tr[.]galabet-adresim[.]icu
“Galabet Hızlı Giriş - Galabet Anlık Site Girişi - Galabet Güncel Erişim Adresi”
tr.galabet-adresim.icu — सर्वर त्रुटि (HTTP 502). घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 12/91 (BitDefender, Chong Lua Dao, CyRadar, Forcepoint ThreatSeeker, Fortinet); URLQuery 3 alerts; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 92/100. रजिस्ट्रार: NiceNIC.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain, tr.galabet-adresim.icu, is identified as a credential phishing site designed to harvest user login credentials under the guise of a legitimate Galabet service. Analysis of the page title, 'Galabet Hızlı Giriş - Galabet Anlık Site Girişi - Galabet Güncel Erişim Adresi,' indicates an attempt to deceive users into believing they are accessing an official rapid-entry portal for the Galabet platform. No specific drainer kit signatures were detected, but the domain exhibits classic phishing infrastructure characteristics, including the use of Cloudflare for obfuscation and anonymization. Technical indicators confirm the malicious nature of this domain. VirusTotal reports 15 out of 95 security vendors flagging tr.galabet-adresim.icu as malicious, with a Gridinsoft trust score of 0/100. The domain resolves to IP address 172.67.150.92, a Cloudflare-hosted endpoint, and was registered on May 3, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It appears on one security blocklist and is currently blocked by PhishDestroy. The domain was created with a future date, a tactic often employed to evade immediate detection and prolong operational lifespan. As of the latest assessment, tr.galabet-adresim.icu has been taken offline, reducing immediate risk to end users. However, the infrastructure remains a potential threat, as domains registered through the same registrar and resolving to similar IP ranges have been observed in recurring phishing campaigns. Users who may have interacted with this domain are advised to reset credentials for any associated accounts, enable multi-factor authentication, and monitor for unauthorized access. Organizations should update blocklists to include this domain and its resolving IP to prevent future exposure.
नेटवर्क सुरक्षा इंटेलिजेंस Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | tr.galabet-adresim.icu |
phishing | Phishing Block |
| DNS4EU | tr.galabet-adresim.icu |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | tr.galabet-adresim.icu |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
SHORTDOT ज़ोन · सार्वजनिक साक्ष्य
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Registration: galabet-adresim.icu
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain galabet-adresim.icu behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-20 03:00:52 UTC
Casino / Gambling License Verification
तकनीकें · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
साक्ष्य और बाहरी रिपोर्टें
PD-20260504-A91D96 Recipient: abuse@nicenic.net, abuse@gen.xyz क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।