{"report_id":"0c375d04-3ffd-4fb1-8dc9-87230a6ce90c","version":0,"status":"done","tags":[],"date":"2026-08-15T19:28:51Z","url":{"schema":"http","addr":"rainbetcasino-ca.org/","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"172.67.172.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetcasino-ca.org/","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"title":"Rainbet Casino – Official Site for Canada 2026","dom":{"size":34855,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24639)","md5":"196c5459fc304c36d60d6f624831075b","sha1":"fd1ea17d2d014a8618ef6bc291d3c52d579a2113","sha256":"b30879f74b4ff58af412839647572def6bf1714bbf255d814d9a2f96b16f6bf4","sha512":"883a79c6ea98616ba601211d298e7059e106281672b8249361e08e6792d3972aac12dbd93ab1643d4c42d6dd668d0fda760adecb089943c00653f78b1d7f0d35","ssdeep":"768:Py+TOJ317zVRquddIfh1yX67rmXP1XeplV4:lqFzV9I511af1UP4","tlshash":"b9f2294b92d42ab707d221ec765d3a8ee2ec80a717306d20385f949f9f49a7c45362df","dom_hash":"domhash485213298fa8ced56dfe19cfc53f7e48","first_seen":"2026-08-15T18:20:26.228866Z","last_seen":"2026-08-15T19:28:52.373333Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetcasino-ca.org/","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"172.67.172.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T19:28:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetcasino-ca.org","ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-08-15T18:20:21.829379Z","last_seen":"2026-08-15T18:20:21.829379Z","alert_count":20,"request_count":10,"received_data":249590,"sent_data":5109,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetcasino-ca.org/assets/js/script.js","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2661b2a61fb205f43ec5a6177ef21350","sha1":"a4c46466b7409e48a63f5df58dad4cf1b8a6b249","sha256":"ff2df0220ed52e7686955f2a03d4dadb7ed49f17426d3129c663e8cbec1d9059","sha512":"53f60598c76d720a18cb2d8193fdf529e3e6309995f1998e92149c631beee1bd41c888048ecdac943d0fb8112f5b8275b1dd7161567221697823b83056c3cffb","ssdeep":"","tlshash":"a331313eb410293244f627f6915f63e03db910967d42d8435958dcc43f34a27ada2ede","size":1538,"data":"","first_seen":"2026-07-15T06:25:04.486385Z","last_seen":"2026-08-15T19:28:52.377713Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetcasino-ca.org/images/gamecheck-dark.png","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ca.org/","date":"2026-08-15T19:28:25.404Z","timestamp":1786822105404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ca.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 09:30:57 GMT","end":"Thu, 24 Sep 2026 10:28:33 GMT"},"fingerprint":{"sha1":"EF:AF:C5:3F:F5:79:D0:F4:B1:FF:2D:62:7E:40:06:51:B2:26:CA:22","sha256":"1B:BF:80:07:9C:12:51:25:B4:76:28:AA:3E:16:52:E3:9B:82:BF:18:AF:CA:48:C8:DE:AE:12:CA:45:5A:E7:D7"}}},"request":{"raw":"GET /images/gamecheck-dark.png HTTP/1.1\r\nHost: rainbetcasino-ca.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ca.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 19:28:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 21:02:22 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a3c45de-9d9\"\r\ncontent-encoding: gzip\r\nage: 4112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2FmeNT2xYNudGhMhJ2F2s%2BQCjmuhmOtut8Rsd4ZLNvhDZ5nO7MkyMULmfHTL9D1AstB%2BPVohXtulSMi7uJ7p2KNBsnpT2UO0exlUQTVJ57EBRkkCvJz%2Ft18LsjNi5dw5yU9gYTyKTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba9a2ecfdf4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":3189,"mime_type":"image/png","magic":"PNG