376beec80f90f2b6f42daa10038112bca9eb928f50f6dfbbb4b8e9054ecfde0afd7aba72fa826bd64ab0615dae03db9d608d7f63e06af394bcd5b669a2ec5","ssdeep":"768:X2NTeq/6/zzgNTdJxlOo7U+QcbTMcipzeGy3sB1I0:4Kq/6/0O0UOOzeKBS0","tlshash":"22d2e1a0782165c72e6e25483195487b904f5bec73687de5b9ac03b3ed0e2f24f69339","first_seen":"2025-12-24T22:39:16.142316Z","last_seen":"2026-06-03T04:20:31.9141Z","times_seen":62,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"icons.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"icons.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:05.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e010a3b983923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-06-13T19:38:05.166897Z","times_seen":59581,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/menus/app_menu_751_tur.json","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:10.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /menus/app_menu_751_tur.json HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:10 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:22:10 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-1adb\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=KKbsQgYRpvumuzOcHVe.nTFMjjZC_MYp5JdyDRYZG.Q-1774138930.5302892-1.0.1.1-k03ku3wQS3veKLQb.VGe0KVTKPkSr5icPE8yTyLuclVoLJXNkPPuEXHGAXW7yrhKf4bCIpMeZohzlf4kPaTP8_BCQV6c2gAMOkmwOs3Ih9Dp_glkHGUKgsC.ztCpzqTp; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4m6zYjDzNNSs5VExdEtS0UFop4wD1ZM7MguMllP3nbvT%2F3liNfKEtaMomKdabbj8xA0CzSRXDfqKaGZ9SVsS86tDd%2FWjODiNiaGHC4i%2BBHeftDk%3D\"}]}\r\ncf-ray: 9e010a5a1f0fa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6875,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a341d5884944ed085b5648556ea79ceb","sha1":"fb229ad23255667cd371ff03319813a90df65b0b","sha256":"ea9221c063848a89fb47875ec7199458219f38919fd74c2e91b42886d6ef2edb","sha512":"164600a6c059e90a004a8793720b36b327e16b22de1b1ac1c2d859ba1e5932229f80e5478a7653c51c3ed8739b5e900683d2bb0c6fcc46854046988819474c72","ssdeep":"192:SSkcUlkiU+kuSkAUdkuUQkZUckTk2UUkoekIU1kvkq/UKkJUdkpaUAkvSkGUlkM4:Svuxuvi7iwbCCMjHxvv8MvQqzaKTi","tlshash":"ade10702f01d5976d30c3e00bcc76d5b888e50996c9d19419e4d8acecbd649fdacb6db","first_seen":"2026-03-21T17:26:39.654441Z","last_seen":"2026-04-04T19:51:35.181576Z","times_seen":15,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/flags.png","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/flags.png HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s1; TawkConnectionTime=0; twk_idm_key=XksA0v02MPhkymiWn5yP-; twk_uuid_69bea1f2efc5d11c3692a406=%7B%22uuid%22%3A%221.Ws5FcEtapcD2c1d80FLqBESm7azqtxesVixuUtLGCsJPqKIvTxEu3LsYvIyHHwzcpvNdtvmU1kR0Wvv2lTbLU3YdXhF44VpY58W2njBV5JBgpER5ypEpTDH1V%22%2C%22version%22%3A3%2C%22domain%22%3A%22galabet116o.com%22%2C%22ts%22%3A1774138926798%7D; _immortal|user-hash=gdOy_Ino2bhCMGqUWGcXi80IH7jGzpHKONz2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 94974\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\netag: \"69bbf7aa-172fe\"\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=_SjZN.Bnlg0H1kG0P_Tqov9wBs0ZW2fCrpn9CezcJq4-1774138931.3378935-1.0.1.1-JkgOchNt6WRz348c7k6ee5kTEJgDHIo_KP7RN3gDk4MwPKd6GTusJs0jRA0xSw6oWRnA_vHkFYHwdbREK7ER1Fa32wtrhhkZkExSiRPuc48JSJWhbWyFsSl1EFF_aN4X; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1twL2CYCKjQGbV6cx9ObbnuaV4RelD5QTGjR51xz2bcZHuF62zaF5ai%2B6qDWBZW1L4DHVst1mV17ndDyoIILnN6bVXrAbEStKtdsdqd01MsZkc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9e010a5ebfefa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":94974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 17960, 8-bit colormap, non-interlaced","md5":"02c3b5af3d0ec1f21c51bf21a22241e9","sha1":"c39c097d704c754294e3fbed23b80e502054396e","sha256":"1c0578c469db9a3da5c0b6fa0258f99b2a2ac602d0027ab6fcb7b218c3acbb75","sha512":"bb097e3532e83aa4db8e8dd7cd16d95d83ae77f4cc19207f04f3b929ca695ebcd7f5730e9ea888763108c95028f40f81490a03093ef8d57665c6f4393091dc63","ssdeep":"1536:wxq8h3gUrI89XxfLcduXa08ucH+te2RIr8T8hKdPzgkjM+PDRzSKR2JLDpzm5NLX:Sq8h3e85FquXPAeExk8odPFg+tzSKe3M","tlshash":"509302ab06de36c6e10b2e9408902d3c720f65fdcba545ad497cc743d8e5a68d48feb4","first_seen":"2025-12-12T09:55:43.277784Z","last_seen":"2026-06-13T09:14:25.794303Z","times_seen":835,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":591,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet116o.com/assets/BetslipButton-CNMBkbkj.js","fqdn":"galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"104.21.37.