{"report_id":"810b21ae-c646-43b8-b8c9-724eabb5da4a","version":0,"status":"done","tags":[],"date":"2026-06-28T11:46:11Z","url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"title":"Oha Casino CA — Official Site — 200% up to C$4,250","dom":{"size":186791,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65516), with no line terminators","md5":"3c8f6f62ffab39a177950744974cb986","sha1":"00a55b297f5278a7be56867030b2f56e97f7741c","sha256":"a84a9b1db44866c0a56266605782cec03ae9891959f38c72307c8e50046b8e6b","sha512":"2e2c549b26c246325e2f5e11357997e1384ea43b321840e95ad179ed4373e97db049c018a6f003c1a6ee4447fb2add91c32a9ad369523efe4ad0cf0a8e921d4c","ssdeep":"1536:DbO4V5449ayU4I44BNBHu9iaT03G8/6r56br2C2yNBJ2sJJJHz1nw:DbO4VA0O3G1U/2pyNX2s71Bw","tlshash":"dc042a7121181a53d6a39345ebe0a3db20bd51acb8f154149cfc818f9fe6cba943d3b6","dom_hash":"domhash17baf29c215cd54db00746372d00a846","first_seen":"2026-06-28T11:29:24.361455Z","last_seen":"2026-06-28T11:46:13.338276Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T11:46:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ohacasinos-ca.com","ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-23","domain_rank":0,"first_seen":"2026-06-28T11:29:20.660405Z","last_seen":"2026-06-28T11:29:20.660405Z","alert_count":23,"request_count":23,"received_data":1032024,"sent_data":11434,"comment":"","tags":null,"fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-06-22T07:36:22.266568Z","alert_count":0,"request_count":2,"received_data":19349,"sent_data":962,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f4e09cfb2a94abc02d576d0b67e7715","sha1":"8b1ca92442ea77e645941106ffc990c4e6a23230","sha256":"152999ef2d7a4a1a4177e8033890087a309b7a617c70941f1fcfbbd61ec02869","sha512":"62af741ed5a1f96fcd79ce2e05b7fde30388f3862eef8fc4b41e8906f197584494f9a1b109bb237f9a5330bf599adcee8d3d59483b90a91944d00181266b5e2b","ssdeep":"","tlshash":"06e0682d7371758889f9519b2bcb788d4c2e6410ddc6d8e4765d8cb18cc5f9702cae24","size":385,"data":"","first_seen":"2026-06-28T11:29:24.386323Z","last_seen":"2026-06-28T11:46:13.38388Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f3c3949a732616c3dee8bda3edd3f5d","sha1":"30882d973af7f8db8f3493ef86220893d8813ae1","sha256":"8e5166d171be021a8cb5425e05132ababcd459b423173a99ba28ac35863e5378","sha512":"7994c39ea30f39586baa2ef843d2b414367ff2892e8570767cb3b0c631f6b0501e4a8d8da0b8bc484be5cfb823d627ad00f835fc23905e9b4a4468818bb497cb","ssdeep":"","tlshash":"a9e06872e12093c194fe74c72e8341e39c38aa508d96e39a930488d196dfa82119eea8","size":373,"data":"","first_seen":"2026-06-28T11:29:24.38726Z","last_seen":"2026-06-28T11:46:13.386103Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"635cd7f15520f7460fbc18d360794ebe","sha1":"b5c0ca8843edad68867dff0b631e8877ce2f9c5a","sha256":"121c9144ee176559d70fa6803139a31fa66afa6b7393fac578812e5351161897","sha512":"eff9a3663f29e2461d852476cfb1554a52b03998d5ac195368af9a4408a00ffaa94a3a21496a59f3de88e678059f727199a617f925ae988a5c71cd40ed86f0e8","ssdeep":"96:fegOYmITr7CP1XR8oxnWJlyId7MQ/meMhu6bxt71fEdQH7yRUq+QlamC6pVAB5Qk:Zd5v7Gf5DmN/RGxjfD9qtBa5Qk","tlshash":"63a16d39339476965bb4d7788486cce999b8c75214c9dd813338c448d6c73bf6e5d832","size":4949,"data":"","first_seen":"2026-06-28T11:29:24.388099Z","last_seen":"2026-06-28T11:46:13.38807Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4435d8e2d6de1f07c950aee4839cbb1a","sha1":"59dbf5944fba2e1d55042043ad529e7551568458","sha256":"d0d17b7f6ec41ea5a98095b8f94d746e606df8b3e6e83acf1684074f16f632e0","sha512":"1e8842a5a1b9f7bbfa0458c6daa5baa16a0507631f5c7a8bb7b30281d3c2dd0c2be24f61ce4fc2db93d1fbfe84a86b5ceefdff8e2855841bae39e49063f69588","ssdeep":"","tlshash":"a921e7783a3424484b5a0bf77e8813e70714f89060ecd8c45b0ea921cdc7e1f39758a4","size":1225,"data":"","first_seen":"2026-06-28T11:29:24.389013Z","last_seen":"2026-06-28T11:46:13.39006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca30c935a1cc366cf73ae8a60c52334c","sha1":"7d50eb640cf08cb5471707b91d6f1611dbe3be61","sha256":"72fe6518dba8c22f5a827fcd6ea73800747f69715672a1f470cb7be4d12468ca","sha512":"8d875c88daf46287b3815926df8af947957bbe3693733a8f3c58c69795de8627bb017b1f923c694845f2c4ce3617443cf04ad8f8b912cacece08ea3646ae1267","ssdeep":"","tlshash":"4921e7783a3464484b5a0bf33f8813a70714f99060e8d8c54b0ea922ccc7e0f39758b0","size":1225,"data":"","first_seen":"2026-06-28T11:29:24.390062Z","last_seen":"2026-06-28T11:46:13.392336Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e452c6647056b3ef853c5c8563fc4ba","sha1":"74c15b7af0d0c9a58f2595f9356027954793390d","sha256":"0c9af6d522bae10c0dabad5e537527c8b84d7f4cbc4ccd0830161c0f02c5e7c2","sha512":"2d529448c7971340d0f26f59c213d74f5790b3c90443f5e8983145498cbf2fb8ccff1ca645b998c87f1542857f47187be85a56ef343b629543e91f1e95d1e767","ssdeep":"96:e2wVHJudYlNX79WFd3u9PALAQ0IKn7rZkyTXMV05OboK8S2wdUl7RyX3szS9QESC:ejHJ8YP9WuuNaZ1T36c3ldyX8z4QjDk","tlshash":"3ac17d00a1178e411fd865f67bfd0ccedb38ae19712e99a5a071ba212c1d31565afce8","size":5881,"data":"","first_seen":"2026-06-28T11:29:24.39095Z","last_seen":"2026-06-28T11:46:13.394525Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"404af202523d4baeaaa9b106f6bff21a","sha1":"8f4db1f1a57f3eebb6fdd83dfdcb7053c4dc7d87","sha256":"00b0e8026f0bf72c3ee4386f1f94bafca47e629f5ecf628fbb66a124e7640f7d","sha512":"ed0ef4d0e1f00b603a11b88766ac4a81a000d8de02385d9add6b635242ade44225a57b48f8cf470fe9d216170b83394e6a6a2e96a4d9c5f382b59a77d2746d2f","ssdeep":"","tlshash":"501166276018e548c1e4a1c62682a15e9c58b6c26f61f1ec0318d55349edbc2a7ea670","size":1081,"data":"","first_seen":"2026-06-28T11:29:24.391789Z","last_seen":"2026-06-28T11:46:13.396344Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99d97eaa99b7d094195a7002f5e931eb","sha1":"5fa2003f32597c1e8790f125aeb99ed83e2eb035","sha256":"8e0363a0981acfda5a8c57f854d68c458e9ed5ad222dcded712d5774e877f7e6","sha512":"09541cdb72f938b46f2cc950adcc7f8d2ae27cb252d2046595be2027accba7f701d09dfbc7f89598226b4607bda2f09589d32d757a26f404e38d1be3e3831861","ssdeep":"96:aqWUv74OmzqCPeCJ5OAQMGQ24PBFPGQ/z0iQtMK6CpjBa5G6Vphk:Q87i3PetMHbrkR2k","tlshash":"0ca16e133207478d877646fa2ed84f5d8a60044c25bef6d9853458537c69b03679d8fc","size":4709,"data":"","first_seen":"2026-06-28T11:29:24.392719Z","last_seen":"2026-06-28T11:46:13.39805Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0e0ec4ad131c02a1f438e0d5eede318","sha1":"edef5af7d1ff2fcce17a00c56ee5d8e64bd68820","sha256":"11000453e78c63aa5256eeb56f3adcf55e6d4b89f2fcb8fad4882f0a84c48562","sha512":"a34374799f699a2e857e6b464dcef907b2a31aae95e3d2e1a4d67864b078ec2a86f3dda4b6e6ee914e024a9cf94003371929faa46e135cfbb47e15b67d0b7d64","ssdeep":"","tlshash":"bc614c43210e530ccf7e3c6725dc9d1fa928646dc5f2384a8376551