{"report_id":"8277f98b-caf6-4982-b975-3e1fb9d25cd4","version":0,"status":"done","tags":[],"date":"2026-08-15T18:37:54Z","url":{"schema":"http","addr":"rainbetbetting.ca/","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"ip":{"addr":"172.67.152.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetbetting.ca/","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"title":"Rainbet Betting Canada – Sportsbook, Odds \u0026 Casino","dom":{"size":30319,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1938)","md5":"6698b0d5a6158754049aba1613ddd473","sha1":"cae9104ae8917526ce113e9c783619fca7746944","sha256":"ad55e66029024bf2e22ce0c5a82121c6b5cbff528203b41ceab2bf7e6a4acba0","sha512":"832899b35e87958633821db281295128b154f049f8901825864f7b7c72a800a0e49d2866759bd8df01c36e49dba7a5a8dd276ae52e02d27abc5f5b61d086c955","ssdeep":"768:mII3lLnI1jlLnI1s+qoOsaj3AtCTikD5wLeIc1tbUN:mII3lLnI1jlLnI1s+qoOsaDAiikD5wea","tlshash":"bcd2b763d2f1647702b380db656bab2dbae58407ca660110b5fe0fdd6fedd62a42700d","dom_hash":"domhash6d584908fcff343145f3d4ceabc9424d","first_seen":"2026-08-15T18:37:54.80126Z","last_seen":"2026-08-15T18:37:54.80126Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetbetting.ca/","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"ip":{"addr":"172.67.152.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T18:37:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetbetting.ca","ip":{"addr":"104.21.74.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-08-15T18:22:13.133634Z","last_seen":"2026-08-15T18:22:13.133634Z","alert_count":14,"request_count":7,"received_data":135699,"sent_data":3495,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetbetting.ca/assets/js/main.js","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"ip":{"addr":"104.21.74.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dec3a3bb1c6b012b64118457cf5be89","sha1":"f95838875571971b199dcbc2150f7b9ca4395c22","sha256":"881c8bf680cba376f6cb9c3f26f132673ca83e7e3d121335b201da4762c4e612","sha512":"b703e844c79265aaad45baed8145002ea9a4c3a4b0515b15b1621e907eabf4080be50fb9f7fd46573ba0196ddab439f3a8371d5d119ae9234faffddd6af3425b","ssdeep":"192:l3XhBEVv7/7sWA4dCI++US3GhYwncNBJBOb4uFd0TCvW:l35t3+N3Ghjcfne0TCO","tlshash":"5ee1835aedd321b24577f1b967afa648f26840135909cd013d9dd7841f94c3222feae8","size":7143,"data":"","first_seen":"2026-08-15T18:22:16.152601Z","last_seen":"2026-08-15T18:37:54.802654Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetbetting.ca/assets/js/main.js","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"ip":{"addr":"104.21.74.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbetting.ca/","date":"2026-08-15T18:37:26.504Z","timestamp":1786819046504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbetting.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 11:44:10 GMT","end":"Sun, 25 Oct 2026 12:42:57 GMT"},"fingerprint":{"sha1":"37:4D:FB:13:B5:BC:C8:F2:1C:9E:09:21:5D:9C:AF:C0:7B:FC:71:00","sha256":"06:40:5E:91:C8:60:F9:8B:B7:F9:AD:30:7F:9A:00:11:AD:9D:73:82:4E:2C:4D:AF:42:7E:3F:43:2A:DA:E4:1A"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: rainbetbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 30 Jul 2026 15:32:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSeoB%2FqcuQjw7yEfFruvzImkKbsmgGXvo9DfODcVFMeTCOt9CPHNFMPMe%2FMmexsZvJNX236cTwWPJOQFqMAskNArUx5qh5MeRsEfVUongQTsfGFD0vCl15oIYmDN2TJHxNDTpA%3D%3D\"}]}\r\nage: 942\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a6b6e7f-1be7\"\r\ncf-ray: a2ba4f80acb05fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7143,"size_decoded":3473,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7dec3a3bb1c6b012b64118457cf5be89","sha1":"f95838875571971b199dcbc2150f7b9ca4395c22","sha256":"881c8bf680cba376f6cb9c3f26f132673ca83e7e3d121335b201da4762c4e612","sha512":"b703e844c79265aaad45baed8145002ea9a4c3a4b0515b15b1621e907eabf4080be50fb9f7fd46573ba0196ddab439f3a8371d5d119ae9234faffddd6af3425b","ssdeep":"192:l3XhBEVv7/7sWA4dCI++US3GhYwncNBJBOb4uFd0TCvW:l35t3+N3Ghjcfne0TCO","tlshash":"5ee1835aedd321b24577f1b967afa648f26840135909cd013d9dd7841f94c3222feae8","first_seen":"2026-08-15T18:22:16.152601Z","last_seen":"2026-08-15T18:37:54.802654Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbetting.ca/assets/img/logo.webp","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"ip":{"addr":"104.21.74.