{"report_id":"5424f208-2a1d-4dec-93e8-80e3af6926e9","version":0,"status":"done","tags":[],"date":"2026-07-22T10:01:28Z","url":{"schema":"http","addr":"canadarainbet.ca","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"canadarainbet.ca/","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"title":"Rainbet Casino Canada | Crypto \u0026 Fiat Online Casino | Canada Rainbet","dom":{"size":80992,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10868)","md5":"1afda701881fe99b449d15fad4992729","sha1":"09cf0e624b08a17c45332cd53ad19dafaad53231","sha256":"8f77819b6d6c81074dc4141846b2fc1f45d5de4390c145686101433118fde697","sha512":"ef21ad38a19bf892f29dd18b2e3c1823a98b67a638cf6008cac6d9c87b7220269730be6c7e55b307d6591e01849e4870d627908a3431297cc525d2ef3abb339d","ssdeep":"768:mEOoD9z8VQ94jhqbY1ItDZaGnMPiIn02v8lXqOMXmNkK3QKyZgjm:mkGuMZn008JqOkS+gK","tlshash":"1683192151f12a3701b3b29533b0af1e6f968503ce9a0915b57d8fa91fa2fd29d3391c","dom_hash":"domhash2486c8cba8b22f00653922eba93e4d80","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"canadarainbet.ca","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:01:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"canadarainbet.ca","ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-24","domain_rank":0,"first_seen":"2026-07-22T09:59:47.991802Z","last_seen":"2026-07-22T09:59:47.991802Z","alert_count":66,"request_count":33,"received_data":773680,"sent_data":17197,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"canadarainbet.ca/assets/BonusWheelSection.astro_astro_type_script_index_0_lang.BCV-x-s8.js","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86ea96acd6e11a9623a3f8c8f20f7efd","sha1":"08b206f70c5612115e174601bf5352ae46587993","sha256":"7afa432588ba3a8362f858f5dbb685c0d0b4d1d612aa99cd7194008efeb511c2","sha512":"4cbde8b68e9690c6e14493a06b0e7ca04a859442611942a207210906a299a051d527008c07fe51143312ae575e6b82c4a5358b18d181f8aa8f54e47b0b1ba4d7","ssdeep":"96:x+bvqVNvz2YWEtVBIpT5rBUiMGBwXbRx+7/7xsMeaSSyXOHkf3AG+EM86P:x+bvqVNvzCEtVBIpT5rBUiMAKRx8DuY3","tlshash":"8a91a6a9329424b351ef07b7c6eb535574392019bc0a8404722864973ca6ddba3b8eea","size":4211,"data":"","first_seen":"2026-07-22T09:59:51.011905Z","last_seen":"2026-07-22T10:01:29.689451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"canadarainbet.ca/assets/gabarito-latin-400-normal.CICpwsWH.woff2","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.629Z","timestamp":1784714461629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/gabarito-latin-400-normal.CICpwsWH.woff2 HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2341945dac2a3113243236316538b492\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4tNv%2BY5yrO53cEb5V59xagtN347ZjlQIeMhll4dWRpMrEjSVD1N4W0hr71akq2F8bSWlImLOKkfSD%2FOM4rfWIaqu4scw49IjjBrSYSmPK1mB7kp9iJIk0C9RtVSG1WUM7aJ2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f19a092b0e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18116,"size_decoded":18776,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18116, version 1.0","md5":"4e627123422841539277cae46e192e9f","sha1":"5bd5b95d3ef5f0a1cca4f28c8d04d66d3017405a","sha256":"3b8ca9bc042daa5e5f793d24181ca866d7b9738e3e77c2867f4eca5d2ec50bc2","sha512":"f918e3c79ca0f6135c3110e149d6822ea433a6b81838e265032d574cabaa72a0077310268587e79365bceece18584e021dff6cfbac2acc36f0589c5cecf8bbb9","ssdeep":"384:ZA5RrqneBzXvooC2TwngZLRcfK67YenRyTPF+cgzjxu4spwNEdx5JYn:urqnUClkcCKnyBDg3xSplYn","tlshash":"3b82dfe499c916b0cd265ab648c8107bce6a92844c9245e1dd0becafcf8dbef35a1544","first_seen":"2025-06-21T20:48:26.448194Z","last_seen":"2026-07-22T10:01:29.674644Z","times_seen":59,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-13.K0YgqOJ8.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.738Z","timestamp":1784714461738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-13.K0YgqOJ8.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6c8578ba553ed3ed174a9f41f3d55910\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qrP%2Bewh05i1S%2B1x4Zg9gJPxeeInPFTE3Q%2BPZ342aOH%2FFS9ZkciPyzR7WIEU0UYLC61qfWNCBBoieZe%2BIFhYDtSwVku2tN07jJOnIK1tuukohvV6oQ1tujLCvrK64tT%2BNsxa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09db2c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24672\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24672,"size_decoded":25337,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"caba5211cdc56cdca52f9a7a9dc775ef","sha1":"1340f5001248eff0f0bbc90177735d66c1f69e54","sha256":"03558fbdeaeb0b5feb3d616dca92b5817a5f59848cb9059e296190b450249e4e","sha512":"4a88d74717209b097bb09dcffaf30383ba0927a330638efcab3b62b62f853bc4d001ab7eb34dc59038216bf740793417044661f5c912d1bf4a3f04cb879e9009","ssdeep":"384:OJcjPEQlyV8F/FtnytfxHjq23Lo8MoOMqaQp2S95CGQoiZChB9uEKgNla1v5mrgf:OMPEgyUnytfRE8MoOSQXSo6iRbUm82YV","tlshash":"efb2e1063ab21960b46350a221f559f98c376809de514d90bb4e2cbfd3dee752f2f43a","first_seen":"2026-07-22T09:59:50.991928Z","last_seen":"2026-07-22T10:01:29.675531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-17.0c8ukVIH.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.745Z","timestamp":1784714461745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-17.0c8ukVIH.