927082c326bcafc","size":3401,"data":"","first_seen":"2026-06-28T11:29:24.393559Z","last_seen":"2026-06-28T11:46:13.399853Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77624d0c0c10125384d6789b8ae5e8c8","sha1":"d8f9f53608697ca095a3a734e0f9f295b0b1ff11","sha256":"0d9e71e751644ff83ebb201381baaf0ef16d3b3229daed89577f000e13811b40","sha512":"1c95b1c885002a0222df6033889ae3e5eda4ab0db257e13024a40a92a17a417729f96cbb0e01e2d0fb0600907fcf4d4095cca2c1a4e16f11301b746c0acd6fc7","ssdeep":"","tlshash":"fe311a3d5807dd3bd238612323cb05285b24af397ce474bdcb1788b10e3668da08d023","size":1749,"data":"","first_seen":"2026-06-28T11:29:24.394529Z","last_seen":"2026-06-28T11:46:13.401628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e33c4b97f92f3936cbcf622fd4cfdf3","sha1":"2ba84e9b75de9423d148a9307dfdf625a0ed37de","sha256":"a14e1d17108d30ecdde77c27530cc8dd826df9f9af2263a15c1bbd8b90470f72","sha512":"02c75b6ec0a0ddb248410def88df3cfc9600a7a36b16f6b6f18d61e7c5aa0c8b6ef6224b5b4980d0c845259db050a76e2653b819e2a231dc74911420eae617a5","ssdeep":"","tlshash":"8001152fb21103c4e5f571573acb744f1828a40555ab70ddd21380d579c53457299979","size":725,"data":"","first_seen":"2026-06-28T11:29:24.395491Z","last_seen":"2026-06-28T11:46:13.403322Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12ae127c835136481df3e0a085837447","sha1":"242dd72ab344313027c85e4d4eed18e24b5d765a","sha256":"ce19759999416c1fe9772fd2087ce4d5e01c71f2c7e063f95b008d59e79c9a52","sha512":"fd530ab8fe59aeb6e1fe5da32c4bb131abb8f9f13c4a56acc85c62130c54bd6be1c355f7c673503d5025ac36bdee7f69b0f814adc56e29b44e9772408822b418","ssdeep":"","tlshash":"f221f8193102574a6d75ab8b2bf7852f0150f4e9e78534c6f3398004b40ff00827fae8","size":1289,"data":"","first_seen":"2026-06-28T11:29:24.396408Z","last_seen":"2026-06-28T11:46:13.405089Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d135d6367c9c7bd179344a77fc8175ce","sha1":"a90d8ff8224a449a7e14e046c765ae9e7ceff22b","sha256":"af5e0b1889ba204981fbbf3af9a4304832fbfb0fa0a79d4048c19ba4ecdaa710","sha512":"5126c41e92e73fccccb80893ee2ab971c3d65ad325015af5e2ba8d342c3a0e2e6f5e14c78cda1f0009709968239a6f3ecb86c1a070bd831b8a80c1b24c783656","ssdeep":"","tlshash":"71c0809511e3a120f2f751c5c3df35470010717515e445d351059c70451c8455554f78","size":156,"data":"","first_seen":"2026-04-23T17:35:27.07977Z","last_seen":"2026-08-13T03:10:24.553813Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8fc178555b079ee2d033f7dbeb52aad9","sha1":"bc13d86bbc54b1f8cc33343de090b97818859a7a","sha256":"7063a9548918c4dab3384f9699577c2e10b8add22315300ffe136d04270275d8","sha512":"7bf06d14b457ebabde847647acc349e38cdf4bcdc3b28a9aa34371e162b9f2653a619f118ea990c5182ddf1d23dc5604a3ac6ab8d6b537d8f26516ee17db84ff","ssdeep":"","tlshash":"1701f1bb612a307c48a324ee131b939837220053b783c9653e6dc3516f66c9043b57cc","size":797,"data":"","first_seen":"2026-06-28T11:29:24.402329Z","last_seen":"2026-06-28T11:46:13.408297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/ad376i4pPih0bf56.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f0b3a5c77ea32138be230b96d8d41cc2","sha1":"cc238d999401a84abd525e0000813b2460163138","sha256":"c496c616d0a2cacf0512f82a42442d8bddcace2bea9cb751c169696f871c105c","sha512":"80d659b7e225b2662430c93fdd9c9efcd6a545603b95e61aeb997ab6d806629cab2616d01c7427b5b6407df35d4c12ac1711ac6d96eafe91d879753b4b4cd0ea","ssdeep":"","tlshash":"e1f0dc8ad16ae5f9357218d2d22f1046762501b48b90049852ea0e232a7e187e02bfc9","size":446,"data":"","first_seen":"2026-06-28T11:29:24.371095Z","last_seen":"2026-06-28T11:46:13.348395Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/d855yBjzXJbu9ec0.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"64b4a36c51298cd88da2d91583742e0f","sha1":"eafcb46fcb3096ba233114b4137425c472f65fc4","sha256":"5bcb8bb70d74bcab705dcf15b528a5e82789ee3f157570d5ab28a1eb2c8c2448","sha512":"dbb97bd2ed7082012b05e3c4f4ec0acc6c426eeb34e60f46ae578b29354b0673b0ecb73e7f49eb2b93046df80484531bbf8748e5085b1e7f3bddc8086157a99b","ssdeep":"96:+cI310QUqP8+2pIU9aOsPCCAfP7Ox8v34xyZ+wQfL02YOZzVC/:+H2QURyAqBzL02P0","tlshash":"cdd184e9b095f065a6b3243540bf145fb33f2959384dc4a4a325e8c9b8f85acc127f5e","size":6524,"data":"","first_seen":"2026-04-05T14:20:38.394134Z","last_seen":"2026-08-13T03:10:24.531817Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","size":17946,"data":"","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-08-13T20:01:16.507566Z","times_seen":1740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1db751a38623f1c70e3ea0c2937ae279","sha1":"26b8d1d3955376255326418f550ac7f3a7d727bf","sha256":"1ba427a88bed5a313487833fa1422552a5969388da7d580911e72dadb89818e7","sha512":"b75e59b9ad54a86c1955f10cd500dc207fff7c14e5c086c7d78771dc5dd56a6eaa20ae4bcb237f8d65cfcbae921c7974df3b0578321c5204978a1cefb33a5957","ssdeep":"","tlshash":"9ae0e55be889306a90736191435f41b874a8158bf240dd66786cd3826f558351299ebd","size":421,"data":"","first_seen":"2026-06-28T11:29:24.405522Z","last_seen":"2026-06-28T11:46:13.410046Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5d285b686c62b11f23f9c0ed0c72c03c","sha1":"6cbdbda87ee754560d6b964709462954fc69689d","sha256":"983b4a72483d903c1e17524887078e793b140c2c4aec602c56615e8048c0a933","sha512":"8a3ad912e471d57f03f02d74680ea75fac631f7133157f02118bef60e47c0d2ecbab8f1cbb0df565a0c0a2343dec154aa1cb80f47b8553952c85c321316e0b4d","ssdeep":"48:AybEhEqNuhnWwz+5m1IzGD2lUjvYiBfyrUqWwdvcWQFURCnWQOqYFAgw/fAPlsNZ:shhCS5DzG6QvD7q/WxScnxOql/fAMof8","tlshash":"1991dc23116b24b980ff62da9b8b5955b3651007f305cd283e5c8b951fc64f182f3be9","size":4287,"data":"","first_seen":"2026-06-28T11:29:24.40057Z","last_seen":"2026-06-28T11:46:13.411794Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/4864DrrLaLX_6ef6.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f67715646edb2c1b84189fe905e53fa2","sha1":"c5c30f2079c9d5c4123036cb01643e908c91f099","sha256":"b9b597858bf594178fd1568aa8fb558e961d6bd905696c69c26ae0403e773cf7","sha512":"ed6285c10eb5f07f3c8b3042cffded8b17d675d88472b55f6efd6761036ac9598a1bfb2a1eb44902db405b3bdb5972ad626071fe3a8bcbe8c1dfbc28857c1897","ssdeep":"","tlshash":"fef059922514ae1cc5785864c313842090cd50bb22f837b760bea3f6c4db3d6842aa82","size":597,"data":"","first_seen":"2026-06-28T11:29:24.37195Z","last_seen":"2026-06-28T11:46:13.371411Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afcb43875a908784f2d126e965fb8ca5","sha1":"fe3e4156d2e0163255bdae5f6290f6e103b17b4e","sha256":"ae9c172d30ff07c97ba65137e634fd701aba9641a13f9016d9579317210a4957","sha512":"d80b63f399350aee4d90ad49d85fef28b4db4210aa4d89701d072c372ae8f06a9b7cf3d6a29774435699934f8f2ec8007275d5bc16242f9c2fe394edb2547a0b","ssdeep":"","tlshash":"52c08c4ff989ba3709b2b2725caf3a04123f0386899004c003f15a8008f3829726bcae","size":166,"data":"","first_seen":"2026-05-27T10:50:55.539265Z","last_seen":"2026-08-13T03:10:24.552837Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/resources/service.