{"report_id":"3fe286fa-4203-477f-8bba-4086b048fc74","version":0,"status":"done","tags":[],"date":"2026-07-22T10:07:04Z","url":{"schema":"http","addr":"casinorainbet-ca.net","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casinorainbet-ca.net/","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"title":"Official RainBet™ | CAD$500 Welcome Bonus + 100% Match","dom":{"size":93323,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36720)","md5":"861bb170e35edef385673177ea49cf27","sha1":"2484fe3ec77c770c3b84b6d70d29e61c4a07f736","sha256":"cea87a1edf79f635c14a8fce1f62efd12ab8a2cf64f8ca8061e35a8a94ab0025","sha512":"f4aea06b474a9804129f71d87fa2560b7bf74d516e9ecf39668317182ff2636dd9f45245f0b4631595c1424f36d39b858dec9c2f3fc3f0662b469354a4e582f3","ssdeep":"1536:1figSdYY2TTIgM1YrLRDP9KDMRDpItToDpk+SR:1ftSdYY2TT95Ds","tlshash":"66931a2db250223e246746e7f655394f3925a403be06a4f4b66e843c4fc7b935db2b8c","dom_hash":"domhash7fa242bf3e10a01821c66a9aec89c6b7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"casinorainbet-ca.net","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:07:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"casinorainbet-ca.net","ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-07-22T10:06:35.33228Z","last_seen":"2026-07-22T10:06:35.33228Z","alert_count":16,"request_count":8,"received_data":365177,"sent_data":4942,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casinorainbet-ca.net/","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b23e049cce6b41faa2efd14a9826ce1","sha1":"f976a6b20d971db5fb10dee61e93623f6b74ca19","sha256":"e654906b1518c70abfe882f7875606b461cd0742b190c0b5a9ca3ad98eba1a5d","sha512":"acef9f0fb31d21c0f94928eab30ccf6685ecfd31ae686cbcc748b72108dd5966292e1827a31080152f79728a9c043bd66d865cba1d1f28761b4158f93db99853","ssdeep":"","tlshash":"67f02b1dc50826ba08d23ea69224402c3c1b80833cc030b5bb8cd0ab0f3ab1b7cf784c","size":482,"data":"","first_seen":"2026-07-22T10:06:38.428749Z","last_seen":"2026-07-22T10:07:05.811839Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-ca.net/","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecc6478d530c8f5f68e66ecbb15d3674","sha1":"6d6f7792b0a8497217c78305dee7c66f3203310d","sha256":"95325de73d3ce2cbc50601a5a280c80b1020c75344774f2c21484c883b96e3fc","sha512":"6a729c488e3775f67e2fb71b3cde956bfff9d30db905df1d59dea28d50b7348d5d7de9a780ddc1e1f324a47a9a950fc7d25cac88d4591949411fabb84bf9ed25","ssdeep":"","tlshash":"16b012a3083a02400a4113d414835000485c19d5318280d2ff4d40001f815c700327c8","size":93,"data":"","first_seen":"2026-07-15T07:58:47.850003Z","last_seen":"2026-07-22T10:07:05.814988Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-ca.net/","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"059ce4c6b8edf0c83a8501603dcd8220","sha1":"cb95968e603299bc65168f852a5523b57a0dbb0e","sha256":"b7778816f56d149929a678733ffc8608c1e1b29de4271c90244b3e8cd5d9cb1a","sha512":"7fea588dc548c7d6d39feb211fcfd6264b4576cc06ace6d9ae2041035772a93a18274813441be52e772312b30167d39a787f8e9b59e5243493e5828f4f1d4125","ssdeep":"384:P9tZDNDpIk6bdV2BiwSfXQdx1MSXbR6XtJp3yjMXptDkDpkzhzacubvZ8GVmSMpg:P9tZRDpIk6bdV2BiwSfXQdx1MSXbR6Xo","tlshash":"2d62b855b590263e48cb0adfb14bb6187e3a18823845e0e1b9bf4c541f92e9335b1fbd","size":15868,"data":"","first_seen":"2026-07-22T10:06:38.430192Z","last_seen":"2026-07-22T10:07:05.816088Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-ca.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T12:19:11.547957Z","times_seen":404320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"casinorainbet-ca.net/","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:06:37.629Z","timestamp":1784714797629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-ca.