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbetting.ca/","date":"2026-08-15T18:37:26.512Z","timestamp":1786819046512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbetting.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 11:44:10 GMT","end":"Sun, 25 Oct 2026 12:42:57 GMT"},"fingerprint":{"sha1":"37:4D:FB:13:B5:BC:C8:F2:1C:9E:09:21:5D:9C:AF:C0:7B:FC:71:00","sha256":"06:40:5E:91:C8:60:F9:8B:B7:F9:AD:30:7F:9A:00:11:AD:9D:73:82:4E:2C:4D:AF:42:7E:3F:43:2A:DA:E4:1A"}}},"request":{"raw":"GET /assets/img/logo.webp HTTP/1.1\r\nHost: rainbetbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 15:32:13 GMT\r\netag: \"6a6b6e7d-a8c\"\r\naccept-ranges: bytes\r\nage: 942\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHd8xLTj%2FtEiH2HfCUxW4BWO6nxWF8vuRmyROka7swIDay%2Bc0TUATU85HREtldSaPOuPFiPcopyT7MHP2kWcu4D8UxwGCSgk1s5%2BBlBkGQmFcxKZWwJ6SJsr%2FABU1fhgLY%2FClg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba4f80acb15fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2700\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2700,"size_decoded":3407,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19bbf8fb3205a564ceeb93635191e0ff","sha1":"115abcfab14a8d01be1e092c8d4f07b77e3969aa","sha256":"29dd6a29212de390240eb1b0ae92870aaae5cfaa9d6d724bb79e640bafc09b06","sha512":"afd6e7e9ab2aed2e68918352eda54bfff9209f07876a463696e44baea867f600a51cc999171e30e7c8020c5b738b0b6e51819c38070d4bc667f008b060bc23c8","ssdeep":"","tlshash":"10513c859fdde5bbb64a08f30be5054609b268c1920274db6c49be2db897d189f532e0","first_seen":"2026-08-15T18:22:16.155614Z","last_seen":"2026-08-15T18:37:54.803661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbetting.ca/assets/icons/apple-touch-icon.png","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"ip":{"addr":"104.21.74.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbetting.ca/","date":"2026-08-15T18:37:26.620Z","timestamp":1786819046620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbetting.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 11:44:10 GMT","end":"Sun, 25 Oct 2026 12:42:57 GMT"},"fingerprint":{"sha1":"37:4D:FB:13:B5:BC:C8:F2:1C:9E:09:21:5D:9C:AF:C0:7B:FC:71:00","sha256":"06:40:5E:91:C8:60:F9:8B:B7:F9:AD:30:7F:9A:00:11:AD:9D:73:82:4E:2C:4D:AF:42:7E:3F:43:2A:DA:E4:1A"}}},"request":{"raw":"GET /assets/icons/apple-touch-icon.png HTTP/1.1\r\nHost: rainbetbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 15:32:10 GMT\r\netag: \"6a6b6e7a-2528\"\r\naccept-ranges: bytes\r\nage: 941\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RvF1NKcCPTIELe2up4bX9wF%2FGu3GxYKFfl3QGM6afKTdNzNlhOxmRymRCAIz6BsoN7FcII0bktERaV%2FlbqtEAXoiCh%2FEfqu1a0fDC7X%2FrvUDmYpvAXEauHJAqhGCQEow96TPFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2ba4f815cb85fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9512,"size_decoded":10220,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"f259920105602dd2f64a67fe2ddfdef7","sha1":"2aaa8e5fa1bde79118a6ea9029206197083b9eb8","sha256":"d8c87a2e74944bc2f5272352960a6148035183e40e0fd800628bc19b07e4efa8","sha512":"1336fac10a6d8885b83b5fe9d4a873857f15104ab99ede92281fb88339bf1b755f6247f732f14a1e3f9854348fdbf8c6fc75aad8a7d2b4912e53d179a306afc1","ssdeep":"192:gqSKdKWAzPrkM4y5Tc/vDFiPCFKRCHe38jvlHu73jtYMI9RhdpPxdqLeCZQ:gbKdyPrNPIjWCF3H97TlRhdeNZQ","tlshash":"a812be80c908bee0e73c5609d36d73de696d6836ee301f52d64fd0a27be46176032302","first_seen":"2026-08-15T18:22:16.157778Z","last_seen":"2026-08-15T18:37:54.804422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbetting.ca/assets/icons/favicon-16x16.png","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"ip":{"addr":"104.21.74.