image data, 300 x 87, 8-bit colormap, non-interlaced","md5":"712a31d6bf6c15ccea894d951f722c94","sha1":"fa65792f3f8d2d5f7a5f0ea712550721bd05e104","sha256":"36014017097c3c89d244c6c546b4abd1fdfe687685d2157b69f1ff37dd3edee5","sha512":"c07c2b4db65c51220c4c42602d9a39bdef8b15187d33b26294f346b6210d94c48f502f1845c90db9d4d971063cb96cd287ea2546096ba02b79b0b0fa74455b69","ssdeep":"","tlshash":"b751199f820fe292c3b11493ece290245193b3660b82747ea4268d89a08b61954e8fdf","first_seen":"2026-07-15T06:25:04.488199Z","last_seen":"2026-08-15T19:28:52.374591Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ca.org/","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T19:28:21.820Z","timestamp":1786822101820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ca.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 09:30:57 GMT","end":"Thu, 24 Sep 2026 10:28:33 GMT"},"fingerprint":{"sha1":"EF:AF:C5:3F:F5:79:D0:F4:B1:FF:2D:62:7E:40:06:51:B2:26:CA:22","sha256":"1B:BF:80:07:9C:12:51:25:B4:76:28:AA:3E:16:52:E3:9B:82:BF:18:AF:CA:48:C8:DE:AE:12:CA:45:5A:E7:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcasino-ca.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 19:28:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jun 2026 21:02:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxIDZJABd7ihcZVLnf%2BatC1ED1ygN2yx%2BfAMB6SHxNzmKGm5DNdmVJs0aSzai4Atz7zU9qZStVMcgMAHM6KmPr4OkHNbrAXwRZ0pIf2PdNdIBVQg97sp0lpBPwPQRJiw%2Fb7ieUmFBw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2ba9a2caefb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34855,"size_decoded":10765,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24612)","md5":"bdef551050d8ade330236cfbdbcc5105","sha1":"1d6a24976b3a7cfb3eef68ac472258e888a3925a","sha256":"ca36cd2ccbf3d3e18899c25db6cc82dfe59aa9eb7ad8bb261b24fb6db0e327b2","sha512":"a3b68659955062c53faab60b8f23f4b097b64ff523158c02a587806086eaf31fc570fa0e4372f65f37aa6529016db3fd8872e5ec8fdd795b092b82b2407302e6","ssdeep":"768:zycFsOJ+27zVRquddIfh1yX67rmXP1XeplV2:HFxFzV9I511af1UP2","tlshash":"5bf2184b92c42ab717d221ec765d3a8ee2ec80a717306d20385f949f9b49a7c45362df","first_seen":"2026-08-15T18:20:26.241255Z","last_seen":"2026-08-15T19:28:52.375578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3363,"timings":{"blocked":-1,"dns":74,"connect":1,"send":0,"wait":119,"receive":0,"ssl":3168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ca.org/assets/css/style.css","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino-ca.org/","date":"2026-08-15T19:28:25.389Z","timestamp":1786822105389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ca.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 09:30:57 GMT","end":"Thu, 24 Sep 2026 10:28:33 GMT"},"fingerprint":{"sha1":"EF:AF:C5:3F:F5:79:D0:F4:B1:FF:2D:62:7E:40:06:51:B2:26:CA:22","sha256":"1B:BF:80:07:9C:12:51:25:B4:76:28:AA:3E:16:52:E3:9B:82:BF:18:AF:CA:48:C8:DE:AE:12:CA:45:5A:E7:D7"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: rainbetcasino-ca.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ca.