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 10:45:36 GMT","end":"Sun, 18 Oct 2026 11:42:31 GMT"},"fingerprint":{"sha1":"FD:98:E4:72:90:83:15:8A:19:A7:D3:7E:09:B5:61:75:27:E4:33:A7","sha256":"48:FE:6D:5B:60:69:38:01:E7:34:16:CD:65:01:50:32:FE:EF:13:FD:D6:CA:74:EF:BF:CD:E2:1A:18:83:73:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casinorainbet-ca.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:06:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: http-cookie=1784714798.698.10063.23701|882e00fa803f76adb4fe2898d9436430; Expires=Fri, 24-Jul-26 10:06:37 GMT; Max-Age=172800; Path=/; Secure; HttpOnly\r\ncache-control: no-cache, private\r\nx-robots-tag: noindex\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8875Ct3tNKOfzRvpGNPWyyok4dA%2B11lnRl1o%2Bb4XO9QsgkzWOHO81p883%2BvW%2Fuex%2BqIFzNrN9iQDY%2FK1LecNvhl%2FrAuktNakFnNttlXbIuSiRkNiEXxQOB6Bsz3MiJJQLnkmGsFn2w%3D%3D\"}]}\r\ncf-ray: a1f1a23d4f220883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94510,"size_decoded":28012,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36720)","md5":"3138c6d587093556bd3fdcea448236b6","sha1":"7b5e152113acda6623d18d218a9c27284d591212","sha256":"ced07ea4d4a6d4231f7ca1fdd65b68b3b4d0fe46318942d61d8a83884001e9a8","sha512":"9c55e3289554a597b264c5be0a9763f82850ba550d2421cabdf415ee0a1a5ad4444162e9097271254fb028666a384430859952b17957a3f98127eb2449820587","ssdeep":"1536:bfigSdYY2TTIgMxYwLRDP9KDp/RRDpItToDpk+S1:bftSdYY2TTBQDf","tlshash":"a193092db250223e246746e7f655394f3925a403be06a4f4b66e843c4fc7b935db2b8c","first_seen":"2026-07-22T10:07:05.785248Z","last_seen":"2026-07-22T10:07:05.785248Z","times_seen":1,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":136,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-ca.net/assets/fonts/inter/Inter-Regular-a1f0ef0a29e900e333f5c7dc41612c8e.woff2","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinorainbet-ca.net/","date":"2026-07-22T10:06:37.974Z","timestamp":1784714797974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-ca.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 10:45:36 GMT","end":"Sun, 18 Oct 2026 11:42:31 GMT"},"fingerprint":{"sha1":"FD:98:E4:72:90:83:15:8A:19:A7:D3:7E:09:B5:61:75:27:E4:33:A7","sha256":"48:FE:6D:5B:60:69:38:01:E7:34:16:CD:65:01:50:32:FE:EF:13:FD:D6:CA:74:EF:BF:CD:E2:1A:18:83:73:17"}}},"request":{"raw":"GET /assets/fonts/inter/Inter-Regular-a1f0ef0a29e900e333f5c7dc41612c8e.woff2 HTTP/1.1\r\nHost: casinorainbet-ca.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casinorainbet-ca.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: http-cookie=1784714798.698.10063.23701|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:06:37 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 10:27:41 GMT\r\netag: \"6a58b21d-1b2a4\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 31\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DdMPO2SC3cQ9TA5CRqEIhwaW7lVn%2FnZe4SMzrBSd0mXcuMOPH0eVzbzX1YKODP3c7n4B36maFZfaQniJQVU7wE5gp%2BYchrYjMG5IM7LsBSqgypLG9Q1XXMDAOoqBX14a0ABOGFqF9w%3D%3D\"}]}\r\ncf-ray: a1f1a23f5f5d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111268,"size_decoded":112546,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 111268, version 4.66","md5":"3875f83574973c732136a45f628e64a6","sha1":"b7a0b6fbebc40eb29b76cf135c4b7be50b981b4b","sha256":"e06f6b1bc553aaea4e4668023ed0ab0a147129c3107f511bc7d03d361b0ae085","sha512":"c4d06c4d73f83f3bc150ec5c3fc792af04161ec98c298a526b717b09e0f10597c688ea1827c1b54324b809cccd7c8a51e637eb822f192744f16556d0fd5b2efb","ssdeep":"3072:oSVIcbST1rITm6KORAGB/6lp7l8MBrVAPg:oSVIcEwm6xlB/6lp7lzBJ/","tlshash":"2ab312cd46ab0e22c7db93b491ea634d5ab188f8e3b630358993ff31155093723e615d","first_seen":"2024-11-19T20:50:46.185622Z","last_seen":"2026-07-23T11:36:33.241441Z","times_seen":65737,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-ca.net/assets/fonts/inter/Inter-Bold-64a1a969c6d497188ec2db849572b34e.woff2","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinorainbet-ca.net/","date":"2026-07-22T10:06:37.975Z","timestamp":1784714797975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-ca.