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbetting.ca/","date":"2026-08-15T18:37:26.622Z","timestamp":1786819046622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbetting.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 11:44:10 GMT","end":"Sun, 25 Oct 2026 12:42:57 GMT"},"fingerprint":{"sha1":"37:4D:FB:13:B5:BC:C8:F2:1C:9E:09:21:5D:9C:AF:C0:7B:FC:71:00","sha256":"06:40:5E:91:C8:60:F9:8B:B7:F9:AD:30:7F:9A:00:11:AD:9D:73:82:4E:2C:4D:AF:42:7E:3F:43:2A:DA:E4:1A"}}},"request":{"raw":"GET /assets/icons/favicon-16x16.png HTTP/1.1\r\nHost: rainbetbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 15:32:11 GMT\r\netag: \"6a6b6e7b-2d0\"\r\naccept-ranges: bytes\r\nage: 941\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2BnZ9%2FXyO9YTg6bHGEElePVSTtY0PM62zMhM0qkXXuvnkgytZW8oAVIUJlH1xlPTIFtKwgEKTCgzoELTHts4cKmCgirNY3fkaIehkpXLRYGN5WcyaU4HYrCnwjwCrCHxKp8qRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2ba4f815cb95fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":720,"size_decoded":1422,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"6992b9ade4fc6cd1257c66ae5048847a","sha1":"b5fd15afc057e7b1783816187b0f1fcb6b6df5a2","sha256":"d6138c8ec577bcd4a554a918f0769377cd2b453db4c836a5a93b42db09220d8f","sha512":"06f5145878df4379b2b65e9f53d3a35a4c9aacfc88f520b5fb43d8cfe787c206db4438cbb1167038cb1c667d803ef4de3c315701cf504879b2efd3d2dc46937c","ssdeep":"","tlshash":"f7016035062883da885f82a9a42274305890ef648e71a00db606a9a7b479162183e1ff","first_seen":"2026-08-15T18:22:16.159841Z","last_seen":"2026-08-15T18:37:54.805071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbetting.ca/","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"ip":{"addr":"104.21.74.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:37:26.086Z","timestamp":1786819046086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbetting.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 11:44:10 GMT","end":"Sun, 25 Oct 2026 12:42:57 GMT"},"fingerprint":{"sha1":"37:4D:FB:13:B5:BC:C8:F2:1C:9E:09:21:5D:9C:AF:C0:7B:FC:71:00","sha256":"06:40:5E:91:C8:60:F9:8B:B7:F9:AD:30:7F:9A:00:11:AD:9D:73:82:4E:2C:4D:AF:42:7E:3F:43:2A:DA:E4:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\ncontent-type: text/html\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ncache-control: public, max-age=86400\r\nexpires: Sun, 16 Aug 2026 18:37:26 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bbIAhDLxEJ%2FxZems9mtL%2Be5Z95sBjMqWYraCR%2FzKw0C%2BZXSQPatgfmXTQ7FGU2PB8SRH35%2FooWwNN4Y%2F5vje0tbinikCImj3Mbt3903YbST0O6s%2BNaH%2BCb%2F9xxNu4TrHHAwZOQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba4f7e3c9b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27688,"size_decoded":8140,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (429)","md5":"4cccbe415e470645ebc00e87c96937e1","sha1":"c6341221254f05b478a40dc5ead18b7d2131ec24","sha256":"4290271372729e783e6a7f267267f8be3bca0c5787bb38a2b8be741b4093140d","sha512":"56ad02926be7a11497fd4d1a20eabe960123d83cc6bf2a43847bb6373e6092aa5ac8b8f4502ceb13f31475b69b3b1543f019bd7d536a25efd144c161924aad67","ssdeep":"768:8IIElVpmJs+qoOsaj3ANLVkD5wLeIc1tbUs:8IIElVpmJs+qoOsaDANRkD5weIc1tbUs","tlshash":"54c2e763d1f1647702b340db256aab2dbee9c407ca660610b5fe0fd95fead62583700e","first_seen":"2026-08-15T18:22:16.144199Z","last_seen":"2026-08-15T18:37:54.805784Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":6,"connect":21,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbetting.ca/assets/css/styles.css","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"ip":{"addr":"104.21.74.