ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
域安全和威胁情报
galabet[.]win-turkey[.]vip
“Galabet - Galabet Giriş - En Yüksek Oranlar - Canlı Bahis ve Casino”
威胁判定
关键
93/100 证据评分
可用性
服务器错误
最新存储的响应不确定
风险信号
病毒检测总数：13/91
Spamhaus DBL: DBL_PHISH
URLQuery threat systems: 5 alerts
品牌冒充：Cs2
报告概览
galabet.win-turkey.vip — 服务器错误 (HTTP 502). 品牌冒充：Cs2; 诈骗类型：Crypto Gambling. 证据摘要: VirusTotal 13/91 (ADMINUSLabs, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker); URLQuery 5 alerts; Spamhaus DBL_PHISH; PhishDestroy score 93/100. 注册商: NiceNIC.
为保留原始取证记录，下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
重要
This report details the domain galabet.win-turkey.vip, which poses a gambling scam threat. The page title identifies the site as "Galabet - Galabet Giriş - En Yüksek Oranlar - Canlı Bahis ve Casino," indicating it is a fraudulent gambling platform offering live betting and casino services. The scam type is gambling, meaning the site likely aims to deceive users into depositing funds for non-existent or rigged betting activities.
Technical evidence shows the domain was flagged by 16 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, BitDefender, CRDF, Cluster25, and Criminal IP. It is listed on 1 blocklist. The domain was created on 2026-02-26, registered through NiceNIC International Group Co., Limited, and uses IP address 188.114.96.3 located in the United States, hosted by AS13335 Cloudflare, Inc. The nameservers are gabriel.ns.cloudflare.com and simone.ns.cloudflare.com. No SSL certificate is present.
The domain is currently down or offline, with a GridinSoft trust score of 0 out of 100, indicating high risk. Despite being inactive, the site poses a significant threat due to its fraudulent gambling nature and poor security posture, including the absence of encryption. Users should avoid any interaction with this domain.
VirusTotal
13 det.
URLQuery
5 threat alerts
DNS Security
6/14
URLScan
年龄
6 mo
观测状态
服务器错误 502
DestroyList
已列入
Reports Sent
1
数据覆盖范围
VirusTotal
13 / 91
URLQuery
5 threat-system alerts
PhishStats
checked — no match recorded
OTX
no community references
CF雷达
scan completed
URLScan capture
存储的报告
URLScan verdict
分析完成
DNS 阻断
6/14
TLS
无证书数据
WHOIS
6 mo old
屏幕截图
3 captures · 3 sources
重定向链
未探查
网络安全情报 Registrar context
DNS Provider Blocks
6 / 14
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | galabet.win-turkey.vip |
malicious | Sinkholed |
| OpenDNS | galabet.win-turkey.vip |
phishing | Phishing Block |
| Hagezi Threat Feed | galabet.win-turkey.vip |
malicious | Sinkholed |
| DNS4EU | galabet.win-turkey.vip |
malicious | Sinkholed |
| Cloudflare DNS | galabet.win-turkey.vip |
malicious | Sinkholed |
Registrar context
NiceNIC
Stored registration data identifies NICENIC INTERNATIONAL GROUP CO., LIMITED (IANA 3765) as the registrar. PhishDestroy maintains separate NiceNIC abuse-report research; registrar association is contextual and is not an independent detection for this domain.
威胁响应 Pipeline
发现
Checks
Reports
可用性
18/19
Sent Report Recorded
Stored sent-report record for registrar NiceNIC International Group Co., Limited, hosting provider, 3 abuse contacts
nicenic@139.comabuse@mmx.cocompliance@icann.org
公共封禁名单状态
已保存的截图
域名情报
域名
URLScan Verdict
分析完成
score 0 report ↗
服务器 / ASN
cloudflare · AS13335 Cloudflare, Inc.
IP Context
Cloudflare shared edge
origin IP hidden
Edge-IP 声誉不属于此域。
Registrar (base domain)
NiceNIC
(RU)
PhishDestroy Investigation
(RU)
PhishDestroy Investigation
IP 地址
188.114.96.3
CDN
地理位置
San Francisco, US
San Francisco, US网络AS13335 · Cloudflare, Inc.