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 10:45:36 GMT","end":"Sun, 18 Oct 2026 11:42:31 GMT"},"fingerprint":{"sha1":"FD:98:E4:72:90:83:15:8A:19:A7:D3:7E:09:B5:61:75:27:E4:33:A7","sha256":"48:FE:6D:5B:60:69:38:01:E7:34:16:CD:65:01:50:32:FE:EF:13:FD:D6:CA:74:EF:BF:CD:E2:1A:18:83:73:17"}}},"request":{"raw":"GET /assets/fonts/inter/Inter-Bold-64a1a969c6d497188ec2db849572b34e.woff2 HTTP/1.1\r\nHost: casinorainbet-ca.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casinorainbet-ca.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: http-cookie=1784714798.698.10063.23701|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:06:37 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 10:27:41 GMT\r\netag: \"6a58b21d-1c098\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 31\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5iZ6RSAMLnBX0gUK14LCR%2BcOfQ%2BjumRGUWUnmR97ggajGsiKgb57YGeWes%2BLTV6PvftVLKba%2FcIiCCaSWyX4C8si5%2BXvQZ%2FioGoUPFzY5mH04MIiHNy7OMwenHtLjR%2FnygfYpaGpbg%3D%3D\"}]}\r\ncf-ray: a1f1a23f5f5e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114840,"size_decoded":116128,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 114840, version 4.66","md5":"66894432e7ff485b0d4810f6aa95573f","sha1":"5cbf10e9f8be7dac2a365bfb21fe6ddf4641e569","sha256":"fa888127b6da015b65569f0351f3b5c391ad928904951f1c20e9f8462a8d95ea","sha512":"0768f605341013a3c21aadb4f80eed3a81c0502fa79766eac6dd83ad6b7b135b24282deaa07419b4f29e7f45d96796976e07f0dafcbae3e5cf6421afa7e5c209","ssdeep":"1536:7JT4B6gU0SWJAbfNw66wMA6ImioyFi9MB4vIkuv4uVdbT5Dmi7uh6XK910:7tcSlbfNwgm3r9MiSJb+hZ6","tlshash":"3cb312142fca602de66bf32c2bf3e20385357964e0475e41f2948bab111b4bc3f4d916","first_seen":"2024-11-20T03:00:23.656898Z","last_seen":"2026-07-23T07:19:15.975402Z","times_seen":6248,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-ca.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinorainbet-ca.net/","date":"2026-07-22T10:06:37.978Z","timestamp":1784714797978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-ca.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 10:45:36 GMT","end":"Sun, 18 Oct 2026 11:42:31 GMT"},"fingerprint":{"sha1":"FD:98:E4:72:90:83:15:8A:19:A7:D3:7E:09:B5:61:75:27:E4:33:A7","sha256":"48:FE:6D:5B:60:69:38:01:E7:34:16:CD:65:01:50:32:FE:EF:13:FD:D6:CA:74:EF:BF:CD:E2:1A:18:83:73:17"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: casinorainbet-ca.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-ca.net/\r\nCookie: http-cookie=1784714798.698.10063.23701|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 24 Jul 2026 10:06:37 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CLXBG8lRFjPpU75hr%2F2QckAVrOxKp6%2BxbeDZK0dgeXlz18oeEITNHmVwEX0Q7eD%2Bq1PFp5CngXTs7l6EDBN6p%2FwLB1U2HQr73XQfcqDgalWkT5GAv570DwzQcj8JNKdsDqS1Z8uWaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 22 Jul 2026 10:06:37 GMT\r\nserver: cloudflare\r\ncf-ray: a1f1a23f5f600883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1302,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T12:19:11.547957Z","times_seen":404320,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-ca.net/media/favicon-rainbet-696e73a68e392311559144.webp","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinorainbet-ca.net/","date":"2026-07-22T10:06:38.045Z","timestamp":1784714798045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-ca.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 10:45:36 GMT","end":"Sun, 18 Oct 2026 11:42:31 GMT"},"fingerprint":{"sha1":"FD:98:E4:72:90:83:15:8A:19:A7:D3:7E:09:B5:61:75:27:E4:33:A7","sha256":"48:FE:6D:5B:60:69:38:01:E7:34:16:CD:65:01:50:32:FE:EF:13:FD:D6:CA:74:EF:BF:CD:E2:1A:18:83:73:17"}}},"request":{"raw":"GET /media/favicon-rainbet-696e73a68e392311559144.webp HTTP/1.1\r\nHost: casinorainbet-ca.