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74a70a843f38991826ba307916332338","sha1":"0c727590b40032486adfe0fdfd533979effb9ddb","sha256":"5ddc16da61767d2cbaa596eb550b67b92ea1e441cba88e449308008beb56b152","sha512":"3c7f004a7018185a3fbfd3877b2eb9489f1fef2d71306abf1cf8e06f1b5e52d802b8f9770f10d5cc1dd616035aed9001d78e09ed17f9f531e656d28ae4904dca","ssdeep":"","tlshash":"4a51d7f53185f1f07f692490d17aa620b9392e73b81e4890a2fb4c462b2e40ea431d2c","size":2681,"data":"","first_seen":"2026-03-20T03:41:29.828569Z","last_seen":"2026-08-01T19:04:15.23996Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"470f787daa398aeb20000bf6b1f11bba","sha1":"4b2347c855c8870e3cd382469a9ec5ec277080f2","sha256":"e77bf3beb922f45a72e6893b60a28b6965d7149d0e065e8a72fb8cce9b0d89ca","sha512":"f1717907f934dfe45a14bec9a130f229742576d223f9cfcc3ed7e1f4d1c216f939e6a5cd858b1eabe69883a939496179ce50ed1025a3c3a3fdd6eff47f66c52d","ssdeep":"","tlshash":"3261f1999c8639f9a86f55dd8b8f906821f44103e304ee803cbce1558f96d4843aafdd","size":3409,"data":"","first_seen":"2026-06-28T11:29:24.397267Z","last_seen":"2026-06-28T11:46:13.415081Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/09ded7vWSg-Za210.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7c492a8a14d0b4d8d3e28618aa9920be","sha1":"8ccf19e41f13a54561fd698f2c7883310e693873","sha256":"a59d21e5eaf04caab10b2a37d5fb7bcae81291d913c32846c16fb87a6e1d06d1","sha512":"a48f3803189e6fe65a28dc5f817f4cb3795378c1fd3621319b80b4e0fe7ff54c25ffd4b32e66a9a5a586090e262e387715fb0c35d00f259145de641ea18708d6","ssdeep":"","tlshash":"f1b0112a0c0080ba202a0c80e2b0ea83aace80fa33230beac008cca2020a8c00880028","size":88,"data":"","first_seen":"2026-06-28T11:29:24.366409Z","last_seen":"2026-06-28T11:46:13.350468Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e04eb1c5dfcb21912c777d9dd2063b37","sha1":"a0771f3865e7d4968a04516a9f33d2710941867c","sha256":"1b4d8ba5a792d0cb3f36cb32d75ccfabd0103131c4429d392b54050413b4b5b6","sha512":"1e87b25ca854ad43920e31f257ae11a6c175438e3ade9c61a14ea832be657d876bd0e39f2f71bc1e978ed340e1df4139df6cfcd80a8d166d9ce23ea2e08d5f9e","ssdeep":"","tlshash":"d401b1bb652a307c456324ef131b93993b211053b783d9953e6dc3516f56c6043b57cc","size":797,"data":"","first_seen":"2026-06-28T11:29:24.404643Z","last_seen":"2026-06-28T11:46:13.416782Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/9069OmBF9z9p33cd.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ed8904f4b55e9e3442ff29a30c29e8b","sha1":"b09fe7c03bc3197d2c3fb8ebfa56f901aac22652","sha256":"bb5d59753026f0e870950ddda8b3a9411f2318cded2e4051571f61a2cfdab29b","sha512":"e87f1acbb66dc27b09b20805eea3e75e627da1a17a9cce03b837ed47bce47ec0765ab1597d68a5aacc4d09dacdae0f21c381c73f5113d0cf577123c08d1dfcbf","ssdeep":"","tlshash":"b0f0dd01d25df2b9751608c1c12fa10ab82586f4d739054091f93932a87a08b945ba9d","size":621,"data":"","first_seen":"2026-06-28T11:29:24.382306Z","last_seen":"2026-06-28T11:46:13.374871Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/c785D2jzM2j5b2f0.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3dd23c58ac9ea42914b0b7077a1d35e1","sha1":"17895d41dff85824fbb7b5483fc1d76428891311","sha256":"ad4877cfa51242c7fd4d28e9c4eb3845735e62f5133d619585ca80977bb62ebf","sha512":"f1d8805d2d6a44c66adae7bf5868154df5b8d122b2c059cfcf9b9dba76e783e35bca7b8a2215662ff8813685ea5ac7288237da5f3e87bd2ae332e95a12f1fa1e","ssdeep":"1536:eHIv5jklA2hZ1FQUrwIe7udTvjKA6J6Ggaqt7SvlMct4U1:eoBhOwIXdT8J68qpS9X","tlshash":"49d309ec3992f6616ab712a710ef1807733c1a1b280c4960a615fd9e75f801ab17bfdd","size":134389,"data":"","first_seen":"2026-06-28T11:29:24.364988Z","last_seen":"2026-06-28T11:46:13.359667Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/d855tFrG7BAC9ec0.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b9e9e05b1b64aa525f8df6eda479fa25","sha1":"4db681f86021a5adc06ac72f894cdd30fd6ffed5","sha256":"d401d962832f97f35011e5831ac4f0234e24fff273ba0c73f8af384ddaa5ce68","sha512":"b5ff00ceed4cbdc0db8c0e615dcb90d821101ce02b2dbc6c1f00014c3974e44ff00836151d8d3e9573f5c749c26b9be13b5b735dba6bd13900705769aa44b1ae","ssdeep":"","tlshash":"06c0128e69b4e17192451cf5803599029b29162c92797e90569d85712a624c6051a936","size":189,"data":"","first_seen":"2026-06-28T11:29:24.377136Z","last_seen":"2026-06-28T11:46:13.382373Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"52140185cb3a2baa21f16d44d66336be","sha1":"625a9e60f4d97da87db07a0101af8702ad806484","sha256":"1fc44a1c67a0c895b4d1a984c04b48d1e61f122bd6e716bca2c954433a6034e6","sha512":"7dd88589c1508e904a070f6658b7c1cb86557ea9808118359b0a4a89577e5c6555574870572c4a91ce2c88d8dcf8aa4980656e11a56677338ced3e5682c54590","ssdeep":"","tlshash":"c471c87912111fb33ddda0a8dd256ec3dda9183484da887e384e5cf30628d4381bebb9","size":3588,"data":"","first_seen":"2026-06-28T11:29:24.406281Z","last_seen":"2026-06-28T11:46:13.418399Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"75826859ed99f27cb2bcc86d398d640c","sha1":"9bc17d31c13aa17b4bda29c5a811679c1dc8a716","sha256":"5938cec3095efd42f41cf6bdae3a478eae7fdac6b6cdf65081bda015d0986f4e","sha512":"d0e166b08caffba816748ee1ac8b12bca20047819181a885579ef22a5d51ea68b4c8dc3e50573b5668f8ec9b295eeca6ffda8e070a7667bcb36708f61fe2dd84","ssdeep":"","tlshash":"b0014906b035316f50f75573220f12063b3510a231a5aea23bbc63560fb753819d2eee","size":689,"data":"","first_seen":"2026-06-28T11:29:24.401494Z","last_seen":"2026-06-28T11:46:13.420094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af9c042f1ec0195aa079ec84b0f71082","sha1":"84265227a3179a6b552d1f9e0a7136c0c4406871","sha256":"e92a4c6ebe5a58878d65f1e197b7caaf43567a09b20d39cfae76caa5528133e4","sha512":"3682c36b3f70b321bc3ea53ca2fede574cea138094269503cefd0186e77c9204e16686a56f20b8194e872b0ee254713d88419620145b4c7279f25a683c93f809","ssdeep":"","tlshash":"7a418b1d5cd716f868fbb1390b9f004126a181933708ee44bcade7d08fa5a6556e6bcc","size":2427,"data":"","first_seen":"2026-06-28T11:29:24.403096Z","last_seen":"2026-06-28T11:46:13.421477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/0ebdBKojdPY9bbbf.