m[.]galabet01[.]com

Analysis of the domain m.galabet01.com indicates a heightened risk profile consistent with a crypto gambling phishing operation. The site is currently marked as taken offline, which aligns with recent takedown activity by the PhishDestroy blocklist. Registration data shows the domain was created on March 03, 2026 and was registered through NiceNIC International Group Co., Limited, a registrar frequently observed in malicious deployments. DNS resolution points to the IP address 188.114.96.3, which belongs to the AS13335 Cloudflare, Inc. network located in the United States. The use of Cloudflare’s edge services is common among abuse actors seeking to hide origin infrastructure and leverage DDoS protection.

No TLS certificate is presented for the domain, leaving connections unencrypted and exposing users to credential capture. The page title retrieved from the live snapshot reads "Galabet Giriş & Galabet Orjinal Giriş | Galabet Bonusu ve Güncel Adres Rehberi," reinforcing the claim that the site masquerades as a legitimate gambling portal. Threat intelligence from VirusTotal reports that 15 out of 94 scanning engines flag the domain, reflecting a consensus of malicious behavior across a notable portion of the security community. Gridinsoft assigns a trust score of 0 out of 100, effectively rating the domain as completely untrustworthy.

The domain appears on a single external blocklist, further corroborating its malicious classification. While the exact phishing landing page content has not been captured, the convergence of registration timing, hosting choice, lack of encryption, suspicious title, and multiple vendor detections creates a compelling evidence set. Defenders should block any DNS resolution to m.galabet01.com, enforce URL filtering on proxy and endpoint solutions, and monitor outbound connections to the associated Cloudflare IP for signs of exploitation.