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-ca.net/\r\nCookie: http-cookie=1784714798.698.10063.23701|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:06:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 19 Jan 2026 18:10:46 GMT\r\nx-rgw-object-type: Normal\r\netag: \"16a2a18afdd98e09cf6c56d272de4318\"\r\nx-amz-request-id: tx00000c8298f93207f174b-006a60960e-2d70ec2b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 31\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ELSnKpU1laof5ZEXOJU9KK4N%2B0U5LLoqaiRRjPLqpPrVcwsNR2tWJVQPTO1JSqr4heheUWcRSeDaY9X4JPinPdYIKgkFs%2FobCaR3zsMpENcaN6sbtO8JA3gw8gWvbMIG34VkatRakg%3D%3D\"}]}\r\ncf-ray: a1f1a23fcf6e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11086,"size_decoded":12054,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16a2a18afdd98e09cf6c56d272de4318","sha1":"044f3b36acc71b547934b998331319605bbd1e04","sha256":"604694e170f85e28737886427cbae4d5b3d4a8eebdc8daedd1c2ce60b5d07717","sha512":"0ba7fc83fff5797e7ab68263cf67f718c14ecf8e08db0037220db58c6acb8b67a78b74459f3f7b28739887d40055c23c340953d901b4c59bc620f32f98f0feef","ssdeep":"192:FDHd8AFZQJ00ebN/jlqfRiTSJImYhbnC/HuwNqKHZYRS1+hvb25FV/tVoJfTwOL7:v8AoJdepjlqfRiLxRnC/HxUKKRSA1q56","tlshash":"c232c038a28d758630ce19509376cd30904ca84bd79d3cdb862c69af4c4866eba7bd16","first_seen":"2026-07-15T07:58:47.573374Z","last_seen":"2026-07-22T10:07:05.804448Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-ca.net/media/rainbet-logo-696e739d435b1865325084_457x156.webp","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-ca.net/","date":"2026-07-22T10:06:37.977Z","timestamp":1784714797977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-ca.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 10:45:36 GMT","end":"Sun, 18 Oct 2026 11:42:31 GMT"},"fingerprint":{"sha1":"FD:98:E4:72:90:83:15:8A:19:A7:D3:7E:09:B5:61:75:27:E4:33:A7","sha256":"48:FE:6D:5B:60:69:38:01:E7:34:16:CD:65:01:50:32:FE:EF:13:FD:D6:CA:74:EF:BF:CD:E2:1A:18:83:73:17"}}},"request":{"raw":"GET /media/rainbet-logo-696e739d435b1865325084_457x156.webp HTTP/1.1\r\nHost: casinorainbet-ca.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-ca.net/\r\nCookie: http-cookie=1784714798.698.10063.23701|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:06:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 19 Jan 2026 18:10:39 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ca265593ece4163274471e4635ae92b6\"\r\nx-amz-request-id: tx00000612bdb7287fab283-006a60960e-2d6ec634-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 31\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W22DELwKpKpfcTBFzoqZrzoi9yDwzjB00nwW5dGxbTVEbDRPREPTIICjZ2osA%2Bdfm9%2Bwb4ZxkuFGgFtFXWbqQU1zjMymc3lG2UBq5zBRN%2FEvhfFg28OADBIG71%2F1BARw7eRz%2FaMG1w%3D%3D\"}]}\r\ncf-ray: a1f1a23f5f5f0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7426,"size_decoded":8396,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca265593ece4163274471e4635ae92b6","sha1":"7aeb376433047aa1a3cc6421f22f951eec93460d","sha256":"8b52e4c93edd6b6761639e7217bb66025ce018ce1f2b2f73a9e6931277629eef","sha512":"f75e750b03a3664336096abbf14c869025938d470183665548785440cfc672609f2ea83ada18d256f7021fe267f86ebb9d32eb815e7e248a3be5b758688533b6","ssdeep":"192:RnVUEt182DjZXSKcrwUk5H3ZFaRQDpNnSPuYD:fUIO2D/crwUoXeRgnS7D","tlshash":"bbe1afd721c8d4b2b2495c6df8e50f2ef1c4bce84c8ade772529841189b7c60e36b252","first_seen":"2026-07-15T07:58:47.83243Z","last_seen":"2026-07-22T10:07:05.808052Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-ca.net/assets/images/bonus-popup/top-cb8275c2bc31f362d75bc18655b7c164.webp","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinorainbet-ca.net/","date":"2026-07-22T10:06:38.051Z","timestamp":1784714798051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-ca.