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0495df8e6cae23d0e71760b7279d608f","sha1":"8adb9d0a7a6da1a596ce98d74a9ace84b75b3e5e","sha256":"fd01d4ad7a65d7f03fa8d3644e6b6e502381ef877488f79d29ca0d7d658b0e15","sha512":"40949cc83a3d98c89b61b78afc322afee57b4ed4b797f9997b38d506998628352e503a4ee19697bd750a744f7237071b37317d225bf8312e7377d5b586ddb163","ssdeep":"","tlshash":"fb0120d0648aa43277b78c62c42b9447b03e3158b5dd8fc0f3c6d1a0246a1d18113a13","size":745,"data":"","first_seen":"2026-06-28T11:29:24.376168Z","last_seen":"2026-06-28T11:46:13.367937Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4fa97686e3db492e3125910a90c13147","sha1":"1a22657ec3462af2643e2a48d407617c433baa05","sha256":"1d90a759428685ee7db1312d868bb128190a6274c75d8c0b16b151041bd26cab","sha512":"511b439b8beab88b971857970932d1e903bd3abdf31a347ef61d07e2fb0dfde2e642c739aa9c449db88f3180494e1a1cdb74ebe84628be386c7ac71d788f77db","ssdeep":"","tlshash":"5d216a9e3152213740e361de2bab6150723b80577346cab87c7d87096f9494ac1a16fd","size":1190,"data":"","first_seen":"2026-06-28T11:29:24.39802Z","last_seen":"2026-06-28T11:46:13.423035Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"297fff928d15100cc4e5f6970e809f17","sha1":"f1127c15892b5e86452321eeb603c2e22a2ea235","sha256":"77efa7fbd564452ba68706e899d46c9cea8f68d4ad997646a6464a7e2ea24e62","sha512":"00b350d5c9ecbb8533d162834042e88b616aff49c442224c9584032df39fc1eda096fc2f8986aa1f0234aae70a4b7f3e8addfe8411c26f458ef27269ab80cfd4","ssdeep":"","tlshash":"c901dc87307a306f61fb0672460b028a3b3600a7371ac9313fec57820f869380ba1ecc","size":845,"data":"","first_seen":"2026-06-28T11:29:24.399791Z","last_seen":"2026-06-28T11:46:13.424686Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ohacasinos-ca.com/","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T11:45:46.968Z","timestamp":1782647146968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdAI7tlpvDZ5LldKRiED2yoqB7sBjM3PlhpFNTjAp34WhGIh4pIEAgi3lXp6Aj8%2FktqiFrSQUC3f9Gst4Wz2Vs1l8vXyC%2FHSDcjK9uTApvpzpnKA0%2FUWY3hLHPoWFxehfp6%2FyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c727cba305694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188238,"size_decoded":34545,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65516), with no line terminators","md5":"6633c326dc56ea79df5e7620b755144a","sha1":"8fff67a692073bd97f8f770defe2c262322390da","sha256":"203e8d87888a1ca9ba72fd824b1456c9397dd49f3541539564dac28f15ee723b","sha512":"771b1701f8f46ab084b3754dc0eed896c381c8f1b0e08e7289c72579a4127620fc53b66e5ca320f819df9181e1e4a4beaa714cde61f36b2763ae3fabf8f07d5c","ssdeep":"1536:Hbv9s944aaOgqI44BNVzuVQItu3G8/6r56fDSC2yNBJ2sJJJHz1nw:Hbv9s9qa3G1UrSpyNX2s71Bw","tlshash":"ba043bb122081e53da979345ebe0a3da20b9419cb8f154549cfc81cf5fe6cba943d3b6","first_seen":"2026-06-28T11:29:24.3794Z","last_seen":"2026-06-28T11:46:13.345161Z","times_seen":2,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":9,"connect":15,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/ad376i4pPih0bf56.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.541Z","timestamp":1782647147541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/ad376i4pPih0bf56.js HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZp7emAE1f2LhEfDNes1I3m8ZPVoyKRcKwvOfF1tkeiIIqMT1tyfKQ%2BXaslW4MVxHN5JlNymUqH%2F0ypEsRmqqkBlRrCc7XgfYAC4u2JZTT%2BfQTFHeGxq%2BKCgg1eN2PFwVqZekQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"e951f8b751751d7d7def6bb45855db0e\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c72802a555694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446,"size_decoded":1134,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"f0b3a5c77ea32138be230b96d8d41cc2","sha1":"cc238d999401a84abd525e0000813b2460163138","sha256":"c496c616d0a2cacf0512f82a42442d8bddcace2bea9cb751c169696f871c105c","sha512":"80d659b7e225b2662430c93fdd9c9efcd6a545603b95e61aeb997ab6d806629cab2616d01c7427b5b6407df35d4c12ac1711ac6d96eafe91d879753b4b4cd0ea","ssdeep":"","tlshash":"e1f0dc8ad16ae5f9357218d2d22f1046762501b48b90049852ea0e232a7e187e02bfc9","first_seen":"2026-06-28T11:29:24.371095Z","last_seen":"2026-06-28T11:46:13.348395Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/09ded7vWSg-Za210.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.722Z","timestamp":1782647147722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/09ded7vWSg-Za210.js HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/widgetsdd1aa1bd/9069OmBF9z9p33cd.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qllMRaAyW7xamJbAf3nJ4nzeimG4fP7J%2FqWkSd064Nuikkn%2Fq04vxT3NzzKtv8nj%2FbohHLdF84p09gPcDsy5d%2B5e5Vs6vE9CY4lkITHn%2Bb7z4Qzf10mm%2BoeXUkxda7Kd1J5faw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"fbc0fee4802fa47ea4c5ef88d2a2f9d2\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c72814a605694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88,"size_decoded":921,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"7c492a8a14d0b4d8d3e28618aa9920be","sha1":"8ccf19e41f13a54561fd698f2c7883310e693873","sha256":"a59d21e5eaf04caab10b2a37d5fb7bcae81291d913c32846c16fb87a6e1d06d1","sha512":"a48f3803189e6fe65a28dc5f817f4cb3795378c1fd3621319b80b4e0fe7ff54c25ffd4b32e66a9a5a586090e262e387715fb0c35d00f259145de641ea18708d6","ssdeep":"","tlshash":"f1b0112a0c0080ba202a0c80e2b0ea83aace80fa33230beac008cca2020a8c00880028","first_seen":"2026-06-28T11:29:24.366409Z","last_seen":"2026-06-28T11:46:13.350468Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/d855yBjzXJbu9ec0.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.723Z","timestamp":1782647147723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/d855yBjzXJbu9ec0.js HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/widgetsdd1aa1bd/9069OmBF9z9p33cd.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UqD2u5AaBzf6CJOZqwb5CXZjwYECbs8904g78MDA3U31kOVNkFh5%2BLexWt%2FhaqatzLL7bcpCdvXVMQRD0eM%2Bw6PevbYrel33aJ3N3EVnkYYjogNd6S10ocRYsfvXH5knyjGZbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"bb29858d851bec00a3ccd2bedb2aed12\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c72814a615694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6524,"size_decoded":3454,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6524), with no line terminators","md5":"64b4a36c51298cd88da2d91583742e0f","sha1":"eafcb46fcb3096ba233114b4137425c472f65fc4","sha256":"5bcb8bb70d74bcab705dcf15b528a5e82789ee3f157570d5ab28a1eb2c8c2448","sha512":"dbb97bd2ed7082012b05e3c4f4ec0acc6c426eeb34e60f46ae578b29354b0673b0ecb73e7f49eb2b93046df80484531bbf8748e5085b1e7f3bddc8086157a99b","ssdeep":"96:+cI310QUqP8+2pIU9aOsPCCAfP7Ox8v34xyZ+wQfL02YOZzVC/:+H2QURyAqBzL02P0","tlshash":"cdd184e9b095f065a6b3243540bf145fb33f2959384dc4a4a325e8c9b8f85acc127f5e","first_seen":"2026-04-05T14:20:38.394134Z","last_seen":"2026-08-13T03:10:24.531817Z","times_seen":273,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.735Z","timestamp":1782647147735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /embla-carousel@8.6.0/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a12c72815d1c0b69-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 1195888\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 