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 19:28:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 21:02:22 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a3c45de-3688\"\r\ncontent-encoding: gzip\r\nage: 4112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1NPRbjyn1KMmCAPtzdAikhzGefUCWgMqvvudr3%2FsNFuOA2oqfJqibksgGuB3zRmJ1gLElEtPbpo0GE13U9kxNMabI%2FYYbAnANhlgz1mOx5njc5q5QiVqSOZTocKTCXTeLdv4A%2Bd45g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba9a2eafd74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13960,"size_decoded":4779,"mime_type":"text/css","magic":"ASCII text, with very long lines (13960), with no line terminators","md5":"7b8fc6ad3f4377a0ae9e117fa2499138","sha1":"37f4ad36e72401f18fdb82f5f755dc47e8ab7440","sha256":"5c3ee5db0769896cb86c7a8cbbab51dd975d404ae404177d685a30e0876917ea","sha512":"3332623bc3fd9daea251c7c9bf35760231bfff143bfae84c625a3a1f938ea6a3f886bbfaa58157a3e4c09c56a61f5fa97617ef693077c3e641970b899f6df717","ssdeep":"192:CcbM1Us6YX9RQvbVUeVpvu+fjsLUaVFpje9XJesJMLCATRtT2PTsd85WbQkthPui:Aa3EUVU+f472OgCb4qjD","tlshash":"c452841a67157178f81be6f8f9d16b8f2128b512e70301f8d9d1916582ce2b903b3f8e","first_seen":"2026-08-15T18:20:26.234045Z","last_seen":"2026-08-15T19:28:52.376538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ca.org/assets/js/script.js","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino-ca.org/","date":"2026-08-15T19:28:25.391Z","timestamp":1786822105391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ca.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 09:30:57 GMT","end":"Thu, 24 Sep 2026 10:28:33 GMT"},"fingerprint":{"sha1":"EF:AF:C5:3F:F5:79:D0:F4:B1:FF:2D:62:7E:40:06:51:B2:26:CA:22","sha256":"1B:BF:80:07:9C:12:51:25:B4:76:28:AA:3E:16:52:E3:9B:82:BF:18:AF:CA:48:C8:DE:AE:12:CA:45:5A:E7:D7"}}},"request":{"raw":"GET /assets/js/script.js HTTP/1.1\r\nHost: rainbetcasino-ca.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ca.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 19:28:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Jun 2026 21:02:22 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a3c45de-602\"\r\ncontent-encoding: gzip\r\nage: 4112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyurjByuTj23AO3n2iYq0nraMr7h7ppuNu0J%2FOu8Gl8p8LPxnHLESsWPmC9kZreh%2BcaD4jE3zwoPN7UUYlYX%2F31o46GCxCleqasYBjqyiPlJp5Q2UhA4w75EUhGt4Ba4ZagDAi2HOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba9a2eafd94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1538,"size_decoded":1473,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"2661b2a61fb205f43ec5a6177ef21350","sha1":"a4c46466b7409e48a63f5df58dad4cf1b8a6b249","sha256":"ff2df0220ed52e7686955f2a03d4dadb7ed49f17426d3129c663e8cbec1d9059","sha512":"53f60598c76d720a18cb2d8193fdf529e3e6309995f1998e92149c631beee1bd41c888048ecdac943d0fb8112f5b8275b1dd7161567221697823b83056c3cffb","ssdeep":"","tlshash":"a331313eb410293244f627f6915f63e03db910967d42d8435958dcc43f34a27ada2ede","first_seen":"2026-07-15T06:25:04.486385Z","last_seen":"2026-08-15T19:28:52.377713Z","times_seen":3,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ca.org/images/18-logo.png","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ca.org/","date":"2026-08-15T19:28:25.403Z","timestamp":1786822105403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ca.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 09:30:57 GMT","end":"Thu, 24 Sep 2026 10:28:33 GMT"},"fingerprint":{"sha1":"EF:AF:C5:3F:F5:79:D0:F4:B1:FF:2D:62:7E:40:06:51:B2:26:CA:22","sha256":"1B:BF:80:07:9C:12:51:25:B4:76:28:AA:3E:16:52:E3:9B:82:BF:18:AF:CA:48:C8:DE:AE:12:CA:45:5A:E7:D7"}}},"request":{"raw":"GET /images/18-logo.png HTTP/1.1\r\nHost: rainbetcasino-ca.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ca.