galabet[.]turkiyewin[.]vip
“Galabet - Galabet Giriş - En Yüksek Oranlar - Canlı Bahis ve Casino”
galabet.turkiyewin.vip — Kesalahan server (HTTP 502). Peniruan identitas merek: Cs2; Jenis penipuan: Crypto Gambling. Ringkasan bukti: VirusTotal 9/93 (ADMINUSLabs, CRDF, Forcepoint ThreatSeeker, Fortinet, G-Data); URLQuery 4 alerts; Spamhaus DBL_PHISH; PhishDestroy score 81/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain galabet.turkiyewin.vip was registered on February 27, 2026 through NiceNIC International Group Co., Limited and is currently taken offline. DNS resolution points to IP address 188.114.96.3, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. The authoritative nameservers are josephine.ns.cloudflare.com and troy.ns.cloudflare.com, confirming that the infrastructure relies on Cloudflare’s DNS and edge services. No SSL certificate was observed for the host, indicating that HTTPS connections would not be trusted even if the site were reachable.
The page title retrieved before takedown reads "Galabet - Galabet Giriş - En Yüksek Oranlar - Canlı Bahis ve Casino," aligning with a crypto‑gambling scam theme. Analysis of the content tags the operation as a "Gambler Scam" phishing kit, a pattern previously linked to credential‑harvesting sites that masquerade as online betting platforms. VirusTotal scans show that nine of ninety‑three security vendors flagged the domain, providing independent confirmation of malicious intent. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, reinforcing its classification as a phishing vector.
For defenders, immediate containment actions should include adding galabet.turkiyewin.vip and its resolving IP 188.114.96.3 to network‑level deny lists, updating web‑filtering policies, and monitoring for any newly registered domains using the same registrar or similar naming conventions. Given the reliance on Cloudflare’s infrastructure, threat hunters should also watch for other domains that share the josephine.ns.cloudflare.com or troy.ns.cloudflare.com nameservers and exhibit comparable page titles or kit signatures. Continuous re‑scanning of the domain, even while offline, is advised to capture any changes in detection status or new vendor verdicts.
Intelijen Keamanan Jaringan Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | galabet.turkiyewin.vip |
phishing | Phishing Block |
| Cloudflare DNS | galabet.turkiyewin.vip |
malicious | Sinkholed |
| DNS4EU | galabet.turkiyewin.vip |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | galabet.turkiyewin.vip |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: turkiyewin.vip
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain turkiyewin.vip behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-19 12:54:05 UTC
Casino / Gambling License Verification
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260227-7D8731 Recipient: nicenic@139.com, abuse@mmx.co, compliance@icann.org Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive