{"report_id":"98410078-f140-4ac4-b838-7ca44f320374","version":0,"status":"done","tags":[],"date":"2026-07-18T17:43:54Z","url":{"schema":"http","addr":"rainbetcasinoca.ca","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetcasinoca.ca/","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"title":"Rainbet Casino | Crypto, Sports \u0026 Casino in One","dom":{"size":39346,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (510)","md5":"dd8355a66295cc76f4c88b70b9dad2f7","sha1":"ea1e52c34a4b63bb9cf170cb8792b21eeac79403","sha256":"0ffd0f2ec9c0160956b2d9db5f1165b0de50bebc6f516036f6881381886377e2","sha512":"4c4cc01a615a7abd6a6c630b45ba35eb0b8e170f6abc1e0fdfe04fcfd8b135276a8db51f0de818ee6d67d2b6cbbccb1600520462cead406cb79d3354da0f9d89","ssdeep":"768:RLUH9mz1RbL5zAXhgq0y1gJpAdQaCI/DwhwBIDVq1Wr6HPqr:BUH9mz1RL5ShgxMgJpAdQliEhwKxq1Zg","tlshash":"e503ea17b6f423a7078302547e417f4b6f6ac037530629a4744f8fbd2f8699a883b6d6","dom_hash":"domhashdc952eaddae2e0153245109da65d0520","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetcasinoca.ca","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T17:43:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-12T22:48:41.233588Z","alert_count":0,"request_count":1,"received_data":163045,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rainbetcasinoca.ca","ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-23","domain_rank":0,"first_seen":"2026-07-18T17:43:54.839176Z","last_seen":"2026-07-18T17:43:54.839176Z","alert_count":28,"request_count":14,"received_data":275944,"sent_data":7016,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:4.6.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":5,"received_data":157993,"sent_data":2803,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-12T23:52:49.76326Z","alert_count":0,"request_count":1,"received_data":88176,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":16566,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-19T05:18:06.973387Z","times_seen":180314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/scripts.js","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8f6d127bdaf104cd978603eb03c0d11","sha1":"d7861adccbd4744141a0f60afb3cd0d31f505962","sha256":"bda6c76a3a8bb43f670fb150f784fc9a26a9b3bb1ed797826e751a836d70dfb4","sha512":"e1602884e72710f86bc85b8a2c8515764c3ed1f1f227ca1a9aeaff9edd893c333472c2e2c6f6515d8eecd57226d73466a8093efa2de89ed9c21dd90344621a9e","ssdeep":"","tlshash":"8521d028f2f219d882f37a7def3f726435f230473958e414380e11469fea44c49aa7a0","size":1283,"data":"","first_seen":"2026-07-07T07:25:34.827458Z","last_seen":"2026-07-18T17:49:02.586392Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Element mit ID #update-date wurde nicht gefunden.","filename":"https://rainbetcasinoca.ca/scripts.js","line_number":37,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.465Z","timestamp":1784396607465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@4.6.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rainbetcasinoca.ca\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.6.2\r\nx-jsd-version-type: version\r\netag: W/\"279d8-G+N7YjBsjAxndbtMk8XkxOE9l3U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\nage: 1488105\r\nx-served-by: cache-fra-etou8220182-FRA, cache-bma-essb1270055-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 25226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162264,"size_decoded":26007,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65326)","md5":"a4b3f509e79c54a512b890d73235ef04","sha1":"1be37b62306c8c0c6775bb4c93c5e4c4e13d9775","sha256":"f886516f3d41e9e7bd994c7f7a39a89cafae9483f90396cb0ddeafe8d1ea5e72","sha512":"aedfd2ad0e143486867c3c845d9b4d7325af41e3aad102f280796e1507128da181d382315a16a5ef5b4abb33fa2bc7985d807abc9578a47917726146190d7fd3","ssdeep":"1536:SS7CI4NT5+rMqFVD2DEBi8yNcuSElA3/uJpq3SYiLENM6HN26B:17sAGLq3SYiLENM6HN26B","tlshash":"9cf352a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-07T07:49:16Z","last_seen":"2026-07-19T04:38:01.606769Z","times_seen":11978,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":14,"connect":20,"send":0,"wait":15,"receive":10,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/ssl.png","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.484Z","timestamp":1784396607484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /ssl.png HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 20 May 2026 12:04:25 GMT\r\netag: \"203a-6523e98d098eb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ym9MhwZSs0cwUa0I80R9MMDj1e2qhKSjP7SxXXl98oGqGnASPsLrUm3iEOT8ENUMtLQpVMMoRrgiMe%2FSW0eR2LzyFfnM2soLW1vgqBBqLeRvYejuFOeZ9sRyUnb0LSIEJKvobmE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349ecc8990b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8250,"size_decoded":8943,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"9a0b079bd85e67b511d3b46c4d22fe7e","sha1":"b329cab11a2b43d8051460f4b62c2e084fc90dd2","sha256":"5ee7c2ca71f973e860c7c02c12cfd6903ae55f9f029674c4e32585e0914e844c","sha512":"1c02ca46bce74b03235c8ac5ae456d7aab68b57633bc34b2596fbf2088390799970d33896a75a6471befebea93d1de7bfd29a949bef641a9d642f2c777644bec","ssdeep":"192:kQR/9BNAipL2zRjmoaqvIsNb+glRDeazLvTBTco4TJVbnm:kQR/2iczR6oaaN6glcazLl4o4Trbm","tlshash":"4c028fbd3b834dcc0927df805ba5fc6989330952db99e45b1107272f99565c782bda10","first_seen":"2026-07-07T07:25:34.831746Z","last_seen":"2026-07-18T17:49:02.587217Z","times_seen":3,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:43:27.013Z","timestamp":1784396607013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Tue, 09 Jun 2026 06:50:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlwcu4QjPMz4SBOrvN%2B9Wh7PNeR2kBmPkUH%2BJlAcR2f5pk3m0VmMpdzmdCuBloQoJt%2FFPpFF%2F5AH8yq9w9%2BMmMrVnW3ooObOjX53ObQM90OwkNE6EGzb4TCdz5EuNTjC3CdCkic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncf-ray: a1d349ea085f0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap:4.6.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39356,"size_decoded":13018,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (510)","md5":"b19a490cd473fafa9485747c6fe7f431","sha1":"48d8ddd0628e471b3f2f6f0db6d5b23c31c1f23f","sha256":"74913b613d1ceb73d3dfb9a0b4b1e6d5e84bbccecb3025b5c25ee88974905538","sha512":"9c41bdf914325e6a8dc3f6b72b1f4e2c6a4c45c51b333a5232b2b25d706575a492e33ec2bc9ae2fd7bc4d791f516d321d64f8e1de7be06b2d3926964fd0a97fa","ssdeep":"768:cHUHjmz1RbL5zAXhgq0y1gJpAYQaCI/DwhwBIDVq1Wr6HE3c:mUHjmz1RL5ShgxMgJpAYQliEhwKxq1Zp","tlshash":"d503d917b6f423a7078302547e417f4b6f6ac037530629a4744f8bbd2f86d9a883b6d6","first_seen":"2026-07-18T17:43:57.860669Z","last_seen":"2026-07-18T17:49:02.58847Z","times_seen":2,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":12,"connect":24,"send":0,"wait":81,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/gambling-help-online.png","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.486Z","timestamp":1784396607486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /gambling-help-online.png HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 20 May 2026 12:04:24 GMT\r\netag: \"96c7-6523e98c4d8ff\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NVxrjPOYBoh0lPm%2Fieh8EGuQhNLL7hbL5RfYJxjIXIJuQF2WIfxCDlG9EoKzraTDbLZavaBn8YIsaAcW6ccWU6L%2BtWzFC2R4VtQHirNTZlRsgl56tcbPPFbvdEkvR7K%2FQ%2B1VFRU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349ecc89b0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38599\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38599,"size_decoded":39299,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"950a513ebe768ef0b4241b62997ee5d5","sha1":"69f0b083b56fe02b8f5a47ffb495f5b5d8ded17c","sha256":"16c04045ad340630b6bd0df1d0d180228384c476eb7fdc8e371c72a3913df040","sha512":"7bc675b1287c8be77ded7ca7125c139e151d63aa756e4b39e87bb09a4be7539bda5dc8d199ac6f3aebe57c7a79226130b2daf30e84caac41f9621628ccde7394","ssdeep":"768:t44vSB+l1Rd5WWuQi9ygZb5A1vCoE2N3nqAFgpJG9WlTWXnb91VyI/I:RRl1JLu5ygD2N39gHGIwb8","tlshash":"fb03017841cf54f77e56c317f0776185a6ff2164c9ca332d6f8dbec00aa5aa15e8a088","first_seen":"2026-07-07T07:25:34.842424Z","last_seen":"2026-07-18T17:49:02.578238Z","times_seen":3,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/gamblers-anonymous.png","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.487Z","timestamp":1784396607487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /gamblers-anonymous.png HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 20 May 2026 12:04:24 GMT\r\netag: \"43bf-6523e98c2c1d2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebZMMTuXLfNBa5NG%2FRQ9Pxjs9AxMlL%2F%2F38iVuPAJfNjjI%2BxG1vTWflNJTrU9AYKk%2BqxCN1YWqj1KwMioArB3wUlEMHmHzoDbk%2BOlPEAUkUPgRHXPnXVkpSIga1Oh5GzBgPWLFoo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349ecc89c0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17343,"size_decoded":18047,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"af5915fcc028b2ff4629f5285804d945","sha1":"6ad5c1a1947873ea6110f6fcba71530e7811f8b3","sha256":"9b3b6714d8a6bd11de1fb70d4ca7ab36702d7647791fe3e1e72d03723da587ca","sha512":"df930459196550e74b268e621f916204bcb4dedbf8d902c45bdaab2f4bde22b585699592df0962455b97c1af165bf389a7aade27549a122231d445a4ca70d039","ssdeep":"384:UACmkceA6W8RGAhSK4AhA2IDsFWp525vSCDbwhwBFXvTWXDkAjU:UHA58PhL2RD25vSEwAl7WXNjU","tlshash":"f972d0f9510c64ca68c60d52394cc8968ee3d0f8d976b9b4acc1e45260e2149b6f7f6a","first_seen":"2026-07-07T07:25:34.82966Z","last_seen":"2026-07-18T17:49:02.581321Z","times_seen":3,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.870Z","timestamp":1784396607870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetcasinoca.ca\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 17:02:10 GMT\r\nexpires: Mon, 12 Jul 2027 17:02:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 520877\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-07-19T04:37:12.547965Z","times_seen":5778,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":31,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/scripts.js","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.471Z","timestamp":1784396607471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /scripts.js HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 20 May 2026 12:04:25 GMT\r\netag: \"503-6523e98cedf7f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsZHGhf%2FbOPcRZVIntB4f6%2F9FI9kc95HHBc6ADRQLlwUNZHrfr6Gv%2BHPN5taE5otUgglEoTxRWHp2II6wyDWK2OhS8JG7XzxV%2Bzqx5Nnc1ssJ%2BDW6IDc52Enu5q827ukBwi1GKw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349ecb8940b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 465\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1283,"size_decoded":1225,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e8f6d127bdaf104cd978603eb03c0d11","sha1":"d7861adccbd4744141a0f60afb3cd0d31f505962","sha256":"bda6c76a3a8bb43f670fb150f784fc9a26a9b3bb1ed797826e751a836d70dfb4","sha512":"e1602884e72710f86bc85b8a2c8515764c3ed1f1f227ca1a9aeaff9edd893c333472c2e2c6f6515d8eecd57226d73466a8093efa2de89ed9c21dd90344621a9e","ssdeep":"","tlshash":"8521d028f2f219d882f37a7def3f726435f230473958e414380e11469fea44c49aa7a0","first_seen":"2026-07-07T07:25:34.827458Z","last_seen":"2026-07-18T17:49:02.586392Z","times_seen":3,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/gamcare.png","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.485Z","timestamp":1784396607485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /gamcare.png HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 20 May 2026 12:04:24 GMT\r\netag: \"273e-6523e98c6a20b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzVoVbZNgB228xJVkhYLdeO%2Fj5sOSb4Y4DjLbN59UYHiu1L4PHmvFR4mrWtCC%2Bo%2BAOji4aS1d7muMWMkKAkBRBAlFxvuWWvhLQkNoqHWkrhnvFjxNC5rZg3k7mY2h6r%2F8IdIND4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349ecc89a0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10046,"size_decoded":10746,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"0dc149f713827efaa616d98229b2a795","sha1":"05c1b031680854a9a56e831e7d9bbbea7c1799e2","sha256":"aa911d21a370446182f07f6c9289bff81f328a0280f771284ed71e473ddc1e22","sha512":"65973a552fb9f6ab98d584691c1a6025582f0133e84ce02975255de27009b2ab743ad20b9824ee9b2d471f6675d7db25d707bc61e838f867b17c00428c007b9e","ssdeep":"192:4++NNoYA/2KZLZfcHIjlVE17qaaBTORwZ2Tg3Ac16otxOB8JN:4b9J6ZfcHIJV8C0w20QcMcOBgN","tlshash":"7b22afb35bb4196a82530a09fa7786c461c25e5b4bfeb0d51086b4360727ec62608abf","first_seen":"2026-07-07T07:25:34.824248Z","last_seen":"2026-07-18T17:49:02.587821Z","times_seen":3,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.867Z","timestamp":1784396607867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetcasinoca.ca\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 17:02:10 GMT\r\nexpires: Mon, 12 Jul 2027 17:02:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 520877\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-07-19T04:37:12.547965Z","times_seen":5778,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":21,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/favicon.png","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.977Z","timestamp":1784396607977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 20 May 2026 12:04:24 GMT\r\netag: \"de8-6523e98c0f0f6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6kUR3tqjOeyhU3%2Bqd7AfmysxvgSzdx7gSEJXIeIa%2BZN%2BRdYAApy%2FObYdUHCj7AQdmtITWFYd4z%2BEaHCnBHnE0C2UGqBHBXMmQDnLhRmkIFCzRIpgMhwR8KF2i9Dcq%2FJaT3qElxc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349efd8cb0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3560\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3560,"size_decoded":4265,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"b8fdc6441020a448dee02b5dbb940357","sha1":"a756723e81935f136174011857c9f484c474e763","sha256":"3f4c2b8112e33e92ce2541e8d7e21c76021cb25162039d9e776151123a8c73be","sha512":"af8ebcafca09d20ae1b9422f41c62a835ae2b0e55e3587af275ec6cffa107ddd057abdfb1a57fae75894304cf18f63a6f6c023f457592368b89d93b18bbe4c65","ssdeep":"","tlshash":"66713c8b4d9354582172eb3bd48e26506fb55f98899f8f70be6a5c3bb0302bfc10956c","first_seen":"2026-07-07T07:25:34.836575Z","last_seen":"2026-07-18T17:49:02.582994Z","times_seen":3,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/var.css","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.469Z","timestamp":1784396607469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /var.css HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 20 May 2026 12:04:25 GMT\r\netag: \"6c-6523e98d5c917-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9fCYyOYkMc3UE9%2FfZE3TjqwKmgpxyjzBA96j8htAGiS%2BSenNbgRxCb%2Bt1u9iIn%2FlF%2FEQqCBJc726Oxsi%2FnPUYEqcnuTS8TPwtaOYZ11YzMkWFhCXugSD4VGGH2%2BAGl%2BRBQaj1ZQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349ecb8930b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":870,"mime_type":"text/css","magic":"ASCII text","md5":"53c4272d2b811812edab203a7418b0c5","sha1":"0f067d20ae126926c739935f1095d89c71a702bb","sha256":"36b4d3b9f22583c2a13226d081e91f42d368779b716a7fee363715af2a8f3b3d","sha512":"951a2fa163b983ad4d40b174449c9e1df36df7b7b0c0e42fa92c8e66778fc0123ecc3e9311ea7da189395c007d7041522a8da15bbb3906081cbb504d5a7d8afd","ssdeep":"","tlshash":"37b01231b84c210f3139c6fb71a4c6ba181f8810631d2e34b56a4824e812705bcf2984","first_seen":"2026-07-18T17:43:57.876407Z","last_seen":"2026-07-18T17:49:02.578871Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.470Z","timestamp":1784396607470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\nage: 2628473\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270070-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 583362, 229351\r\nx-timer: S1784396608.537388,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":30979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-19T05:18:06.973387Z","times_seen":180314,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":23,"connect":19,"send":0,"wait":29,"receive":6,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/close_icon.svg","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.480Z","timestamp":1784396607480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /close_icon.svg HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"14f-6523e98bf52e2\"\r\npriority: u=5,i\r\nlast-modified: Wed, 20 May 2026 12:04:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8HxSdisFTlS9%2Btm4a%2FbctdkjeCe%2Fj6L%2FRZLpqIx%2F%2BBVGQatFVRb35TeXTy%2BPN6XroQgw5c%2F1TJjwlvE8nwNXbv%2F3foyi0FGXucyc0JqssANvMfibc4X%2BU6JSIYQETTZyYqmRtJY%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d349ecc8970b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":897,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"78695f386fed5a12e74f8a6a32f5b938","sha1":"2f9ffb4aa11659d79756f9994bb12f4800231b5c","sha256":"70f05a1817187ae447064c0b0a4c2ced91a7024dc90d55996a1c33cc24ca56ae","sha512":"88508d00b6a996d69df4a24d5cde2f0299ccbc63a9498b03975ae9371a21a93129a14e8b315d6bd815a089d507057cea2ca6127fdcd27f371b67257b41aa5ec0","ssdeep":"","tlshash":"d5e0266912484d3cb3114658cb1a332553fa1bef82486209a85025305125b7fbcbf2e8","first_seen":"2026-03-12T12:55:53.525609Z","last_seen":"2026-07-18T17:49:02.576884Z","times_seen":5,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pbYF_Oreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.866Z","timestamp":1784396607866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pbYF_Oreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetcasinoca.ca\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 04:54:46 GMT\r\nexpires: Fri, 16 Jul 2027 04:54:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218921\r\nlast-modified: Tue, 16 Sep 2025 03:40:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15732,"size_decoded":16545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15732, version 1.0","md5":"ad9c55ecf03998391f7149c29543452a","sha1":"dcd4cf87ae721dd01a6ee29be033c7d70f9c198d","sha256":"433a7007e4747a02a790167a6efa2625855f013970ba49b9b739a5d3db8b2601","sha512":"4ba4dd00ea6cfdc3510f0a8b20427e095661bc253ef17533618373ec361af2fe5b1d912e02369a2a33c523dae7068aa0d56a2a233413f1041a029c4cbdeee27f","ssdeep":"384:Fjf7x9pcxpE5/f4Px/hIzqNLXpivowtuhkDRKn24IJEE:pf3peE9qDIzmWowqkFC249E","tlshash":"7262d06ec41ec5c2e414e175d753f4684a679b392c042144a2ed9f93cf7a0b0fea81f2","first_seen":"2023-04-11T11:42:32Z","last_seen":"2026-07-19T03:44:48.778744Z","times_seen":4039,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":18,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pa8FvOreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.868Z","timestamp":1784396607868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pa8FvOreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetcasinoca.ca\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 06:00:01 GMT\r\nexpires: Fri, 16 Jul 2027 06:00:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 215006\r\nlast-modified: Tue, 16 Sep 2025 03:40:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15688,"size_decoded":16501,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15688, version 1.0","md5":"d5448938a162ccb434b09f4572c0191f","sha1":"be9eae3d1d9f4fbd2208e0fd3c871b17b65b6516","sha256":"5b7e4a6f97163c2636724d4de90304fc895653dcfe64c67a7a22f26331ca5c5f","sha512":"df0245084768642738387f7a0daa11c4bd0109617c4120bfd88083c30d686ee2bd327e426ce0d9ee1f50839c5e2890f8a2a2d7acce3705fe8fa324fe623ad942","ssdeep":"384:Bktl5HsgImpL/2gZDAMAyNWE3pZrsjyb2mf+X:Bkl5MgDpT2g5AMtswpZZ2mf+X","tlshash":"7962c046a5a6b998f4d4ecfb0086542c19bb5ca11c6230f3c719356f5bd3e75cee4540","first_seen":"2023-04-14T01:29:53Z","last_seen":"2026-07-19T03:44:48.81294Z","times_seen":5807,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.871Z","timestamp":1784396607871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetcasinoca.ca\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 17:02:10 GMT\r\nexpires: Mon, 12 Jul 2027 17:02:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 520877\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-07-19T04:37:12.547965Z","times_seen":5778,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":37,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/18+min.png","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.488Z","timestamp":1784396607488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /18+min.png HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 20 May 2026 12:04:24 GMT\r\netag: \"29b1-6523e98bdb8b7\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3fGkaYgX0FtRWyitjVnp2KoQoe4MHeNkoB8XblQbzGDDuUZR8XeVDD2IguR1aISQQ0vB%2BGpqSDEqvKvCvdC43wiaHT4%2BxNZ1SiIpeekGpUnPHb2d9hovvnW69fbKF9jK0oKRs7Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349ecc89d0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10673,"size_decoded":11369,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"7e9e6adbd5848b6c0c5547f2a7143015","sha1":"45355d36e9c08fb635f7223c0cf79e664b44253b","sha256":"218956c7c0b545811fd625bb0fbd136250dce5469a8f91c8ae3bd71ab69e4a69","sha512":"debd2f16cd81e0d4e189a55cd6b4faa49bfcaf9995fe785c8f7dca0cf71e42dcdfc292a25b2a7fe0b3673911875bdc5801fe298343d38482e89a80478748e914","ssdeep":"192:zOYPpYIChYtjzNRpEZ/q0OD642hGrqnwzBrG5obTW3AoKawVdQ+rOmHX0:K8pYXYtj+gBN2hGrejGoKawVdQBUk","tlshash":"11229ed00f6a5fb8018aed5d70cb6424d1b7a9e889dd1f26dbbe410506a01e1da3d9f3","first_seen":"2026-07-07T07:25:34.808542Z","last_seen":"2026-07-18T17:49:02.585776Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/style.css","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.467Z","timestamp":1784396607467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 