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 19:28:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 21:02:22 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a3c45de-7e1\"\r\ncontent-encoding: gzip\r\nage: 4112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFL8OwYphJIMwnlqLx4A3GYQ56%2F0E2z0IRyLxdtvuyezvPGgWeqHbaq4M92erjz%2Bonn1%2F3cKVXf05QZ1DRaRItK%2BPQofdNTwhWU1LbynSVpI2CSl6DzSErc%2BxQP7Sq8KW%2Fq2cQnBCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba9a2ecfdd4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2017,"size_decoded":2347,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"b54689bfa37fd7f8b9113f2cd2a98b7f","sha1":"134e20aab7292c15f7ba872cccd679d2c06048dc","sha256":"ca40810a51ae2c255bb0d80566bd733d69ba14374c643a1b7edcf811b52215ab","sha512":"aacf5c2274a3d698fc1f59a4619f5dfa115b3c306d2e29e87f8676c43eeb32b9815550c0cc6ec74edc5b39323eb6212480e4e9a58c94cc6a79da912c960e7d10","ssdeep":"","tlshash":"8441d8387a751c31d732e53d014fecdc91480986ee814cc731788d0e46173be664512b","first_seen":"2025-09-28T15:53:20.225749Z","last_seen":"2026-08-15T19:28:52.378474Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ca.org/images/begambleaware.png","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ca.org/","date":"2026-08-15T19:28:25.406Z","timestamp":1786822105406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ca.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 09:30:57 GMT","end":"Thu, 24 Sep 2026 10:28:33 GMT"},"fingerprint":{"sha1":"EF:AF:C5:3F:F5:79:D0:F4:B1:FF:2D:62:7E:40:06:51:B2:26:CA:22","sha256":"1B:BF:80:07:9C:12:51:25:B4:76:28:AA:3E:16:52:E3:9B:82:BF:18:AF:CA:48:C8:DE:AE:12:CA:45:5A:E7:D7"}}},"request":{"raw":"GET /images/begambleaware.png HTTP/1.1\r\nHost: rainbetcasino-ca.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ca.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 19:28:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 21:02:22 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a3c45de-d86\"\r\ncontent-encoding: gzip\r\nage: 4112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdRUdUa6RE3tTl02ML1tc1zs%2BkFpQcRZii7cn1GBMB%2FX1bhRsKmsJwHdQgMtui2ZtHxvn79Hb80velkd4En5wfqCO9YYPtd3cJLGz2%2B1NQK8TC6JX80BSc%2Bx5OyPPG92wsFKzs3i7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba9a2ecfe04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3462,"size_decoded":3994,"mime_type":"image/png","magic":"PNG image data, 300 x 65, 8-bit colormap, non-interlaced","md5":"4a72f0308aa98384064cc9ee24279ad4","sha1":"3880306acd361fcf90760020def9103e93135165","sha256":"39dfbda730da2e6ae347b3f8afbf6f1ed1d432bd8cbcb9ce3316535a09810241","sha512":"0a07e8b7747db05b3e8a79cb9411f604b322666423cfc36f941ad9253cc853e7f060ed99545c8df9de5f53d7c53a66cd1d65bb25f45749fed0c36d5495f73a1c","ssdeep":"","tlshash":"ed615b8c7b6e74feabf70f08a815d182c50426bd54851f16f07ffe21199c704213e488","first_seen":"2025-02-12T01:50:54.197952Z","last_seen":"2026-08-15T19:28:52.379182Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ca.org/images/favicon-180.png","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ca.org/","date":"2026-08-15T19:28:25.470Z","timestamp":1786822105470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ca.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 09:30:57 GMT","end":"Thu, 24 Sep 2026 10:28:33 GMT"},"fingerprint":{"sha1":"EF:AF:C5:3F:F5:79:D0:F4:B1:FF:2D:62:7E:40:06:51:B2:26:CA:22","sha256":"1B:BF:80:07:9C:12:51:25:B4:76:28:AA:3E:16:52:E3:9B:82:BF:18:AF:CA:48:C8:DE:AE:12:CA:45:5A:E7:D7"}}},"request":{"raw":"GET /images/favicon-180.png HTTP/1.1\r\nHost: rainbetcasino-ca.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ca.