28 Jun 2027 11:45:47 GMT\r\nlast-modified: Sat, 13 Jun 2026 06:22:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8Ftdv+N9ebY2udt0rQTtXpm0vONp14Gw+ziwsqxhnmY=:\r\nfly-request-id: 01KT7PEE0A306ZCQBP80AW190F-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":17946,"size_decoded":8036,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17945)","md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-08-13T20:01:16.507566Z","times_seen":1740,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/apple-touch-icon.png","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.982Z","timestamp":1782647147982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2F4%2FF7VLdDz%2F%2BZkVjBSq291kKUcE8Y1DZrIpnwAoKlFmmL6u1%2Bj89FE%2Fcxw3M9homDcQGRuz7rLDilXqSBPSf8VTvnWHk%2BG52id%2FEQo1cAfBLH5SoSFbr1UujOsWYu1ltMbGPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"09f2c8ff7da783ceba8ed30a44a570ad\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Sun, 28 Jun 2026 11:45:48 GMT\r\ncontent-length: 23304\r\ncf-ray: a12c7282ea715694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23304,"size_decoded":24134,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"9f0a792f8249520ed955ad44672ee212","sha1":"8cddc21483dcfacd7041872eed79704e480c2e83","sha256":"ea4b641799fd05a03e5a86ef2015f6f3daee10b89dc2be057aa727e9f8c57f6c","sha512":"b16aa0713ecffccf57f37b64fdd8b3bfd384db6b9e74d9df22aa9c8be386f4dc870a50da0a3c2832fed41bf4981188f52e8dd9968947a1127441028e1f1ccc20","ssdeep":"384:paPEl4p6/e4U9dW16pmBMwuMCT6l7wbgx/TMe0KMA+LGWPAsEQhr:oESp8eL91m+4CT62aTM0WGWIsEUr","tlshash":"7da2e0f3da43b901ec74f40c085498906ef9996499c2fab6789fa07b5f3906ec704e02","first_seen":"2026-06-28T11:29:24.372863Z","last_seen":"2026-06-28T11:46:13.354946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/resources/m","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.995Z","timestamp":1782647147995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"POST /resources/m HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://ohacasinos-ca.com/\r\nContent-Length: 262\r\nOrigin: https://ohacasinos-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvflgp%2BSLHqKNA8rJ3tQge%2FNSWvKp12t2NfR0kYmnVrbvyjdHOOzMwRi%2FaCyG4JnTpZAuABMQBCWAyObCRJegnU9BIcH2PoGF0C9YnSjb6elkSaM8x8JzAIDJTDq%2FPuTubfAYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 11:45:48 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nx-dns-prefetch-control: on\r\ncf-ray: a12c7282fa735694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":1445,"mime_type":"application/json","magic":"JSON text data","md5":"390f687124f687b9631687ec8b043c11","sha1":"16447d9f0136a5d1b00ef34e16a7172c52311e5a","sha256":"01dfc966b4d4c2b044e9b7de0eeddbc5edc77e996174e89eb00e25ca3cbda1af","sha512":"4db0e43473dbb87bd4e1bcaaf0f1d4db1863170307e82a1b243b1c29567f357286eed2f92229ceeaad6db9e234ecace6ce6d069bb5b322a68440c0a3732f28ba","ssdeep":"","tlshash":"e4e0a31218960d5d2124ab845ca463c5470475e379d1d5e215d67c90db7d9cd551e068","first_seen":"2026-06-28T11:46:13.356579Z","last_seen":"2026-06-28T11:46:13.356579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/ohacasino-banner.BPTNzDwT_Y67vX.webp","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.515Z","timestamp":1782647147515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/ohacasino-banner.BPTNzDwT_Y67vX.webp HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3dnrKjxBD88W4fnVDaweYE%2BRoYdtrQNRWbL1GeUH5FW0Fxhu1e%2BHq0RH0cBh%2BgMCWrIidK1HMxIvwY5N4lKtoc0VvMeOpM9JCRpIntYfdsBlI4iw2g4TAwmfP1Ruogj1PUh%2BEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"afd5b8c52b1ae8fbde33f393d584acfa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncontent-length: 51308\r\ncf-ray: a12c727ffa525694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51308,"size_decoded":52126,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x428, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"305b5a0718f3a86c87db0b038edab171","sha1":"65dcbde04096ff599a7891ab407bec7d92e2c792","sha256":"09963de9811526c7ff209bee6ddd58df7084bab9ccfc1e9a0384b213b5400627","sha512":"c861abcda9d721056a988927f6e7abcba8b3afbef751079022b52b4af040b16bcb0416034a97da15df4cf2f7daf5d9b5902a520e52c53cc31c8937bff5fb2861","ssdeep":"768:kP6leBPnFTId/rrow2sJWsQino++T62olEMRxi+Gpj551W6D4fsTTy6vCmcCOGAO:heFed/HdJsEo7G5Cjpjnb4Ce8DDOGAO","tlshash":"aa33f23da1c7b7858498e44023746476786075b30b69e82890899aff9d6c1dacc4fb77","first_seen":"2026-06-28T11:29:24.363873Z","last_seen":"2026-06-28T11:46:13.358381Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/c785D2jzM2j5b2f0.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.537Z","timestamp":1782647147537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/c785D2jzM2j5b2f0.js HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrRllriRgW6%2FMHOhYlEFo6v575SArlOuTqqrqJtxq925fu7AmNAlhDZdqcpwdqSzEXVb%2BW4Aq3REIInyU74TJx%2BiUUa%2BBzyXPDqmGeZWdTuhRkVfMxfWiYBdTdRZNXnzvyAEEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"1fd103bbf82826d84abc5fefb5fa8556\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c72801a545694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134389,"size_decoded":45165,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3dd23c58ac9ea42914b0b7077a1d35e1","sha1":"17895d41dff85824fbb7b5483fc1d76428891311","sha256":"ad4877cfa51242c7fd4d28e9c4eb3845735e62f5133d619585ca80977bb62ebf","sha512":"f1d8805d2d6a44c66adae7bf5868154df5b8d122b2c059cfcf9b9dba76e783e35bca7b8a2215662ff8813685ea5ac7288237da5f3e87bd2ae332e95a12f1fa1e","ssdeep":"1536:eHIv5jklA2hZ1FQUrwIe7udTvjKA6J6Ggaqt7SvlMct4U1:eoBhOwIXdT8J68qpS9X","tlshash":"49d309ec3992f6616ab712a710ef1807733c1a1b280c4960a615fd9e75f801ab17bfdd","first_seen":"2026-06-28T11:29:24.364988Z","last_seen":"2026-06-28T11:46:13.359667Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/2ec3BzVCe0qQadf8.css","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.299Z","timestamp":1782647147299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/2ec3BzVCe0qQadf8.css HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2FZVf0ONzWfVrkiuh36WOYLhUkIwhNuGAIfxXNL3sRacAfec1OIMEDoBNwiOVefsJkOQw2QDnvmRKQjk%2Bbt12oXIZQWbTul%2BlnCOGmLiB7XfNB%2FKZE0IUGEtjsw%2Bb3EtfeUuCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"468ac7058898927b8ea0bd420866cfb6\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c727eaa3d5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95940,"size_decoded":16718,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"fc1b7189e7622b4908987b80113e3588","sha1":"37a623ea4544a0fa7f8d3ef9f1b726fae1120836","sha256":"2b16bff75779684e70bd428573ac83ea9f780124000d312604b8b37733f37191","sha512":"5b4c6a1e1cea843ddb7716cf5b14e9ff2c175259327b094e298d1a64101b16f2eed9ee4687b76419e95d2d318749e9a4b3fda1154b98a15e20b8003cd185605c","ssdeep":"1536:PGWZsJncTZZ55hBRBIXLZfBrxnZ6Ivwicucx9Qucbia2sndCUbx/RDxvxiZLX3j8:wl","tlshash":"d693a82eaa14203d702785616ef07bd4210c8429d4551bfde367fb3989cb1fa1bafb49","first_seen":"2026-06-28T11:29:24.370074Z","last_seen":"2026-06-28T11:46:13.360953Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/resources/service.