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"287e89767f0d629d0630f0a128ff240d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0LOYGwPp5ee8JH2hTUaRivFd7mQceSdYAp0OKmNDI9eLd0An6L43VfvEjv15n8g9GiacOLicXR87oQ08vkx%2FdIuUZkabwg%2FRItTgHD%2FnghhbIwSgmP6QvLvZJYajhtzNISI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09eb30723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26850,"size_decoded":27509,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a9029551e2e662fe291f105389d80ca","sha1":"008a981b6fdacc340e4a36f0c1e902106a0d575e","sha256":"18db23e3cceb2e48d176116d30c7d7740a1142651573d9b7e6ba698f03b6871e","sha512":"aa98abd7048020f69b5f46cf8ea33611db769c0b7b94f977b4ac0a8c7512991ffd7e80f7f3bacd727cd77a30ccbc69f7c96676196b50bec0688debd2c49d38b4","ssdeep":"384:cRW5Ni6whWZd0WdlvIlWMgg7gXSUWK479UGAE4fL1fAh1v8se13V+4XeojKjsr8M:cR6U6Vd5zSUWR7631i81puEKjsr89S","tlshash":"37c2f1b83391dc5538db9dba08c543e1075d78e3d4a7aabd7030f99239e67859c286c3","first_seen":"2026-07-22T09:59:50.978885Z","last_seen":"2026-07-22T10:01:29.676227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-19.uu23t-Ai.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.749Z","timestamp":1784714461749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-19.uu23t-Ai.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"22cf5bd5331a5b164c10895900d6558d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMrbtPwQwStVWrCY4g6E3dt9EQQT2h%2FELdz66dPEHNbRMfH8sOSVeoAkZwvjDGlVDUnxJmSeNnFy%2BE%2B0htt8SNRKwp%2B%2Bkvm8O0XBvItB8GOg25K4TDAiIY4Q9PDQo6NpNWes\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09eb32723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27228,"size_decoded":27891,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74d27627436d84034784cc081be1a2a3","sha1":"62ff51f56f1f2162b90920e28adeae8f280b484d","sha256":"dc2c55ea43505fbe558a10a9452c33849b62ead1319d8eabaa8c99647034674f","sha512":"3c5ed45a7f96914bf78f8d66cc48103b54fbb38cafd7f585939358aefbb65ea42d80d2bdf17a8cc1340e6a46448c914a27e71af387a4b14139268391faae8b61","ssdeep":"768:NZvoN7NLqp2yNqY0Wr0hEcnd5xNhFAAityM+J6xOzwQpLHhY:fv+xLqp2I7aEcXxfuNu6kzwQpbhY","tlshash":"bdc2e19a8c2dc3453fa8db94ef56d7391372aa64ead2cad94c47d70f8327cf02009559","first_seen":"2026-07-22T09:59:51.005342Z","last_seen":"2026-07-22T10:01:29.676941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/gabarito-latin-700-normal.BAFSd0WX.woff2","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.631Z","timestamp":1784714461631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/gabarito-latin-700-normal.BAFSd0WX.woff2 HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3fd180d27620932ba10d5a5ed237779e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pFtit%2BNjEL19YdWHsHSjLbiqj3uhsUvtIbawt0gOL%2BzqQCZbYy7QWTKT4rNvmM2FUR9t1YA5ZNUUldAxtYzAp1YcFyEClsuJZdvNCNvISBs8OHtej4sflnohTYeWvRmxhpz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f19a092b0f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19940\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19940,"size_decoded":20600,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19940, version 1.0","md5":"03cbea7bfba433e429912bd7631e496b","sha1":"996358f83db50d8611a44cfa6ca884ca0bb2d4a3","sha256":"1efc5d2cf09e94c43d9597559d1c6b9eb0def0ab31732c1e0eec83dfaa648978","sha512":"dca5bd744ca4c115ec56da478e5d3354ab4a3ecf44d9a7794b735091165f905bac7a6c82c3823307ca5c06ed2c1a051676526ab0bc7f662496afdb97a8984f84","ssdeep":"384:nazESoXyOBb4CVsoxXlHWmcPSh3EeE/fMAOhCrAC2y6EgEgb54kg:aOBLVsox12VqhC/0A9V1gEgblg","tlshash":"4c92c003cad238adc6194a74a16913f62eb61a5184ca37346da7d62ac1c23730f2f366","first_seen":"2025-06-27T05:56:18.422185Z","last_seen":"2026-07-22T10:01:29.677634Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-11.Bls2zg6p.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.735Z","timestamp":1784714461735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-11.Bls2zg6p.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3d9be63a063500dfe8edce8c8ed72181\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3MhmsfEVSSNY%2BseH6f3t8%2B1BRByaht205SYFiWrp3kUIPIH6vvgDJiXRHe8%2B%2FboEAdnzuUmXdzfMwSc%2Bow9r91sIwlBMYC4PUUlkgMd7GqfNymYW5yHjbbh6KNEJIHYMXGn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09db29723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22712,"size_decoded":23375,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cfcc324dd30c136eddaf15b0874cb436","sha1":"f0dd866bba0c63193e922bd5a36f6216c7d9ebcc","sha256":"a40cdf3da1b3087e0054f8779f18265392e79f5fbde55dd4c11dc26e6792ea1e","sha512":"c1c5a44ed8cdac41a0b3e023a2de84b68d6a11d3168c12d70c6dc9bfffab6218a45ad93c003dac547a33f3392f1768914ebf678bb831f37503fc55105e63e8d6","ssdeep":"384:IE2LZMoX5XzwIvFEyDmaFNoR5H/iK+txjC/hC/UqN8YP3upeMx1Eh/6XJffhH3dQ:JWZMoXpcIvCyiGSHKV8h0U08q37M4yJc","tlshash":"29a2d05370395898272a8f71ea44c0865aa155066ccee1e7c38ecdff1ef9d93a140fa6","first_seen":"2026-07-22T09:59:51.01882Z","last_seen":"2026-07-22T10:01:29.678188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-12.DKmkjoIX.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.737Z","timestamp":1784714461737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-12.DKmkjoIX.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1f217afa0aef02643ae512298ea86b7f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=usDuzoB0sNsntyeLnMMvkq2Z3Owdkkf57MmfqBMKtuaW2yLJbMDXF5nqzSyJykeMuQskxrtiaGLnwWMhyoPXHqiVcTG%2B1AzptBWGGcFNM8NlgLEUnMPeRq9aoNjkYbhmhKjv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09db2b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29630\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29630,"size_decoded":30285,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6cb688273affb9c4edf3c352accb8212","sha1":"53323a521f67ee948c9404fec6754d047531e43c","sha256":"24c27d8a5a3caa2ae88a035c57ec4cf9cf90d8565e341a8ee5aba5f6ac891b69","sha512":"a68766ceeaecbaf8660dbca8289da6b2f2103c7ddabd2aa923e3d51be60040875271b042b6fb28cc1bac2c3bdf03389b0800ede1deca4b0603887a5056ad0dd8","ssdeep":"768:XnbHmFeukSnHb7+NOe0thnaOH1bQPWnRVgTG4SYol:3bHEeukSH/+NOe0Da4byyVgK","tlshash":"44d2f14f1a1115d23cd46890bc2bb71b01b3978d8236e7fdde2efc1236de1a0165c529","first_seen":"2026-07-22T09:59:50.985238Z","last_seen":"2026-07-22T10:01:29.678927Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-18.DT3JXvLk.