源 IP 隐藏在 CDN 代理后面。边缘地址的反向 IP 结果包含不相关的租户；查找源头需要被动 DNS 或证书透明数据。
Registration (base domain)win-turkey.vip · 创建 2026年2月26日 (171d) — Expires 2027年2月24日
HTTP 状态码502 Error
技术细节DNS、SSL SAN、时间戳
首次发现2026年2月26日
DOM Analysisanalyzed 2026年7月29日score 0/1004 brand signals
IoC Extractionscanned 2026年8月1日0 wallet · 0 Telegram IoCs
Submitted URLhttp://galabet.win-turkey.vip/
域名服务器gabriel.ns.cloudflare.comsimone.ns.cloudflare.com
TLS Observationvalid from 2025年9月14日scanned 2026年3月15日
Case ID
ICANN OVERSIGHT
Registration: win-turkey.vip
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain win-turkey.vip behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-16 12:53:50 UTC
Primary outcome
DNS inactive
reason: DNS NXDOMAIN 80% confidence
Attribution
source: Dns Cache
Evidence layers
Availability: DNS inactive
Content: Unreachable
DNS: NXDOMAIN
Registration: Unknown
Latest HTTP observation
未知 Origin unreachable Http 5xx 20% 2026-08-17 02:38:49 UTC
RDAP registration
未知
Observed timeline
last reachable: 2026-08-09 22:13:46 UTC current episode first observed: 2026-08-10 12:53:21 UTC observed RIP window: 2026-08-09 22:13:46 UTC → 2026-08-10 12:53:21 UTC · 14.66h midpoint estimate ≈ 2026-08-10 05:33:33 UTC · precision medium · basis bounded
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
Casino / Gambling License Verification
Unverified gambling license
This domain markets casino/gambling services. Scam casinos routinely display fake Curaçao, MGA, or Kahnawake license badges that don’t exist in the real registries. Always verify the license number against the official regulator database before depositing. If the site shows a seal but no clickable registry link — or the linked registry page doesn’t exist — treat it as fraudulent.
举报此域名
提交证据，帮助保护他人
VirusTotal 分析
13 / 91 安全供应商标记了该域
View on VT
Last analyzed Previous stored snapshot: 16 detections
ADMINUSLabs
BitDefender
CyRadar
ESET
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
Lionic
Seclookup
SOCRadar
Sophos
VIPRE
证据与外部报告
证券分析
Submitted Evidence Snapshot
Sent: Ledger records: 1
Case ID:
PD-20260226-44FCA1 Recipient: nicenic@139.com, abuse@mmx.co, compliance@icann.org Page title stored with report: Galabet - Galabet Giriş - En Yüksek Oranlar - Canlı Bahis ve Casino
OSINT与情报分析
DNS 与网络
SEO 与域名
您是否受到本网站的影响？
If credentials were compromised, report immediately. Do not engage with recovery scammers.
如果您输入了帐户凭据、个人或付款信息，或者从此域下载了文件，请立即采取措施。以下资源可帮助您报告事件并保护自己。
PhishDestroy listing review 不是执法报告
域名申诉
如果您拥有该域名并认为该列表不正确，请请求审核
警惕“数据恢复”诈骗！ 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →
相关基础设施与报告
Content matches 4
关于共享 Cloudflare 边缘的其他报告 6
这些报告解析为相同的共享边缘 IP。它们有助于报告发现，但并不意味着共同所有权或共享源服务器。
payme-paypal.com 同一注册商: NiceNIC 6
spcx30b.icu 
terbolox.org 
nova0nv.xyz 
megaweb20at.xyz Cs2 impersonation 8
These domains also target Cs2 users. View all Cs2 threats →
cs2challenger.com Gambler Scam kit 8
Part of the 赌徒骗局 phishing campaign. View all campaign domains →
treyspin.com 最近的威胁报告 4
最近添加了来自 PhishDestroy 数据库的报告。这些发现链接并不意味着共享基础设施或所有权。
temuplus.blogspot.com 
mrbeast-gifts.blogspot.com 
lolocoupon.blogspot.com 