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.493Z","timestamp":1782647147493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /resources/service.js HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBNc16MUcfEn%2F4sNGcpP345g%2BZ361HrN6wkVboYt918FnXq12ZUZQBVOnp09nZIFvdc6NqbrE9GM6mabBc3HXNiX%2BO%2B6LLCll4AdawRLsS8FHyVL%2B6cpuUTjVobwuHRSz7n0MQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nage: 1013\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\netag: W/\"a80-19e3a226c38\"\r\nlast-modified: Mon, 18 May 2026 08:09:55 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nx-dns-prefetch-control: on\r\ncontent-encoding: br\r\ncf-ray: a12c727fda4e5694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2681,"size_decoded":2451,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2680)","md5":"74a70a843f38991826ba307916332338","sha1":"0c727590b40032486adfe0fdfd533979effb9ddb","sha256":"5ddc16da61767d2cbaa596eb550b67b92ea1e441cba88e449308008beb56b152","sha512":"3c7f004a7018185a3fbfd3877b2eb9489f1fef2d71306abf1cf8e06f1b5e52d802b8f9770f10d5cc1dd616035aed9001d78e09ed17f9f531e656d28ae4904dca","ssdeep":"","tlshash":"4a51d7f53185f1f07f692490d17aa620b9392e73b81e4890a2fb4c462b2e40ea431d2c","first_seen":"2026-03-20T03:41:29.828569Z","last_seen":"2026-08-01T19:04:15.23996Z","times_seen":31,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/Ohacasino-Logo.BH4TIX0q_F90VC.svg","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.512Z","timestamp":1782647147512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/Ohacasino-Logo.BH4TIX0q_F90VC.svg HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2BWB7rqL8nLj4Kbbjlb9mY8HbaWju90X1zobdRnxw4VHtAo9krI01No60oG%2BCcu64l8c5GRHFz%2F98VwHbDpL8FpwVHgOwNijabEMNuFcGKG8vvhuGxNIdUqqY0z%2FglXoXATrmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"06ecb247c580c6eab0793251d5f2034b\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c727ffa4f5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22000,"size_decoded":9156,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0aaad2ceca2a5ad0265ef07655a1890c","sha1":"2a9d2b20b46575e1ba058361c1e6dd2d478b802e","sha256":"ad7af4269168eb4e8fdf3d643eae0b1ab0588271a913907a380c0df67454076b","sha512":"aa98965d2dc67d573ed090d6653b30d84b1416f1fff8da30177d373bf495c2a3ab977bd2767ae8759c73fc5a220fd8d65a89aa12d4b6a7698ccdade9ea79936a","ssdeep":"384:btPO4KZdUQoUzho6UtrMOEUvpsixFRG8OKbi8GzD:JhKZdU/3bSBUBsQFU188","tlshash":"32a2dae4abb8f0f4d8c74bbddf3c99d9312f25ed35228588427c6f446583a5e960c892","first_seen":"2026-06-28T11:29:24.381471Z","last_seen":"2026-06-28T11:46:13.363377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/aa04ba5589e181f8.woff2","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.634Z","timestamp":1782647147634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/aa04ba5589e181f8.woff2 HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://ohacasinos-ca.com/widgetsdd1aa1bd/2ec3LvDu9FPFadf8.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F1xVSHDO5yRzj23PSf%2Bc9UL0oqo4O2yRDnVSYISPtktpz1mHDUWevSGnZ6DrbzlIF%2BjK06TX2YpD%2FfmSJd%2BBKlj62Jz3w6l7T2ysrsimJhgTRVdusbvU%2BU2KCT%2BgTiaOYSOqkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0b0ea652bc912ec977d52482e719c42d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncontent-length: 348088\r\ncf-ray: a12c7280ba5a5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348088,"size_decoded":348914,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 348088, version 773.256","md5":"79a46502cda65b51e0c553c81e760112","sha1":"6662185ac0ea5c490c0f371bbaf79a2bed81af2c","sha256":"6b019a061b423a7b074ed8ca11e7795c9475aefd375c84e0841384718d52c613","sha512":"ff49ae738829abc122f7708dd178bb8577992c3335fd3fc71054ad84da2a731bace7cc45df6c729d7e6dbde8cc8f5eaf06fe68fabf8ac9c8f521d85658f0c77a","ssdeep":"6144:pVNYs7DLmquzbfi320EOLq9ao/sJWZMO9uRNiWk8ElwEaY87:pVBLmquze2BZQc+O9uRxjEljb87","tlshash":"147423c4bbf446546f67718df63f7a39a4626c2ed7c2f8a0561d90e1532b0ca1423ed8","first_seen":"2024-04-15T15:03:16Z","last_seen":"2026-08-13T12:48:22.435337Z","times_seen":365,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/oha-casino-logo%20(1).BLc_8hqF_RFHdU.webp","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.717Z","timestamp":1782647147717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/oha-casino-logo%20(1).BLc_8hqF_RFHdU.webp HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9CwVcFXJuGgmqeR%2BDYaUvXYaj5pdOT6Wj6vlyEJPm15m5JJEiLwMlXwq%2BJqdSaLMWGdfu7BRLj1GBMLVmaZABGz4Tpsd8Zgu3YCQbRRiAF0w1%2BfZTemjMPEgkwmtNdjs249Qng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e05aa137722aa6a8ea57b0bc5bde100e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncontent-length: 13834\r\ncf-ray: a12c72813a5b5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13834,"size_decoded":14650,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"30f56932a6d894b34c667a2d50c49ca7","sha1":"5bf2c1c084c16f3ecf0a8b20d950b474027cd360","sha256":"25f39f656a10e75625d3b641bd97ce0c691eebb26e9dbdcc798ed38ad093680c","sha512":"b12ffd1c81bda2045b5852805f3e0567782520277cb53290a8adaa38e88851a95b9a2a6563bd58d2f941b7c62fed9b0640899c73f885a0e775118e0100dfe3e6","ssdeep":"384:TLotqV77ghwVg0mE3mUU00BzKWjDIPGAe65qnLtH6/yk:HP7YwVgCmHVPAe6cLgy","tlshash":"99527b9e9f2555bfff30613e3126eb14ca5f28c8bb9aece5a6c4060f30950618e14d5e","first_seen":"2026-06-28T11:29:24.383154Z","last_seen":"2026-06-28T11:46:13.366395Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/0ebdBKojdPY9bbbf.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.720Z","timestamp":1782647147720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/0ebdBKojdPY9bbbf.js HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/widgetsdd1aa1bd/9069OmBF9z9p33cd.