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.747Z","timestamp":1784714461747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-18.DT3JXvLk.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7c5a78c2b30f23932fb3a949024bcec7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8nnI4I0X1xwm7br1Hbe0IBJxXhMrXPhYESTb3o571KlJeiMWsXQ9qVj8HTMTzcX8he9AIpMklmvamNztmoM8h8viN57u0bewm2mQMJEsxzo0Pd3PO2OS1E56hd2snFk5H1l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09eb31723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23742\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23742,"size_decoded":24395,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"304eb5c67c2eb748d52af2171a63d5c6","sha1":"767baa2456a3dbf9a10491ce2e771c4237aff01d","sha256":"643ad3d3a26f04772dcd9518065da92c3b4ef4dddad22fbe853fc5e8b90c2aab","sha512":"7b0b394b4c67c85865e5f36a2bb716615fdc958cf9922a36b9f12b612771d990bfde40d7731066a5b8a6c3d20167347bd8a3556c1dadf917edd6cab91c125c8b","ssdeep":"384:zi2rA/DPz++i2NjnDt3KTT9uob7HYRMwXVoKtazZrAt02hznWB/cuq2tnvI2N:9H+i2Nn1K1uuHYRrV98pAt02hzna/42j","tlshash":"09b2d061acc0a9cbca5eb9fc2e07714f449b4a1747f7d3e614a6fadc80c8e056c5641b","first_seen":"2026-07-22T09:59:51.010373Z","last_seen":"2026-07-22T10:01:29.679882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/logo.B8M65aZT.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.581Z","timestamp":1784714461581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/logo.B8M65aZT.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"9e7d6886d8b0877c3121e4d1eaa02ea9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bTfn4tmkJsKU%2FnxQV0d9CQztWi0gbpq2DtwN6%2F%2BEqpqNj71%2BhFT8609omquvTuNKEIMWz6Ejh9ftl819gc7Ve7lZkzQcCqK9QsmKkdtG2xlDQQGDF5sGWTQ8hV0AVAiNGts%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f19a08db03723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6784,"size_decoded":7446,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"633a301477c4745df27df502fc4f6fb7","sha1":"58e056e7ccee35c2cde81334444f13f477d54b82","sha256":"5f57a2d6b20d6e31099851e9c3e2a7d51b560727889b2d2ab6155ffccc72a260","sha512":"9aa5efa5be9e4389e1329718597d31e954e163a6c29722f90a4299ef5afe021bf0de2b23cea54601ea4c4c853ae2b07138f59f465a95c0106dcbd9a99cdf4eff","ssdeep":"192:6f9O57cibyHm6UgkI3H9JaOnnNE9BUzJb2L:6Fuci8mvE9Iz9BzL","tlshash":"d0e19e455190ccbf6350265847326796dba3bb02c66fc6d88c98156fdc73023beaae36","first_seen":"2026-07-22T09:59:50.993577Z","last_seen":"2026-07-22T10:01:29.680581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/img/wheel-spin.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.583Z","timestamp":1784714461583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /img/wheel-spin.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"084906e45a75646d820aac480fb011a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Tv4Cr1aAc8nOTZ%2FOfgBrOw7aonB6GzSFzUOS9O%2BNJpF6K%2FeMzAUSQphdeYufe%2B0J7WzsRbPg%2BTnzauQLMAMIxyhQVOKsDMAvYUdXQPQlI8NmzWnVXpgt6fy9NidLOjLMk4T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f19a08db04723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67574\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67574,"size_decoded":68237,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"daf976fceff89ea38c16d99e70049420","sha1":"7519d2f234b4ac7d92974aa36f59c4800ff1ec66","sha256":"8ef9fc9e5a9ed7dc610408e6eb247dbe36a713e25eeaf76e26bb714d7ee46217","sha512":"3c49551104e869160d49532b76e203cde5e819e1e37572885400757f624b1ac297228acb047e061831a000f358bc03eb51ff8d51b0f87945eba2d90264c73f47","ssdeep":"1536:UT+si3jPtWrZyq3Ei3MXUKoLtmODEjyL8xpci105El1tejnf:UCzztoZyq3E4MkLMSWcieEl1kj","tlshash":"ee630244b0bd12ec8398b93869259b751725bb48b76188d7fe343e40487f9db6b038ad","first_seen":"2026-07-22T09:59:51.021917Z","last_seen":"2026-07-22T10:01:29.681179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/crash-09.D_Nul6GR.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.716Z","timestamp":1784714461716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/crash-09.D_Nul6GR.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"87f46941ed096878064508294b1f301c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTnXXpbwCn67wxdXRMIVp0H9FEK%2F6ARO20PYiemY5GbdC%2Bo2KQvufeZUZ60BRjDEQczEXpR%2BCmt1Mj3Sh3ZiV997KvzFeGeOzxF%2BSx2NMVNIizSGgXtIcQ9KF7MB3S%2B8cX1%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09bb21723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14242\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14242,"size_decoded":14907,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13b881c21f39134dc8f523925b819c74","sha1":"fa3bd382555d8ef5c90e34b8073db9fa2810570a","sha256":"e84c635070b7f72a2cd3bfe608277a54646b8ef3d76c2d2dfacf9c999641509b","sha512":"136b16f0e113cf197d2eacab0aeae55c90a73ba08f1c2559738cc02200bd27ad5d93a4e84b6c88c7808ef73ea7e0c67fe52ae88d5f4520095a95e03ab9584a84","ssdeep":"384:RnFpMDKjnCxDgE5JESyWTHDQlfKNDTMUKOMEx3w0d7W3V:LmDKE3EDpKNnMUlf3w0Bm","tlshash":"6752d0b915220b69a4846200204f3c52ed142bff06fb8362b18b3766dbf5e705f51fea","first_seen":"2026-07-22T09:59:50.999366Z","last_seen":"2026-07-22T10:01:29.681808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-07.CyNLzkLw.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.726Z","timestamp":1784714461726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-07.CyNLzkLw.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"fce93b1414c626a5a354d4573b9fc26d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2B37OlL%2FTdtOfCbK%2FzU%2B1COIY4kwum1qr12rDyu65ydevLcKyqpri%2FFEyLzyj%2BJ%2Fmia%2F6SOHKA7EqNMmF3qCmkjHpwoy%2BGNi13%2F8ys8Jge4SnFykInyS%2FrIB8oswy0AoVpQD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09cb25723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25892,"size_decoded":26567,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80698654b82dda0df5e057fec91b7b58","sha1":"354e817f88b3469fd1b0daa8a0771da9572950ee","sha256":"2b0dbb97f751de6263f661d3222da7e89230efdf9f80b273437c790443802096","sha512":"1573eb29f14b46aad3fd60e4499d35d613f8cfbbc714e856d56995fec159ecd56f866439e5a3585ee250808b2d3134a91c29ed8de4bc87c50fb106c691fa5f8f","ssdeep":"768:soVprEb96SHyL0VQS7Q/eGpLHRSu8g/OyE:s7DHHVQwCYu8g/w","tlshash":"edc2e18f2cbfc5a1c95685f403582f89204d08a674c417c765a3f793ddcbf81a94a1cb","first_seen":"2026-07-22T09:59:50.988117Z","last_seen":"2026-07-22T10:01:29.682447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/apple-touch-icon.png","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.803Z","timestamp":1784714461803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45boFO3X%2FN%2BOPST88uO%2FyAng22P%2Fsbu8l8z75dORP96THwlGQEG65gCUS1Awz1gc83f6ZpesdDyeV8zQEnekOdgmYzLDuFx%2F1xI45cWEj22x8BeNUyJSNDfOygket8OpG8Sn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1f19a0a3b38723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":570,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-07-23T03:26:42.347614Z","times_seen":87799,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/icon-fast-withdrawals.C_Ft0VBI.svg","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.691Z","timestamp":1784714461691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/icon-fast-withdrawals.C_Ft0VBI.svg HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\netag: W/\"4fc364921d2f15025838cd0b85cf8d36\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42PZc3VCXyy8UMFAwG0g3rXEK5ga3e2UQVCCp4ix1Nss0BQmzbLB1ULQ%2F2eCpEsqAxXdFZzwJW7OUCET90TWaMYTt%2FcK8KH22tKiFXcJRaw9FEvAP2hxKIVjEH%2FhMtGE6vRN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f19a098b19723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":867,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b82a9ad92b2b76f19135a264e5f36e38","sha1":"606552f5db7aa952cc797872666b3237ccdeb6a3","sha256":"27bdedb1a4b037ecee9327e8b73a38ec1f972e3ca17f8541cb3363e9dacc6f85","sha512":"4b42eb58c41bc6cc672ecb08d4e2f95f1fb0677eb75712f88891b592cf8d4faedffc5c7fc28ad1f8481c5241044da9646cae747759e95b8b564e3997a624ee36","ssdeep":"","tlshash":"11d0a789d34c4c2cd9148504fbacb32140afa2db5a5c4177cca7c935b2659af6a3b1d9","first_seen":"2026-07-22T09:59:50.970538Z","last_seen":"2026-07-22T10:01:29.683618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/icon-games.BaqA6Lsi.svg","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.695Z","timestamp":1784714461695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/icon-games.BaqA6Lsi.svg HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\netag: W/\"eff965211f7ed99f2cf77aec08182682\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Id0nZhGDTazugwqirky7HLiZuuBciTO0aeLPNRai6W5%2F6s7la0YF3YsQarHHXIyNONSh9%2B5jyguvzzqnrBf8Q4XlgjcHvsRoviw1%2F%2B8WgGdKEqvXXWMRlExx9YRBBONcAjOM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f19a099b1a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":881,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5696f75f6e9374a0cdbf68939789a8fe","sha1":"39a6622fec2e302b07b8a283411d5aaa9393d6d8","sha256":"af8166e5b4d319fece81e3f5493f20f676afe01ae284697e763cf7859ca4ac5b","sha512":"38496189b7960e107bb35f21f77537a1872734ee7925336e3feafea5a30978cd5adae1e961b93ee480bf2ac77ccc28a65020c5a1b0704bafccc11b2aa93f031d","ssdeep":"","tlshash":"dae09a14e118a82c8910800c6b2bb0a5302ff0cec71d0364b886cd3bf96d2db38271ea","first_seen":"2026-07-22T09:59:51.015238Z","last_seen":"2026-07-22T10:01:29.684121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/icon-support.y1Ke-5J8.svg","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.704Z","timestamp":1784714461704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/icon-support.y1Ke-5J8.svg HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\netag: W/\"dbe43e070da782d2ddd0d438fa9d0f2e\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HNo3Fq0xf7FOsAboaSjz5fj0Q85apaa7%2FPqxNZ799EWev6eE%2Bbb%2BLNPgodDc9AUcQUCMT17kfsppP5ckaYZi7PNOTtcQAYPTj3iM8zwy%2Fyx08mNwxMGXzgtk2g3Uan333CIQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f19a09ab1b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4524639669dccdc7e965ff7d438a341c","sha1":"02522d3e248b4d4b8d234b4ebd3ce270af2f1ac7","sha256":"4fd71ccd9722e7ec67a2f7f07e1bb70a39639c8a780dc42d11b4c6efc248f590","sha512":"989f9e980c29523f715b2a6f8453b3e5a616a04768976ea94c096ca41a461d430f51ac5c2a5ac33ebfeb7866049e1d1f87fa535909ff76f7160f8561927a7207","ssdeep":"","tlshash":"f2f0f618974c483cea22425cf7187068603ff0da82082125d846e539f0a96ce99371dd","first_seen":"2026-07-22T09:59:50.996089Z","last_seen":"2026-07-22T10:01:29.684727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/crash-07.KgFMVtTB.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.707Z","timestamp":1784714461707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/crash-07.KgFMVtTB.