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 19:28:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 21:01:52 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"6a3c45c0-5a71\"\r\ncontent-encoding: gzip\r\nage: 4112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WNW9tpAShQ0hFJ9tFI5qsNL8KwJEBD9%2FUjGaAs%2BEVaW5NlxV4WEAOAzZpjd0t0zj5dC3yM35%2F3ctvJ3hzlEyzw%2Bh7ifa%2F%2FC2580JP43iVfJXYB9WnWp%2B1TfVs26FkRPi5W8pF%2BTTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba9a2f28004c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23153,"size_decoded":23907,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"5ce0f12105eeaf77ca6fb948950ef093","sha1":"d7100294a15620d4b4fa1da7f6b749e1928cd588","sha256":"66adaf10afea14d0753dc849892c3a0158f96265c937eea5c8ae5a5aa2289b8c","sha512":"7ca2b74b7e2054e21648154edbd74a1b7288d198b346fdd98ca892c310a86ac4510897eff71bd9de668515be659d954f5944e8c1681750d6c420019d289942b9","ssdeep":"384:lRqOxsCck3aVPaUAaGUgiHwT2I7Jgp2xvtqnlcHlDhhCXkuJhd/XwvjJXHobtum8:PxsCck3Wa2GUgiHw7mpetqeHlD3Tu39Y","tlshash":"afa2e1c3c1ef201186a4827d560e07a58ca1f35913131d47299bc7fe67fc77262a1abd","first_seen":"2026-08-15T18:20:26.231272Z","last_seen":"2026-08-15T19:28:52.379868Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ca.org/images/favicon-16.png","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ca.org/","date":"2026-08-15T19:28:25.472Z","timestamp":1786822105472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ca.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 09:30:57 GMT","end":"Thu, 24 Sep 2026 10:28:33 GMT"},"fingerprint":{"sha1":"EF:AF:C5:3F:F5:79:D0:F4:B1:FF:2D:62:7E:40:06:51:B2:26:CA:22","sha256":"1B:BF:80:07:9C:12:51:25:B4:76:28:AA:3E:16:52:E3:9B:82:BF:18:AF:CA:48:C8:DE:AE:12:CA:45:5A:E7:D7"}}},"request":{"raw":"GET /images/favicon-16.png HTTP/1.1\r\nHost: rainbetcasino-ca.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ca.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 19:28:25 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 21:01:54 GMT\r\npriority: u=6,i=?0\r\netag: \"6a3c45c2-27e\"\r\naccept-ranges: bytes\r\nage: 4112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KcFx1T40kVVC467rdfESdEQctQV7CtMwVOyEhhgoT5MuiSTmzVY2zn%2Bfrug6wSYdsAhi7phGf8u28PRyBzmuWJD5j34TuMoopbqZ%2BYb%2B1SDMD15joEFUzeJtQLnCgN24q19k87eUdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba9a2f28024c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":638,"size_decoded":1347,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"74d08ce7277fbf88cb1681cad11ac647","sha1":"e00c56d8147edde7fa5ad7abeed15b50b3ee941a","sha256":"572fc751c3ffd7a9a2c7d6e084aaa45d9ec5c373482104576d9387c4787fea26","sha512":"b8de2ea9133a27676518b176e16cbb5d26bba32bed3666535a59ac160ae2a14619c7260fe4c778f791af3ecc3ce16559342ea68f1052647e2a4c02d289648788","ssdeep":"","tlshash":"1df062af0e60c419820cc07017701f08d126cf2ca11e328ceceae82cf8079e01266bc6","first_seen":"2026-08-15T18:20:26.232922Z","last_seen":"2026-08-15T19:28:52.381104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ca.org/images/rainbet-casino.webp","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ca.org/","date":"2026-08-15T19:28:25.400Z","timestamp":1786822105400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ca.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 09:30:57 GMT","end":"Thu, 24 Sep 2026 10:28:33 GMT"},"fingerprint":{"sha1":"EF:AF:C5:3F:F5:79:D0:F4:B1:FF:2D:62:7E:40:06:51:B2:26:CA:22","sha256":"1B:BF:80:07:9C:12:51:25:B4:76:28:AA:3E:16:52:E3:9B:82:BF:18:AF:CA:48:C8:DE:AE:12:CA:45:5A:E7:D7"}}},"request":{"raw":"GET /images/rainbet-casino.webp HTTP/1.1\r\nHost: rainbetcasino-ca.