20 May 2026 12:04:25 GMT\r\netag: \"38ef-6523e98d242b6-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2Be3F6%2BIkC8fnRpmwldmvRg3qX5ZPl5XMgDjvoTXkdVK1%2Ba2IVqhTQPP%2FzcXbGX5HScMvJZ%2BveZ28BqfIe2Z5vZslcIEq3iNrYa6hAZnU5jerpRNkHcl9ybGttO3mxvtX9ti3J0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349eca8920b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14575,"size_decoded":4071,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"57f53943f354dcb022e5e162ea4a8453","sha1":"084770ceccff86eff8323781e560b20376f045ff","sha256":"77691034395d40add8f9758f88865ddfad2c39123db50e939b6822ecce86933d","sha512":"f147ef31900bd98b1ae01359cefedd622ca693b1720e2fb1548f80277e3fa7105a835ebf64d28dee99b61a04da45355a428ee1aeaedbf6b57e380f581feb3bc8","ssdeep":"192:v7jSvIRm7TOxFqX2fz4MWfNAWPLKgfLx9NIzqmis27aJUrj/r8g4aI63iM8gEsWa:v7jSvWmIFR6+WPj/4g41PLgAqmiB44","tlshash":"70626596ab616214743ba495ffa36b5d636ca003950bcdbc7bd5104cdf8a2dcc2a3b0c","first_seen":"2026-07-18T17:43:57.884475Z","last_seen":"2026-07-18T17:49:02.583579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/logo.png","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.478Z","timestamp":1784396607478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 20 May 2026 12:04:25 GMT\r\netag: \"1c26b-6523e98cb8fcf\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9kG0IZC351sBfWxEHtcZI10RV9NDiW%2FtYBQa89L4fyTTofXxuUaovA5k0PfoHKeK0uO0S0Rhsg%2FZI%2BeilhO4mfVT2woMlZQcRO8aHjWpH6%2B3m6QgHNASuYU1qix2qlXuUvd4ydQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349ecc8950b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 115307\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115307,"size_decoded":116009,"mime_type":"image/png","magic":"PNG image data, 861 x 318, 8-bit/color RGBA, non-interlaced","md5":"1e392cc034ebe70d226c50b25ed282d1","sha1":"ade54d4f8437df718ee6f82a08cde61b4f1904ec","sha256":"3009e5f0ecfcd0ffc346f604b87936967fc49a2938e62bf6062a4986aaf0084e","sha512":"954bcccb80759b22130771d017465ed449ae94f1463ccb1e44212620f4d3cdb0eb1bd27b5f2cacb5f82dcdb6dda3d77dfd49a68f8ca0b643b1e58d5a431a799c","ssdeep":"3072:n9HIfJvqktpP4ddzrdb+YksaJlHjJdCTaJdNpWlFkQOq3F5Q:n9IhHpOzEYk7VjDCTaZpW/k5","tlshash":"ceb3025f84ab3dc4fa2748d6733a3f227b4581f236d34a55a92cc1c0579fa9769bc018","first_seen":"2026-07-07T07:25:34.802476Z","last_seen":"2026-07-18T17:49:02.58466Z","times_seen":3,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/mune1.svg","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.479Z","timestamp":1784396607479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /mune1.svg HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"184-6523e98cd222a\"\r\npriority: u=5,i\r\nlast-modified: Wed, 20 May 2026 12:04:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iOhATmOuz%2FRl%2Bst7m2BZNYqg1FHW1TpeB08dLrgeyjlnXWEwAUg%2Be60%2Bb7w2viYlxdzdxQDgrp2SB%2FtmaDFhCBrhNP4HfcDPwSbhsIMf3O3gQnDoB75q9Ash4BTLStvspUOXKTE%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d349ecc8960b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":875,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94d373614ef493906887141b4f2ede9f","sha1":"1f22b35d086c502ecf605482a0d8a9ef72b825fe","sha256":"ec758801aff4ffa2984e6039da6804bc9fe764ca90147391f475f6ec24fad635","sha512":"dffbe35d84acade8cf1d37fa41a6899458dc5e5e2aac553a88f00791c493219abcb36c5330f7b160d14d1b801080b51d589930014d74bedd884daafeed6bff82","ssdeep":"","tlshash":"43e0d8aa220c0c3db322437cd71a723953be1eb74349b244a8112535112977f7dfb6e8","first_seen":"2026-03-12T12:55:53.524713Z","last_seen":"2026-07-18T17:49:02.580047Z","times_seen":5,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoca.ca/trustpilot.png","fqdn":"rainbetcasinoca.ca","domain":"rainbetcasinoca.ca","tld":"ca"},"ip":{"addr":"104.21.7.