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2O1QVQeSVUD6EeEG3%2BEvli1uqMl%2FLiXFQ4tF4v%2FBn0JuCQfJwJBRI5DvbA%2BPEwNYkENs63zQkhJ%2Fx%2BqsDCHO%2FClZ0ef2ooZkMo27y8BrTJmRE%2B7q%2FiB%2FJ8iRMoZ5BkedL3TSmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c714c3281f28b66afbc8da12acb9a835\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c72814a5e5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":745,"size_decoded":1324,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (745), with no line terminators","md5":"0495df8e6cae23d0e71760b7279d608f","sha1":"8adb9d0a7a6da1a596ce98d74a9ace84b75b3e5e","sha256":"fd01d4ad7a65d7f03fa8d3644e6b6e502381ef877488f79d29ca0d7d658b0e15","sha512":"40949cc83a3d98c89b61b78afc322afee57b4ed4b797f9997b38d506998628352e503a4ee19697bd750a744f7237071b37317d225bf8312e7377d5b586ddb163","ssdeep":"","tlshash":"fb0120d0648aa43277b78c62c42b9447b03e3158b5dd8fc0f3c6d1a0246a1d18113a13","first_seen":"2026-06-28T11:29:24.376168Z","last_seen":"2026-06-28T11:46:13.367937Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/c490uRVVAWWY2f30.css","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.297Z","timestamp":1782647147297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/c490uRVVAWWY2f30.css HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQ9hvbENJOPBRZehD%2BwMKoRDSSYYb1JiXfQHlfowof4OewN85S3tBI4nees6I7sUm4rm71V3nTpf0M5MOGbbftXrLoQJQlG3tFaG3BR5%2Fj2yt1DeiQqlnT5Wklo%2FMXu5dGUEnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"3e3d8643b42b7bfef63cdc8c0203a9ab\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c727eaa3e5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7239,"size_decoded":2646,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (7058)","md5":"e40a11f0995a6b81091e3267e0488e21","sha1":"3a86bb792968f978bd889273b9d5edcc956df966","sha256":"1bdfc2a7baed036e8f3ad618f449a8a239a08d9abe8694e95b38295be3af1343","sha512":"232aa598f83032d051fb83acf1782550f173f9a11e2596dfcf64b8fb48adfa793e6605c62b197d2c4ad0966fe2fad83c254ea053222cfb920f5cfc69425ee059","ssdeep":"96:TPLjgC7jg528fzDAKSMCIxMCI6aIwUMQITIMCIWICaM2IFIoYVY2S:TP4CQ1fz7SMVMWMiMTMRQBS","tlshash":"19e11ed9910061798e97962316cd192ce838afe58d235d2df523094d9ce6bf833b373a","first_seen":"2026-06-28T11:29:24.368158Z","last_seen":"2026-08-03T14:29:29.238714Z","times_seen":40,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/4864DrrLaLX_6ef6.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.726Z","timestamp":1782647147726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/4864DrrLaLX_6ef6.js HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/widgetsdd1aa1bd/ad376i4pPih0bf56.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikjSiWwVDUjTPcV07XM9KAznBqjBRml9dnLmifjTmn1Z9GXl6%2BsIU6oLAbI7Zgz3mcFF42%2FnVZu9WEFeJttc5o1hnH%2FJ%2Bun46kPlAX%2FuVyBtlLlr5Kfgpu%2Ba8et%2BQhTgwhcrcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8422ff646119bd08fd5732ac5b8121eb\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c72815a625694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":597,"size_decoded":1188,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (597), with no line terminators","md5":"f67715646edb2c1b84189fe905e53fa2","sha1":"c5c30f2079c9d5c4123036cb01643e908c91f099","sha256":"b9b597858bf594178fd1568aa8fb558e961d6bd905696c69c26ae0403e773cf7","sha512":"ed6285c10eb5f07f3c8b3042cffded8b17d675d88472b55f6efd6761036ac9598a1bfb2a1eb44902db405b3bdb5972ad626071fe3a8bcbe8c1dfbc28857c1897","ssdeep":"","tlshash":"fef059922514ae1cc5785864c313842090cd50bb22f837b760bea3f6c4db3d6842aa82","first_seen":"2026-06-28T11:29:24.37195Z","last_seen":"2026-06-28T11:46:13.371411Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/favicon.svg","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.984Z","timestamp":1782647147984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5oxDG8bjZeDSAW%2FpmI8Wao43ikCfyCYzQ7ykkd796horV4rMLxJ8LkqVQYXVNmTSjwrWYUjFXWY3tHO7Bey3BihP%2FdemBdUqOfEW5PLmlR%2Fpt%2Fvnrfo%2BK%2Fjaf5esYPp7tvMNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"d10154edbb2dba9a7299b23aa8b0cdfe\"\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:48 GMT\r\ncf-ray: a12c7282ea725694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41249,"size_decoded":14279,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02dac919342373a4b0b70503469ff0e6","sha1":"172d6d6193d93d3f0686a6c731142d550f27be1b","sha256":"1fbac623846bc87d8d4811f60782447a9c01939f99d0d739ad7fd5a7a3d582ee","sha512":"d1f2b6123ff417fc7c37ff36d59d38fce4a6840fed8366f6706abf703c8b1eb46ec1ae4036b1638860cdce1bc98e3ecab4897d86d5a2b2762583727e3ab23aed","ssdeep":"768:RltliD2UyeGr/IWKCBELjsA8A2CRnp1L1:zHoDCif4A2Ch1","tlshash":"060332e15664b7a45d43c3d4ce7a91e23b0fa4fdcb4e12e861b2d370711abcae541e28","first_seen":"2026-06-28T11:29:24.378554Z","last_seen":"2026-06-28T11:46:13.373162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/9069OmBF9z9p33cd.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.533Z","timestamp":1782647147533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/9069OmBF9z9p33cd.js HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HqiTiNZlr%2B4AYlT%2BI0BZiKF5Dxh12RCVQ37Sk%2FHnWQCG4SYULs3GmwIsTyDqa2LkelEQad2EPHNxnfV7Y2ujqsgR8tLk79Co20yMTkJZJhZOsmo8JvsW8k6MKITjDUzoQjkKpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"f04e41bf2b1ccfb3d515ae62174c30b2\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c72801a535694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621,"size_decoded":1198,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (621), with no line terminators","md5":"7ed8904f4b55e9e3442ff29a30c29e8b","sha1":"b09fe7c03bc3197d2c3fb8ebfa56f901aac22652","sha256":"bb5d59753026f0e870950ddda8b3a9411f2318cded2e4051571f61a2cfdab29b","sha512":"e87f1acbb66dc27b09b20805eea3e75e627da1a17a9cce03b837ed47bce47ec0765ab1597d68a5aacc4d09dacdae0f21c381c73f5113d0cf577123c08d1dfcbf","ssdeep":"","tlshash":"b0f0dd01d25df2b9751608c1c12fa10ab82586f4d739054091f93932a87a08b945ba9d","first_seen":"2026-06-28T11:29:24.382306Z","last_seen":"2026-06-28T11:46:13.374871Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/2ec3BX3v8OHnadf8.css","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.300Z","timestamp":1782647147300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/2ec3BX3v8OHnadf8.css HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=txLuVbu8%2BQ46RSxo20erWtdqHGuvUDyycpZRslAcsqogmtHW90lLcoQFxHw%2F7BtAgggeX7uSpeMthk0t%2FFJ5i5eYb4w%2BZbmJk4jh1EQ%2BNkuGRfD3mAcxtj%2FbQxzzkNfIJAx9qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"944c278d615afa536c8e124be49268d5\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c727eaa3c5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17005,"size_decoded":4323,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17004)","md5":"75e7dc4e078a6552b360f3f919e49994","sha1":"d32e1e5853afcee3cd00349068c2d8fe56aeb69d","sha256":"e1fde43a21f558898d51e2529c57a7681677efe564867930bb507b2e6e7ba3a7","sha512":"632991def1a452c7330bdb7e744913e98ddce36b93d06681fd45bc40c089150b91b91eeb11b03c7c0a012f5a7243df53d354fc1fdc561fd491119c4a836be256","ssdeep":"192:lwW306vBomy5PuL4ZSw+eW7gozk2s82sayfIyfektMfwMfw9rZcxcVGWWGW5ESEl:lVk6vBomqPuL4wSKqygymkyDX+f","tlshash":"5672b6f9bb4d546ca417cf66af376968832ff1b872c94348896fd730d183286e613950","first_seen":"2026-06-28T11:29:24.384059Z","last_seen":"2026-06-28T11:46:13.376643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/2ec3LvDu9FPFadf8.css","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.302Z","timestamp":1782647147302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/2ec3LvDu9FPFadf8.css HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTxKLENQj%2F6m0frelEL2TtgwFjN36dsbUa%2Fi7AVVDqCPIwGhrYYce5Pxz8FEVUI4w7BklmJMm3eHWSNZuSG%2BEV4KnuglTG9y3K7D6qB1oQNKIJ9Qv8BePMW9%2FGEDn%2BryyJcAuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8b6cd47b601ac2e45a871680f41aa2aa\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c727eaa3f5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31221,"size_decoded":8495,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (31216)","md5":"0725daa00f025727f780614f21591915","sha1":"13050ffd448e2b87897471cba19992aa2d5cca45","sha256":"c04aa705301be572ccae5e85803a4bab54de9105023ea1380b28cb73adc2ede3","sha512":"dbe66a166fd1514477af2000820ee8cdb8fdf4f34f3a6a5b78906cfcdfe76307cd2e8dd149751fd559470f42a31652524a53da5afd02db2528ee4bbf5e782bed","ssdeep":"384:4jzKFU61jRN5Ig+utO04TQcS3891HJj70lAQfr:4fjurcR1HJj70lAQfr","tlshash":"3de2a865aa5c112e3423c5506ef0a7dc5228c42ad8155efde213f736c98f19a1fbbf0a","first_seen":"2026-06-28T11:29:24.385209Z","last_seen":"2026-06-28T11:46:13.378252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/fonts/dfb6a68512729493.woff2","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.306Z","timestamp":1782647147306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/fonts/dfb6a68512729493.woff2 HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Frnegiqk8O%2B2UE5FHVJNNj9YqQZ%2FbvEAbmBGtyMttijBPllrlDB5c8ujppLPPt8Tmpz5lNVuaT37y7I97W3OgmQ8c7SA9POJfy9Q%2FUXTX5s%2B4eSWSFWJbudrgupCDcxGd%2BKX9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0e939d2575290da316a6161d5b5fca4f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncontent-length: 25736\r\ncf-ray: a12c727eaa405694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25736,"size_decoded":26561,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25736, version 1.0","md5":"de33d0fcda8233ae4b12ca512d5ee7f6","sha1":"9b42e33151e9fd4fd9e95da0619473b9c09849d6","sha256":"6636ccdf94baded35f99802dcae7b84e082bea93711a59dd2900551b9af9cb51","sha512":"73360958724b53270ee42108c4ab89a94bcbc80e393b18eccaeeffbd5613140518d5794c3ed232fe5b47322aa90cdb0e1c01d54548dc6a467d007b312d15650b","ssdeep":"768:UNXb3ivTpXKaLn/A0OdfNgR+1SSxXAhPWuqvn2Z:amNKK/A0OM4SSxYNqv2Z","tlshash":"a7c2f20915bf894be5bf033931228ecf26a53047960ed87dd7583254e1f4960e7e9b21","first_seen":"2023-07-07T10:01:10Z","last_seen":"2026-08-12T05:32:21.246994Z","times_seen":71,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.495Z","timestamp":1782647147495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /embla-carousel/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 58\r\nlocation: /embla-carousel@8.6.0/embla-carousel.umd.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a12c727febed0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T23:51:38.251444Z","times_seen":17878093,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":4,"connect":11,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/b0f7d95560cf8ebf.svg","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.513Z","timestamp":1782647147513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/b0f7d95560cf8ebf.svg HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQ4ij3cz5qqFrwLDP0Bxks83uTQzC5aaxsCJb3TNMY6QwWLjzN0tUwXE0zwZzTXGTbh9CzO5ZJEqGbxXDs60OoDUpL0TLxhwfm%2Fey891uf3%2B%2FQIzize%2FMOY1DcAJpEJxMqkQOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c8303c5b3835345d4b65d67591938a49\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c727ffa505694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1196,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"723692a1b82f3336500315d8dc4a0320","sha1":"d49cf320e51a174382293d2e86b20e3f782ac604","sha256":"37f7aded82cd421e13090e71ea2bd00ace0ab8a78d3029dd089c3d130ea71055","sha512":"3c37d4de2ab6fa93b51e1bbd78eafce443aee261f7b002bf68d58f7e328ab8c809230f06081f1869a1191a6e1c6db988ec4523cc377240b777a29149a5a9a403","ssdeep":"","tlshash":"6af0ac4c139962f4be31cb691a2825c4b88e90ffa1d162ada564d46837123c9a9c90c3","first_seen":"2025-09-29T02:38:04.551788Z","last_seen":"2026-07-24T22:16:47.879774Z","times_seen":13,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohacasinos-ca.com/widgetsdd1aa1bd/d855tFrG7BAC9ec0.js","fqdn":"ohacasinos-ca.com","domain":"ohacasinos-ca.com","tld":"com"},"ip":{"addr":"172.67.172.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohacasinos-ca.com/","date":"2026-06-28T11:45:47.721Z","timestamp":1782647147721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohacasinos-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 13:20:00 GMT","end":"Tue, 22 Sep 2026 14:19:54 GMT"},"fingerprint":{"sha1":"62:57:C2:CC:0A:C6:75:4D:9D:86:42:8D:27:E7:4D:B9:6F:4D:45:7E","sha256":"89:52:E2:49:E8:6A:C9:51:12:34:18:A9:4D:40:08:9E:D0:19:75:49:10:7B:0B:AB:77:8B:1E:CC:31:BE:F2:95"}}},"request":{"raw":"GET /widgetsdd1aa1bd/d855tFrG7BAC9ec0.js HTTP/1.1\r\nHost: ohacasinos-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ohacasinos-ca.com/widgetsdd1aa1bd/9069OmBF9z9p33cd.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eUb67%2FA1QlE1uuiVNciGTCcq5MVvmQCxnIjF6r%2FTWZoivnWqujTi50BksbrIJ%2Ft9OsjwIC5XZjHNJd4jxPuAFdKb3VC9qLeIRcu18M52k7Gd%2FE0WOmKO0yhxQ6OQ0XnDr3b6Sg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"62aef23c6957230ce41b297046b60763\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 11:45:47 GMT\r\ncf-ray: a12c72814a5f5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189,"size_decoded":985,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"b9e9e05b1b64aa525f8df6eda479fa25","sha1":"4db681f86021a5adc06ac72f894cdd30fd6ffed5","sha256":"d401d962832f97f35011e5831ac4f0234e24fff273ba0c73f8af384ddaa5ce68","sha512":"b5ff00ceed4cbdc0db8c0e615dcb90d821101ce02b2dbc6c1f00014c3974e44ff00836151d8d3e9573f5c749c26b9be13b5b735dba6bd13900705769aa44b1ae","ssdeep":"","tlshash":"06c0128e69b4e17192451cf5803599029b29162c92797e90569d85712a624c6051a936","first_seen":"2026-06-28T11:29:24.377136Z","last_seen":"2026-06-28T11:46:13.382373Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ohacasinos-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}