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ca.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 19:28:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 21:02:22 GMT\r\npriority: u=4,i\r\netag: \"6a3c45de-24e82\"\r\naccept-ranges: bytes\r\nage: 4112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ytlCxBiN1hZM0Rk61SagJmwG4g4A1tDcp6N6k6LU5aDFiqSc5WlFD1KP%2BCKhvmrObtvMBhwycCgC5ZOJ%2BJmFcHtxemeLuVhQW6R1rXSu9OSRn%2BsiMQo%2Bg%2Be1tmKZ0uzXYwRA8DzrBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba9a2ebfdb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 151170\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151170,"size_decoded":151886,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e5662dbdcab91684d3b43c6a504fe65b","sha1":"cf86fb68f0451f257e98a082a1f81f0af49f80b3","sha256":"9f4120c8f1407320218077f3ad89bf45286c66ccb33df7979b49d8703e6c5348","sha512":"78b6a214bfcde4b431feb17c882c3d14d03c4ca4774332a016b6b5180e99aab427e16774a45fb19bd1d7f543736e59954987340602d5bdabaaa1ccae7cfd5de6","ssdeep":"3072:J+cNFpvlQcYBsdECSXzvuLVOACv6Vf+1dS/N5:J+QFpoBFCSXzvuEAk6Vf+1di","tlshash":"7de323e1a1dc206389fe5b4be78d2c79b750b26e523471ceb4e71264e4c881a08dfdb1","first_seen":"2026-08-15T18:20:26.237381Z","last_seen":"2026-08-15T19:28:52.381718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ca.org/images/logo.webp","fqdn":"rainbetcasino-ca.org","domain":"rainbetcasino-ca.org","tld":"org"},"ip":{"addr":"104.21.30.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ca.org/","date":"2026-08-15T19:28:25.401Z","timestamp":1786822105401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ca.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 09:30:57 GMT","end":"Thu, 24 Sep 2026 10:28:33 GMT"},"fingerprint":{"sha1":"EF:AF:C5:3F:F5:79:D0:F4:B1:FF:2D:62:7E:40:06:51:B2:26:CA:22","sha256":"1B:BF:80:07:9C:12:51:25:B4:76:28:AA:3E:16:52:E3:9B:82:BF:18:AF:CA:48:C8:DE:AE:12:CA:45:5A:E7:D7"}}},"request":{"raw":"GET /images/logo.webp HTTP/1.1\r\nHost: rainbetcasino-ca.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ca.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 19:28:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 21:01:50 GMT\r\npriority: u=5,i\r\netag: \"6a3c45be-23ca\"\r\naccept-ranges: bytes\r\nage: 4112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRmuAJS9HHBRjJ4DlIE%2FYoGVrX%2BHAwixsmmmTDkVrvc6%2FvjagRChKF3iE3akP4BaYmY9ge7SK%2BALxk%2FH%2FtXbXZbMARQsqQ6vO9A7zew1lD3NoOA2D7QH45uaxgdhYLLVYMhDzVUZhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba9a2ebfdc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9162\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9162,"size_decoded":9877,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9458df4fc4e07a69fa9777c467c7d9dc","sha1":"5be60f75c7447a748a045e80ea7f641696910a43","sha256":"766b35d751e06dac36e7004535cfc0e37cfe1c64ad9a5b5291444094c336f745","sha512":"2a1041f86149482708743f40ef655256cca4337bea6c770e2743feb6c022e41f8e4e5720f3b74ecc60ef3d46377891d34478b5dfbba2b318aabb87a7eb69bb29","ssdeep":"192:M+IOvmr6E2EkQMfaarR9rndXS4D8ppUROFmWWU91Wc5n6DVJFBIHN3meULONsIto:mOtEklNrTJD2SKfW61Wc5MCN3xULOpo","tlshash":"b912aec633d536153226222f71acc3f7eba2472ed41cbd876a6b41a548e30547fdb468","first_seen":"2026-08-15T18:20:26.242432Z","last_seen":"2026-08-15T19:28:52.382617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetcasino-ca.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}