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /assets/BetslipButton-CNMBkbkj.js HTTP/1.1\r\nHost: galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet116o.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 22 Mar 2026 01:20:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1a2\"\r\nage: 109\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Mmv4OFx5qm5QpWIP2Eb89ghhf1ava9cw0wIfpKzhqOI-1774138931.256104-1.0.1.1-Q.B7qOHaH0I1VlhVjZVRaYIS0IhFAKtkkE6iqunOtbybOMuCXk9HjbulDuACbS_kS.KGxNZ1lguB36xBjssV6JPkOm6B.u8P_1ZVaoyt_5okWRF0O0Yy9Me777lIIyjY; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6bMpavEz4AMzuehfeExq%2Fey9KWmPLvyrmRaY5Ze3we3Cx6RJfB5y%2BcZl8%2BDJUAFO1S%2BEGt9QqYIjftP3mov15tBM84x9Mgmfuo47y%2BNz0DZA0w%3D\"}]}\r\ncf-ray: 9e010a5f1806a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":418,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (417)","md5":"249176655ccc714dff62a32ca7344125","sha1":"b2405b4b60d6bc4ac573b2f02a73ccf50fb95d6f","sha256":"55fbe0abfc99ec5c3486183b6cccac4ee249dce7d36664b5fc8cee69ecef62ea","sha512":"29545a89b954d8bd838e455af8c8ff502c6cdcee4283698ee957784188664cb775b081edf08664d5fe201a8db623035e744a105952a58a07402ea03407da783a","ssdeep":"","tlshash":"40e0f1468948c2fe07465dc121078502343269bcb340e5d280a92c527fb4689c45fa6f","first_seen":"2026-03-21T17:26:39.706598Z","last_seen":"2026-03-22T00:40:17.78654Z","times_seen":4,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet116o.com/api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet116o.com","domain":"galabet116o.com","tld":"com"},"ip":{"addr":"172.67.210.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galabet116o.com/","date":"2026-03-22T00:22:11.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet116o.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:45:47 GMT","end":"Fri, 19 Jun 2026 13:45:46 GMT"},"fingerprint":{"sha1":"1A:E7:2E:D0:4C:5C:F9:D3:42:D9:69:25:34:69:9C:60:74:3E:41:1B","sha256":"64:C1:6C:E9:59:A2:8D:77:6B:84:EC:01:98:A8:64:FC:82:96:D0:13:97:FA:98:42:07:31:46:F0:22:5A:F3:54"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet116o.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabet116o.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet116o.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:22:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtNp2Yd%2Fw3SbfsTIdPCzI3Ywzik3HpHTDsZ7HE0PTdum3ON8e9XQhg759zzW%2F3%2BFGOEBHbl%2FZkyKfCwOSVsn2APggzJcSym0V27%2FOkHAr6P9HVCw%2FRw%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=GUtuanEaJsLtMi1UoYBtkn.E6iuuJWiPxMInEEwi3Jk-1774138931.8054771-1.0.1.1-AbNecJNHTuDlqDmSJ6_pSZFqT65hLOQQcccE0Dt00C_DeGfqN68CP2Uki6TJEXPhuHOsvRfzzd7G.EU6Yg0VEiloJt8p4BLWgcJim2kfWNjSURwoxiI7yfJ8S0bOsSe.; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sun, 22 Mar 2026 00:52:11 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9e010a6279721525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1702,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a677d84292afed10e693067e7563289c","sha1":"432315dde2dbaad3add3b77a5e68f3c6e7e8be8d","sha256":"32b0940f6cf126a050c3f648687a9d4238a616ba8bf432b6dd5c2b0b89e87950","sha512":"ccda283af9125698f8574ebfdf1beec21123935c617366392d1fcdccde79287aededd3248efb0acfc09998c5f379048de39cfc9f0a457b9ee32d910bdbc532c4","ssdeep":"","tlshash":"9d319b13b42d9cba6b547b00a4d3394a88ed5847dc0e9570dc898f8d92ee63dc6e32d7","first_seen":"2026-03-21T23:21:16.946823Z","last_seen":"2026-03-30T02:15:03.279338Z","times_seen":11,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"go-cms.galabet116o.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"go-cms.galabet116o.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}