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f6f4537a0f801d9c432c4fd2314a2a51\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xo5XCcMzK%2BVarNQIySTrq145S5SSDTjBtrOSO4xyzNBDIorqwGjEcFHMyrixAC8DZBC60%2BjGe4EbYU3F1a1yWFCM1sxGWqBHVbahyOjsTJaVM4q4ljSjO%2Bcp1tTpdKMV7vb6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f19a09ab1c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18010\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18010,"size_decoded":18669,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ac6c07f74d275535d449c12bd947aff","sha1":"aa380526f7eb8e2232fc7766cfc08152633aa835","sha256":"ef76af94da9706056fbc3c7ca41d730d8322c2eaaf3f47b59ecc4c41ff5ebbfa","sha512":"ff0420558bfa29353ae7fbdd4a82c2a9e22548ad2cb5de7e8370a4c0f2d4af4263ca64c8e87f8866dbb459928ba2377a3dabef07b14775418064bd8e05de537f","ssdeep":"384:8p/cwLn3QHd+lLCsp2MI+TB3eq4UOd8Tc0nRIN0je1vjQ3th:ObL34+0splIKdE8TcSIP17Ith","tlshash":"f982e0e1429a0c84c674b3973129d3edaa7896d7b158c1da0278bf67de07e2570d730e","first_seen":"2026-07-22T09:59:50.973214Z","last_seen":"2026-07-22T10:01:29.685295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/jackpot-07.CHGAOl7E.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.719Z","timestamp":1784714461719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/jackpot-07.CHGAOl7E.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b8889e6d569665b19731a24d719ed9da\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y9qHk1tIHQrs7Se4NarFm3n1kuEGKkTUj0P10rio69wBN%2BlXOPwp0duostngYPG0v25wraEA%2BzWAjlRNLFYWNHfOELjO6K0aeZT6NB2tfW90hWIE5PdlgdzAVsj6%2BcTorzQt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09bb23723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26264,"size_decoded":26923,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c27757f26828712720cc966d2b56618","sha1":"3d23f38a7c5865c94c3834c26a5b4c16ff5d17b9","sha256":"63460e97f4cd29600366576544ceaf638d9e8073ce808aa387f8d84bf0e0e210","sha512":"3a440736d0c663e8c2b599dd2a28483dd2eb121395c81d1dd323591a730f9ea1ac81983d9eb31ddfa867b13a137ea67243a2e20ef2ccc273661a020348f04a00","ssdeep":"768:s/lx9Jn1lqLplkzCwOeD863mC0z9PG7qHgoOfDBa/:s/7Xnq+C724B9O6pOLBa/","tlshash":"75c2e1f182d465e3fd2cd55587237c866b1fb8c861d2f4bb061dc3d9e9518a3c5c8528","first_seen":"2026-07-22T09:59:50.976118Z","last_seen":"2026-07-22T10:01:29.686005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-14.BtBEh86N.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.740Z","timestamp":1784714461740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-14.BtBEh86N.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"894b6688a016b30cd73050a9dd4177f5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1n9P0k%2BoruI7%2BQ033uCIgfFMVJXrGbeKfc5KwIKpult5G%2Be4NJpHC9pLCATPlk5byQKlh3vgJNvxNDejdVUpk8dIxo6qn%2B7nqCb8VrMJuOZfqth%2BpPV6zTtugwXgaNgF%2BaAi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09db2d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34854\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34854,"size_decoded":35519,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c7d718be10365db310ec3564610ffa8","sha1":"7abcee5bfa3ba21267c3a206a7f5e97310d236f0","sha256":"0d75c7fb504595d2bb4ea4907c47d8cc7d943e2c1b7c4b97cf57e62e0ad88422","sha512":"2d001a457bb067e07486354dd690140347b1e6c06b40a48364c2d277733b9b0f53b5857926262c738191da84aa6c770474b09d80dfca543e59aa11cbcd44bbd5","ssdeep":"768:uYln6LBO8mZ/IzGafn3/sPmdw9jr5h3X+gm3PfBLI:uYx61O5/MGav3/Qmd0LH+nPfRI","tlshash":"7bf201900c5e7de8c2b7c097bfba9a78864dc9a02f9b14e32e042d487df49698711267","first_seen":"2026-07-22T09:59:50.99002Z","last_seen":"2026-07-22T10:01:29.68667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-15.CEe6mYOw.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.742Z","timestamp":1784714461742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-15.CEe6mYOw.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0a286013a18cba23189fee7c4f6be2f6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DXRxWZvqBy644bAymH6Uf5t7OPzvulol1M%2BvE9OzLjVy%2BpupVPwnQk1FKFzijN2NvocHiOQeQB9ZwbzZFHIVB5%2BVQ6XSXXw69XsUjAN4rEHQvKGHmKUAwxrLL3eKPqt0sLHX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09eb2e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29414\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29414,"size_decoded":30073,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3f6e6352f546086d5d76213f18873d2a","sha1":"51c571078cf7314cb1c76eec04fa6af230d97a52","sha256":"b02615d03cf48efc2adad17136b955aa25dcc7bd15170fc8d5b9e8f21aaa417f","sha512":"5cf54e52df57231b3bf3d1495471b10d770b3a964adae6c0b83cf4b312ee4aadd443dcc48d5e239583a267723c546fafda151a74e8363c8cf459f683e5962de2","ssdeep":"768:X6UtgDPNul+G8dDXmIjiHQ9dx1ENDHNAxQg:Xf4Nul+FdrmIjiAx1IyH","tlshash":"81d2f18b52006ec7be323aaaed65e6da1e47c53d1e8411c3206ac378617517a21f4fcd","first_seen":"2026-07-22T09:59:51.008788Z","last_seen":"2026-07-22T10:01:29.687314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/favicon.svg","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.804Z","timestamp":1784714461804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\netag: W/\"a9932ec13aa8435b3c431e11073bc317\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HIouphNK6BOIBBC66cxcrEniirJw5hLBAH4I43pSySNg8yEJ61BCjyiSceE4BMG9C9ggBOOFDpQuGAxggfOqDnXZ7xtcgSat746CpXWmDWgztyUNMTWMGtTA%2BjVBISP7gQ28\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f19a0a4b39723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":954,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9e6ec339540b4d72dd5ab76d6246330","sha1":"945bc81056dcec190229e92fcd7e4161b8a28ae7","sha256":"bbb897d2ae2f8f7f5559347a5a39585be3ab65bfeaaeace2b3b8958e90b8afc1","sha512":"06cfeb8bd1ef56b88e040b5d48f88231d24172b7a15eb279141a7b2a830c03e2de09deafb1f8cbdcdd820e588ec9b6f324546938f1ac143a80d839320c30ae61","ssdeep":"","tlshash":"4ff08b8ad60c8837c258c26cccf4d0b1136d51e3d1c4c235d4a1af3e18380c71d087b4","first_seen":"2026-07-22T09:59:51.025229Z","last_seen":"2026-07-22T10:01:29.688032Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/_path_.DogZuWAG.css","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.570Z","timestamp":1784714461570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/_path_.DogZuWAG.css HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\netag: W/\"37b2eacd53fcdf23ca44b78818eaead9\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJy8rTW%2FAIQAbEVRKdWqsQo2DhC5vN5j0Ky6nDDZevy%2FDqBUqRza0HxpmKc1q5%2BX4oSRsjn6EfdUp1VlDTyL3%2Fc9Sv4lgZkJgDmx7IWDLcMuA1nBS6DRe84FyVA2S6IOU4%2Fw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f19a08cb01723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52469,"size_decoded":12237,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (52466)","md5":"31dcd9488c429610ee0458e9c978d804","sha1":"7221e5ce90690494c72a61d4d2a4fcbdaade95d4","sha256":"048fbe67282f5bceaf99c59e0867a97b344933cde5928223ec475c9a1d097da2","sha512":"529cffefad96433197018e6ef76ef6f9069abfdaaab290c3b5d1b2fefb2a4852e6e2c243e9d7fc0fd0c3e54a72b04b532de4d2d8d8759a072bff19452af6c064","ssdeep":"384:ysJy7McqcUGmqiATKLl2Ax6GgL0/TcALGYbQRoFgzKBg4vsV6z9FmKG1c+gobuiI:ys8kLX8juBRve8Hwj7wk5ysM3UCzme","tlshash":"a433a764f310a57ee827b77d1bd8db4c2328e002e817575efaa6da1144cb3f709e2949","first_seen":"2026-07-22T09:59:50.963818Z","last_seen":"2026-07-22T10:01:29.688767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/BonusWheelSection.astro_astro_type_script_index_0_lang.BCV-x-s8.js","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.572Z","timestamp":1784714461572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/BonusWheelSection.astro_astro_type_script_index_0_lang.BCV-x-s8.js HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\netag: W/\"f06388389a73c13647e54047c98c1fd2\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNy1pmxuXq2ceY3pfGVXy%2Byyp0qJ7dIekWHcMbQYrmwsTijNIbmT1G64JKoQOlRDSnH6pPzfFobMaiq7CPDILJrv2pXJeJEr0zNVIqFAwedhrWGSIJp%2BUpxDJt1o8A9xcDv9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f19a08cb02723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4211,"size_decoded":2593,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4208)","md5":"86ea96acd6e11a9623a3f8c8f20f7efd","sha1":"08b206f70c5612115e174601bf5352ae46587993","sha256":"7afa432588ba3a8362f858f5dbb685c0d0b4d1d612aa99cd7194008efeb511c2","sha512":"4cbde8b68e9690c6e14493a06b0e7ca04a859442611942a207210906a299a051d527008c07fe51143312ae575e6b82c4a5358b18d181f8aa8f54e47b0b1ba4d7","ssdeep":"96:x+bvqVNvz2YWEtVBIpT5rBUiMGBwXbRx+7/7xsMeaSSyXOHkf3AG+EM86P:x+bvqVNvzCEtVBIpT5rBUiMAKRx8DuY3","tlshash":"8a91a6a9329424b351ef07b7c6eb535574392019bc0a8404722864973ca6ddba3b8eea","first_seen":"2026-07-22T09:59:51.011905Z","last_seen":"2026-07-22T10:01:29.689451Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-16.Crp284z3.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.744Z","timestamp":1784714461744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-16.Crp284z3.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2b851189519bd9a0d30d6958938e5376\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wmUe716kz86X6OhWLZEWEOXa9qTvnCxLFMFaXTEYJYsYTJ0%2Bbg%2BuwwWFjAaBsy1mtDMWCXkdhuLOJ%2Ba0Zw3QoZBCtFNQl8feQhpFNnPQ0ubmcMfl8wG7rPh%2FsSpFHUrILKjy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09eb2f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25394\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25394,"size_decoded":26055,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c3703849e12f2073615562922e93931","sha1":"49b45418832feb858e810daebed2cdae49335afc","sha256":"f5db5a3081a9c5c8b8ca2aed5a80a81027164b40f1a7c6d218671586bdf601d1","sha512":"7b8834e439ed43890de40a484c40095dda79ae030b4f200a28bab2366b8ce2cc70b31564921b609af0887ee5174cd49aa4aabf65cd55404b334ea669321f6f50","ssdeep":"768:M9C5hHOV6mwf6pzu8pAVDZpUc2CpKoZH6:MEHuV6zf6p6mAp3TpNw","tlshash":"74b2e14131efc269fdad5025dbcfa247fd7d834332250a6999ea2913fb5be80d312601","first_seen":"2026-07-22T09:59:50.980767Z","last_seen":"2026-07-22T10:01:29.690123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/img/arrow-spin.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.585Z","timestamp":1784714461585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /img/arrow-spin.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"21c175329b9df5344f259cebdbce8707\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xBj12E9NtPQge2SJ524VTuIFGNj68CNWra2stb9oFiN6heez%2Fl1hj6AY4n2uE6C6j7UzaS8BJXKVoZGLgr%2FouKULT77yb1Ga%2F9sq5453NtHeh6g8xW%2FE7PD6zp%2FqJrgr5SjE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f19a08eb05723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9448\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9448,"size_decoded":10110,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26c03dd7a573a837b72689cddef153fd","sha1":"776c8244687560c3ebc09f44c89843dcfca91804","sha256":"c0d4fdd0b4f52f0592d1382f41d8195ea88edf5cf4c58d3c601b14c05ff1ce79","sha512":"4a1d06eac5385c7c8a505738b69f04099df29bfa7b8c15f0bcacbe8042a89d1db128b1bba16449acc79c5f2a68bd74ca5d8bbe4c8c3e8b5947e17625d3a40819","ssdeep":"192:UdXYqVz8Vbl0XLb25KvneIJcqzIKFtA9wFKHm3t2hQN6KNfeQZ1:UJYqVz8VhC6Q7bFOrHm38KNfV1","tlshash":"0b12cfbc30e9f14e4629f932719a7fe54dfc022de0e46d020b01658fee9566a8dda245","first_seen":"2026-07-22T09:59:51.023599Z","last_seen":"2026-07-22T10:01:29.690702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-08.Dlmy0rBV.