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.482Z","timestamp":1784396607482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoca.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 12:56:43 GMT","end":"Fri, 16 Oct 2026 12:56:42 GMT"},"fingerprint":{"sha1":"4C:5D:1E:A3:67:A2:EE:D1:2A:CA:12:E9:60:63:04:16:20:3E:81:1D","sha256":"82:64:B3:D6:4F:BB:A6:3F:69:0D:46:EE:3B:FA:68:CF:10:FC:2D:10:A3:3F:AF:FA:FA:57:7A:6E:92:FF:62:BA"}}},"request":{"raw":"GET /trustpilot.png HTTP/1.1\r\nHost: rainbetcasinoca.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 20 May 2026 12:04:25 GMT\r\netag: \"184a-6523e98d3e0ca\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pL%2F873B5cODTvkbuYS9VIO85MsTaeElfkY%2FTR9tHL4Mv9g78WzRpBY0iAmtWuTv2P0cpOOrkcVRxhOX9iGfTrQTDACMuwMqCqU3RyTbkgTnD450rIx2RhvRyHRR%2FalbU2T0%2BpkA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d349ecc8980b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6218\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6218,"size_decoded":6917,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b54f3f0c7450e5e0aa73a4f8234a6890","sha1":"10162477cb285b33be6f18a295e121c2c222fcab","sha256":"e1f93c784f98c980280ec66582a23003d00f8ced44c1d45937fc836e6609a57b","sha512":"b2478bd9d3038d9c9788a55911d15edb915cbc2e03724e079d1db4ca0a7d473663a59b73b46acddc57eee48a0f9ac7a1fda8dd49c425c9355c024358e5ae1c47","ssdeep":"96:jzMv6cpSGNVTBc9RPjqirkrzlMT1LtAvaKc9FDxR8eOYtawEAV9xWHnFJu5:XMvvNxBHzST1LtAIfqSaSDxeu5","tlshash":"50d18ede0d78ba0d8c280e458e429695f1170ecba3cb1285b726c38de8213bb52b55b5","first_seen":"2026-07-07T07:25:34.811115Z","last_seen":"2026-07-18T17:49:02.57744Z","times_seen":3,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"rainbetcasinoca.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rajdhani:wght@400;500;600;700\u0026family=Exo+2:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasinoca.ca/","date":"2026-07-18T17:43:27.604Z","timestamp":1784396607604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Rajdhani:wght@400;500;600;700\u0026family=Exo+2:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoca.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Jul 2026 17:43:27 GMT\r\ndate: Sat, 18 Jul 2026 17:43:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15882,"size_decoded":1599,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"905f4b522a3d35e1a23410861adde50d","sha1":"e25acb286e10effe70cbcff444e810ffbf754c06","sha256":"5ba9e91a94f455d63070ee12672bcfcbfa7b4b705cad52c0045617e453a95de2","sha512":"bec3b72d28ac11b2ab35458cb5e18038b4ab85c5eb54b252074a37c1dd376f29ce7a1d47dbe90feea6e170a430f9bcdc8c10bab3ba98f43cad141e3eaa0b3890","ssdeep":"192:CpSRHHxxEipzRHucx5RpsRHtjxK4pVRHkmxn/p2RHLFxAup3RHiAxF4xoooi4vD1:KUxlTexHnQpRd","tlshash":"bc62cea0082bd400eb971cc663cf7e3aae5e7215a440d57a5ffd1cd8acdad62136570e","first_seen":"2026-03-01T05:35:48.476908Z","last_seen":"2026-07-18T17:49:02.589534Z","times_seen":7,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":48,"send":0,"wait":56,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}