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 10:45:36 GMT","end":"Sun, 18 Oct 2026 11:42:31 GMT"},"fingerprint":{"sha1":"FD:98:E4:72:90:83:15:8A:19:A7:D3:7E:09:B5:61:75:27:E4:33:A7","sha256":"48:FE:6D:5B:60:69:38:01:E7:34:16:CD:65:01:50:32:FE:EF:13:FD:D6:CA:74:EF:BF:CD:E2:1A:18:83:73:17"}}},"request":{"raw":"GET /assets/images/bonus-popup/top-cb8275c2bc31f362d75bc18655b7c164.webp HTTP/1.1\r\nHost: casinorainbet-ca.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-ca.net/\r\nCookie: http-cookie=1784714798.698.10063.23701|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:06:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 10:27:41 GMT\r\netag: \"6a58b21d-1f04\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 31\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TWN2AV00I80rum6a7Scfcy%2BtoO3okrlawvsThc%2BKW9R3wvA0JRFfVuMDnnLmey1P14feIDVr1zttJJvpo8ZwsYnOnodWfqHXQSKmmenVHyJtr1Gr57PjC3m9q9u3sT5Sk7b%2FwIIN1w%3D%3D\"}]}\r\ncf-ray: a1f1a23fcf700883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7940\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7940,"size_decoded":9214,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36bc9829ec46eaf0447339be8543d6a5","sha1":"0e3d789f14c8fbf3aa804717d5a029923c8dfbe4","sha256":"b697db3245c9f9468932277f7719e5e7fd178c134489baa277ffac34d96aaaf1","sha512":"07b905dd43b76b880af8a57181d6bbf755fb85c717291c32c873c2468180b7ded308c7b5da37b56143a7e8a148a4e3d97a468a7fd59834b5ac0e050e382b0ff7","ssdeep":"192:GWaTybVF4Ej+TceCs1HifxVsigzBelOFLWq2T4aiFmGj:kTybVnj+TNCs1CsiYUgLWqiyfj","tlshash":"2ef1af2ed18f91c43d28537f3ab604971060e52fbcd67898a997c752493dd7488ee1e8","first_seen":"2026-01-11T19:03:28.655371Z","last_seen":"2026-07-22T10:07:05.809344Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-ca.net/assets/images/bonus-popup/bottom-eaafaee69628724139048beacba8e514.webp","fqdn":"casinorainbet-ca.net","domain":"casinorainbet-ca.net","tld":"net"},"ip":{"addr":"172.67.156.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinorainbet-ca.net/","date":"2026-07-22T10:06:38.053Z","timestamp":1784714798053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-ca.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 10:45:36 GMT","end":"Sun, 18 Oct 2026 11:42:31 GMT"},"fingerprint":{"sha1":"FD:98:E4:72:90:83:15:8A:19:A7:D3:7E:09:B5:61:75:27:E4:33:A7","sha256":"48:FE:6D:5B:60:69:38:01:E7:34:16:CD:65:01:50:32:FE:EF:13:FD:D6:CA:74:EF:BF:CD:E2:1A:18:83:73:17"}}},"request":{"raw":"GET /assets/images/bonus-popup/bottom-eaafaee69628724139048beacba8e514.webp HTTP/1.1\r\nHost: casinorainbet-ca.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-ca.net/\r\nCookie: http-cookie=1784714798.698.10063.23701|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:06:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 10:27:41 GMT\r\netag: \"6a58b21d-1e66\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 31\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVKXYAy9U%2FJFo8V3Yhn0jIOfxzh5juOcEXKzAmiFgxwg2aNf5vBmfy96deEw1ZHDcHCl16rXyxok%2BYBp4TuHCzDJsXRSN6jUMF9d%2BxJkvxiqxpW3ybOnlqZwZQmYrPl2RIdtGMBqIQ%3D%3D\"}]}\r\ncf-ray: a1f1a23fcf710883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7782\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7782,"size_decoded":9056,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b6aa90683762f1f921f285df73aa37c","sha1":"cf4751f554eaec354df87595b15c6dfd633b0650","sha256":"e1cf9c9ee0a68372700321351e9b4df5d216ae026ada801ea8acd2a84b9f7ff4","sha512":"e2e02aa0691f61d1585c645e70ee0012b4a37a0d2fee36e1bada07598895641be71e5e4cfd7dc4798abe7787609f2c12e35064c92b00bff7b1d050ed98f3891c","ssdeep":"192:SCg69iwJ5uA7mkFXTQMtPS+r5UCIbuv3Jrf4bWyijP1:SCg69h3ApM1S+lHKirfqI","tlshash":"4ef19d85bae6b5fa6e3ba155f17140a03119703583414ceff92b687004862d6cb761fb","first_seen":"2026-01-11T19:03:28.629888Z","last_seen":"2026-07-22T10:07:05.810458Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"casinorainbet-ca.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}