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.728Z","timestamp":1784714461728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-08.Dlmy0rBV.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6e0196fd94f29d18ad2b0e9cdb79dfa3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=koUbM3641KLxdYdOpXK8MczUVbHddHWYPw1qjI4VDplku35aNy6COPS196i7mTTb1gMKfLfnuDwmtMyTujtO279LhmVMU%2F45aSEV5hDXnI9O2D5E5lMtaCZZii1wfE4%2BL3GZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09cb26723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26224,"size_decoded":26881,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7a702225fcf420d371a559d68a4289f","sha1":"15e0b35bf5df880efd14ce159e337dc08088659a","sha256":"9dafa357502d638a1dd612e7e21cace3dc7d7661fc00fae9759c6bb3812dee0b","sha512":"0fd8d7c56b2334c9953d18023b8f7af60eaafd652792a44ed2bc84c848fbf224bb143c5969fb88b122128d5b0e35d9dfba99891d19c72018c07f64390d358076","ssdeep":"768:VP+yOWwXlSddDDCIZcFcsExc+Xam8IQMAw/:VQWwXgddX/uFtExnac/","tlshash":"96c2e16b8aaca3cb8ee5f58643dbfdf3281713c9421821d2964200577872a8d65ee496","first_seen":"2026-07-22T09:59:51.003625Z","last_seen":"2026-07-22T10:01:29.691412Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-10.C9J4RQO4.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.734Z","timestamp":1784714461734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-10.C9J4RQO4.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6dab308b5d99f75212368dcfc1d60eb7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Ft3Dnlu6q8uHvnsfDpw4UMaSAgKjqJSBxt5Kg5DFnkSpzD1uBhW8JzudB2Mi1Wgkyv4chz0F0dW7SLN7SVeDgSrDn74kjns7DwdHJrt5sKPKjSPtR09d0k86YEHrqMsP6UEG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09db28723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24764,"size_decoded":25419,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"95685dfdf519a3edcbb8aff2234c05d4","sha1":"7a03e6bba6b9b8dccce991983299db4903d2b674","sha256":"4ce377c3c7b563939c916f376f666bc964ee1ef70eca44dcb64d90b7371d9d58","sha512":"2ee55caa9529d8900ec4ae186a2ab1fc68fe94fbd77ecc0d0e340151cd492808a48db93b713260e298e2cc7960759fa87838b28aad5a91e30c515c4881d4f484","ssdeep":"768:LZoHTFXoIHvuQqzbXoZUWElvC1kzymql0BKMh:LZQT5oIHmQ6XoZovyPyBKm","tlshash":"19b2e165fd3e1980775eab0b317fda037b78b41e6e068450662c5259b02cb1c2bb2fe5","first_seen":"2026-07-22T09:59:51.007222Z","last_seen":"2026-07-22T10:01:29.692039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:01:01.151Z","timestamp":1784714461151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\npriority: u=0,i\r\ncontent-type: text/html\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gmBO8QL9xcRaatIq485hBtxt9MxtsmJ07MSvaMcaazK1rd3IxLX1U19r1YknSaN%2FT8MR%2FsRa95DL%2Fg6LVCM%2BD%2FcX74JLXVzvfrLH97dNtt%2Bl6U7zjyhfBdb%2BiqL%2BDIJPhiY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f19a065ac7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":80871,"size_decoded":15249,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10868)","md5":"b410ebe39823a25d8cf1b52bae22a86b","sha1":"f9ebd36eb279e11f2d32d7621bf743d7b1c73946","sha256":"9483bb1230389041c385a935d13cd786658bb1b36d4beee921c4e58b20a0145d","sha512":"86f2cb37db7d2c11def2523e499699df09528f384b3b94efbc1a60fef6c17181c31b47cb1b438561890de6e80bfe8dd8b5914b90fe93495ff8f279d6a1916394","ssdeep":"768:q+OoDTGCzVQ94jhqbY1ItDZaGFPdJhPiIn02v8lXqOMXnzNk9GQKy1gjm:qyaMWpZn008JqOk5mgK","tlshash":"be83192151f02a3741b3b29633b0af1f6e964503cdaa0915b57d8fa91fa2fd29d3391c","first_seen":"2026-07-22T09:59:51.02046Z","last_seen":"2026-07-22T10:01:29.69263Z","times_seen":2,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":9,"connect":15,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/cta-bottom.Gf-bvOv9.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.587Z","timestamp":1784714461587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/cta-bottom.Gf-bvOv9.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d8f07afebac7266900eeb132dad27c93\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ghj2fBMEWP5G8qyQonRYOWJwvFE5SKScWsulqe874hRZrVy%2FoI0nyOFTryW3dwogf6XJF0Fd%2BQGnk1IG8izAQZxLHPG92oDqhNCx5uECOXeHYOSCaWhPrBEhCVURonw8I6Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f19a08eb06723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26744,"size_decoded":27401,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1376x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a3238948330a5638597e7a5d43255271","sha1":"f49ac8de285a5ad8ffd6d92a78f81f349af25bd6","sha256":"7e33b4956968e94ce858d2b2c4f9285d86e984eb4e75a4bc0fa7197f617c0970","sha512":"f942e7414273452b8687814c9291ba7622fc22f2c7955aa64793e72f88cbbf9170e3104f5ebb5434e9a5f548a78010153de6c7ead55024419ec319bf5661fe95","ssdeep":"768:4oQwgvHca3amBqDfnNim3Kr/tkcuzHbHUFRP:4o/EAkqbnNiO8Iz7HeP","tlshash":"6ac2e1e9a9c6b1b1f7e80b38fd8f432b5216c6391c3b69e1cb53a160f613d50c9b4169","first_seen":"2026-07-22T09:59:51.013595Z","last_seen":"2026-07-22T10:01:29.693204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-26.4tkiL2un.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.724Z","timestamp":1784714461724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-26.4tkiL2un.