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbetting.ca/","date":"2026-08-15T18:37:26.501Z","timestamp":1786819046501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbetting.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 11:44:10 GMT","end":"Sun, 25 Oct 2026 12:42:57 GMT"},"fingerprint":{"sha1":"37:4D:FB:13:B5:BC:C8:F2:1C:9E:09:21:5D:9C:AF:C0:7B:FC:71:00","sha256":"06:40:5E:91:C8:60:F9:8B:B7:F9:AD:30:7F:9A:00:11:AD:9D:73:82:4E:2C:4D:AF:42:7E:3F:43:2A:DA:E4:1A"}}},"request":{"raw":"GET /assets/css/styles.css HTTP/1.1\r\nHost: rainbetbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 30 Jul 2026 15:32:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKf%2F8mQm5fLDoPzc8dP9qiuJKfKblqu48buSjkaGLUQt%2BOgg%2BGt6gtS8hnb%2FzOxjDA7daHFH6YrE4Yy0acPDGQ3D9x3RM2h51GgBIBn7qOIyPsX9bpQJO%2F4HzGmbOEe%2FCSCxlQ%3D%3D\"}]}\r\nage: 942\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a6b6e7a-4675\"\r\ncf-ray: a2ba4f809cae5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18037,"size_decoded":6293,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"1b1f461f897da1e0b0a22ca85e219e07","sha1":"6324954ff2511673ad1637a7f3fd8c2519187f7c","sha256":"c95570f87eee4eccb74b3fe5aba201e70b7cd69d8f70d442560d0298e9e8421d","sha512":"42d78121d2c56c08bd015e4db27efbefa0f860238bc4d060b47f127d51f02dba743fbc6beb23f7409a0468746995fe1555d10abe9f9c0003413d7b530703eb9a","ssdeep":"384:zEpTdsF6rkhD5IpxTHXYXsKtDuMD1oIvrHlUc+xUJ:B5dIpxYXs0LoxC","tlshash":"6c82d9a1a611b035b43be855e7c466dd2138a403dc238bedfd97a1248bc72f72a75f09","first_seen":"2026-08-15T18:22:16.147284Z","last_seen":"2026-08-15T18:37:54.806516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbetting.ca/assets/img/hero-app.webp","fqdn":"rainbetbetting.ca","domain":"rainbetbetting.ca","tld":"ca"},"ip":{"addr":"104.21.74.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbetting.ca/","date":"2026-08-15T18:37:26.502Z","timestamp":1786819046502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbetting.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 11:44:10 GMT","end":"Sun, 25 Oct 2026 12:42:57 GMT"},"fingerprint":{"sha1":"37:4D:FB:13:B5:BC:C8:F2:1C:9E:09:21:5D:9C:AF:C0:7B:FC:71:00","sha256":"06:40:5E:91:C8:60:F9:8B:B7:F9:AD:30:7F:9A:00:11:AD:9D:73:82:4E:2C:4D:AF:42:7E:3F:43:2A:DA:E4:1A"}}},"request":{"raw":"GET /assets/img/hero-app.webp HTTP/1.1\r\nHost: rainbetbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 15:32:13 GMT\r\netag: \"6a6b6e7d-fd70\"\r\naccept-ranges: bytes\r\nage: 942\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jr84QAFy5jipzL093f1IRYcpauxUIXz2oQ%2Bc3y4CjsYfE6MEj4rSnXVhOzRUx1nhdOP37LQ95o5mAIB0h0bXlfb32%2FRWKGtpciP4i%2FwCzHX%2FnuxhADJYWcgqaymxhwdwZC8BSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\ncf-ray: a2ba4f809caf5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64880,"size_decoded":65587,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1100x619, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"99a8621a6eb46bb7408410ce1095e5a5","sha1":"3f1f6176c3dd615e34cbfceb9ad3be8e16d938e0","sha256":"6283e0b73409655010fba2ae4f81fa0c029d0651b69a3ebd6aab8919bc3ffaef","sha512":"90906298f18672857aacd8d85d2d95227b71fb726c6fd1c41a8be481be0d5dcb762656ba0d9253602f0613be4f13fc6c29d0ef479351e5146a40f7e7319af620","ssdeep":"1536:N4D4SKinn/VJPpcE2iqAhdyJrJ+m7x+f5XvvAoCqEBhX+TO1:N4D4oDPp32nJJtTq4huk","tlshash":"3e53027314f1cbe18838204e4c93b7975b49470a36cbfb89b5c5300a9ee22c615bda7b","first_seen":"2026-08-15T18:22:16.150197Z","last_seen":"2026-08-15T18:37:54.807119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbetbetting.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}