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5c10ec53f5ba47f63db0781200639c4e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBKYzCGxnIAqnZzGEugcegXe3vlODo23HRkg3%2F3l2FujCwz%2FN0Tbe05a9c8eJhX2Im44aJ7eD3BYhr66kOMt3HbyKfpk2znlobVhMfUq4Ee8Xil3IiEgbdAgvDEjuY2151CC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09cb24723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25288,"size_decoded":25945,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60df908654b52aa448772eee40c480e8","sha1":"4673806383c5f19aabc820e557c78036d5737dc5","sha256":"0d244ba25ce083b750eaf84d84ce987bafee83526876b80c6d3aa226219c9327","sha512":"e59d05e271857f9a58f26722c29bb29c10b1d58c7f6234182c7d4e71b87baa969cc6a910eae045f00c95eca021899d3aaac8b472bf6be2e48d5c4df536ce5ff5","ssdeep":"384:BOI0L0mnVnOcAljNubDYE3ZbiqhDFGe2oJEjJTkK7Ea1lMUK1u2saOAe+cTR:B+L06971biy7KJTkK7NfMM2Te9R","tlshash":"b0b2d149c2c6268a7057489f4b2bb850fe7093d06688c3073b6eb7d5f49abdcca94859","first_seen":"2026-07-22T09:59:50.983125Z","last_seen":"2026-07-22T10:01:29.69385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/slot-09.CfSxCIQh.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.732Z","timestamp":1784714461732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/slot-09.CfSxCIQh.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1656db31f273ce4bd5d0b50f20aa6513\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mko63NtDtihVgiIDz%2B%2B%2F3AAWhzL4x4yC2ptOYqDsQRuQDV7wwDFSGgI4xOZ7xsSZjXY5jKWyyv2k5ukDLx85NkhOK6gr2QYhTk5xwpJA0Ag7rXskoKgth0N4ExKSibgE1rA7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09cb27723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26718\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26718,"size_decoded":27377,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a761a78e0f39fe2d12330b1fc097cb04","sha1":"2119e8ba94ff116dcb9658819482c0823d36cde1","sha256":"f6556b6ea561983f6207a0beba0d79adfcb18590c9213b7030e07c52d468d1a6","sha512":"292c0e2feea79389aa85d555c90c77b7447f702899d4efe4a1969504c566403c0256ae5adbef936872ace512539e739376c821e9b5f144158b567290990b0105","ssdeep":"768:tYbSeyKEqTZfDjbCc1gcrdjeclg/Har5QDS4Lnos:hPDKLPDLJecl86L2nP","tlshash":"58c2e1f30e6bd3f671c5184edd069a7c629309ac1b597a99ce0928cb2268b8c9871525","first_seen":"2026-07-22T09:59:51.017212Z","last_seen":"2026-07-22T10:01:29.694449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/gabarito-latin-600-normal.NulAu8lF.woff2","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.678Z","timestamp":1784714461678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/gabarito-latin-600-normal.NulAu8lF.woff2 HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6542970414daaeae1c19b43725a5411e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkNsw92kQeAq4D0PcjR0oVAc%2BnI%2FuvGiivt%2F4svGHBQRWhEV9q38w2YVVrYAKSIITi1hABKUv4fGOrfky47zh3YZsYrbrXDHEgMesd1%2B6URdnEQ0bYNIGchd3BHz2EGhgq6w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f19a097b17723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20080\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20080,"size_decoded":20744,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20080, version 1.0","md5":"f505b42944a82d60c42cdb6ebdb729fe","sha1":"63d191472a050e670b72157f38797ea4b9eec03a","sha256":"37d20573eeef888b16d7e9d457d6de7a3ca04507fb0593956dbb2a291aa55829","sha512":"56199e63b69bf3e15e24b731ef4c07278e50a5e2e9df7d636edbad3988439b97913270070ab9495501d1f2995e3631e78c5c2e65c4922086e25b9c2aeed3534b","ssdeep":"384:uD8c+u+FD5m0q9bZ4joK9O5ff/uYNy1JFjjntbvKbb5Ul7Zcn3Pt9xIf:HR9FbqBi0qGfg3fSnqZc/Pxu","tlshash":"fb92d053ac6f8fbac823803d85242166b9ae96c6369137433d7f8cb01d859b0b250b06","first_seen":"2026-04-04T13:37:09.576039Z","last_seen":"2026-07-22T10:01:29.695099Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadarainbet.ca/assets/crash-08.CkqNPMSl.webp","fqdn":"canadarainbet.ca","domain":"canadarainbet.ca","tld":"ca"},"ip":{"addr":"172.67.213.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://canadarainbet.ca/","date":"2026-07-22T10:01:01.714Z","timestamp":1784714461714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadarainbet.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:55:32 GMT","end":"Sun, 18 Oct 2026 19:48:46 GMT"},"fingerprint":{"sha1":"56:0B:4D:8A:23:0C:76:B6:2C:AA:C6:1C:B0:1A:4A:3F:77:8C:E9:92","sha256":"31:4B:A9:F7:DC:08:25:A1:7F:80:12:A7:A6:AF:6D:93:CC:67:FE:32:57:94:85:43:B4:45:9C:E1:63:D0:BE:62"}}},"request":{"raw":"GET /assets/crash-08.CkqNPMSl.webp HTTP/1.1\r\nHost: canadarainbet.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canadarainbet.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:01:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1739e9de9dd12840a74f0153be4b01d1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whSkzVc5Hjl%2B1gIHW9%2BqrVV5xIxHF7utoOUOHhVO10gGQ4WnGC1zcOD43QgY1kT2RHadRZOEEpIny3dWRMKH3ASxV6I%2FmnfGhxVxcfQz%2F9Rj%2Fnh6hjeTwRQhtW4TIgXecWc5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f19a09bb1e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12124,"size_decoded":12787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a3e29e3206aa27959f0bd1f5d649913","sha1":"37dcda6b17409247176de9a8358265ecc337936b","sha256":"70b7bbb556c6b634c5adc80366ca577550094513f8ad59e6f9c276d3bd51396f","sha512":"0651c87be47ef0d87ce927a01281688520f0e33db4e34a9f0b5447f4f537880878ff8c02a79eba3c0c44bae2f54f4aa59ec83ec7a43a9469b46f36bc57e0a2f1","ssdeep":"192:SQxHk4JNwECdX+KP5jtpCjBXkke9CtDzSCIFRb+ujNn2kw:SKx0ECdX+KPpb+B1e9CtDzbK+ujN4","tlshash":"ea42afd47dea82534d25bdfca21634ebb4a63e9f171c6c3fb83594aa2d8a0d10996101","first_seen":"2026-07-22T09:59:50.997693Z","last_seen":"2026-07-22T10:01:29.695766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"canadarainbet.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}