{"report_id":"98e386b6-ffed-4f08-b7ba-0404133c9b79","version":0,"status":"done","tags":[],"date":"2026-08-09T10:12:47Z","url":{"schema":"http","addr":"ethereumbetting.ca/","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"104.21.4.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ethereumbetting.ca/","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"title":"Ethereum Betting Login ⭐️ Casino Ethereum Official Site Canada","dom":{"size":82355,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"7d0d4e01498c72b5ca6d4a448f73ac59","sha1":"97e5d38309d11f0660aabbec5ed46cde437dd32a","sha256":"45c82d8e005a9ebb5921879edbe1cb524d63769aa07cdbdac1bef037d5855201","sha512":"507462fc3f04c0397870043ff07c2b2c0513cf2632df8058354c4515c128c99dfa318ad70f63dd6a7b347328302a02aefb2a394e532b48710f5b16383c37e321","ssdeep":"1536:GJ9ypK+gi86hcLYQ7IslERIRX5eARXnARBhM4iA:GJYM+H86hc173lEY4iA","tlshash":"5e83f873c0f101fb229a82d5d255b709bf506403d9096aa1b7bd414d6f8bfee227729c","dom_hash":"domhashd90cde8d03c6f2097145aa5cb0de133d","first_seen":"2026-08-09T10:07:37.863245Z","last_seen":"2026-08-09T10:12:48.145496Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ethereumbetting.ca/","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"104.21.4.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-13T10:12:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ethereumbetting.ca","ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-06","domain_rank":0,"first_seen":"2026-08-09T10:07:34.966641Z","last_seen":"2026-08-09T10:07:34.966641Z","alert_count":20,"request_count":20,"received_data":393297,"sent_data":10903,"comment":"","tags":null,"fingerprints":[{"name":"Yoast SEO:28.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WP-Optimize","description":"WP-Optimize is an all-in-one WordPress plugin that cleans your database, compresses your large images and caches your site.","website":"https://getwpo.com","common_platform_enumeration":"","icon":"WP-Optimize.png","categories":["WordPress plugins","Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ethereumbetting.ca/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-10T16:52:18.865547Z","times_seen":417635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2958766eef78a2063bfa267113c9aecf","sha1":"5a2cf6c9fced4915a6f0dea16a5f56eb4f92e110","sha256":"fb1933eb6e59d90057b9a004fee9c3bb271a4d0db142beed79d4705cbe8d9365","sha512":"a4bf2722a54954dd71b9986ee6e6cd5698b97172b62963dca2073d14c822c52438d5e83f88d02cb04ad64baa955c5be7ac5959f936bb2c4d43b328b7d0c8557d","ssdeep":"","tlshash":"b7e0d878b39c41d5901d703e4357edcdfe3c04f769053969ac4c6cf411444ad7154939","size":353,"data":"","first_seen":"2023-12-09T20:26:20Z","last_seen":"2026-08-10T10:16:30.342408Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"94fce6b56e77dd770ecb18cefde89f97","sha1":"f17729e3d14b076316091b013ce95ca12d51735f","sha256":"12a80d634ee6d2a9d948210e580a435fa6cc9610ff228cbfbe4474548e670985","sha512":"b0a69e6296c2d8c2563e9c164463f99f472fd542542fe442b04c9596a41d4c9bcefcbf454784c59c17973a91a0be7e28e048475a26d07c0c197a0e760a41f46d","ssdeep":"","tlshash":"abe0c284a25c1d94e193363b7f3645da283807f159a2d8acc88fad503092c8046eb5a8","size":295,"data":"","first_seen":"2026-06-18T12:05:09.35784Z","last_seen":"2026-08-09T10:12:48.159564Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/pll_cookie_script-js-after","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51659d2d2e98fa06783e0eed58ae8773","sha1":"f750ae50f15e7e3d292b7102bff487de7be172ab","sha256":"794f1ff1ccd0b20807f1047dadbc8d64e41cd945cbe983d2df3c0947d7d68b49","sha512":"5f6d4496d5dd1c9c8243c6e416c91a19ef55a43975c932e738c1eaca341d19dbd6a2e6e004f3d5cab4a706a1d32debd4ebbeec8e22c8adc30c663f0407fbb6f3","ssdeep":"","tlshash":"cd21c284e25c1d94e193363b7f3649da283807f1d9a2d8acc88fad503192c8146eb5a8","size":1241,"data":"","first_seen":"2026-08-09T10:07:37.893235Z","last_seen":"2026-08-09T10:12:48.160327Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ethereumbetting.ca/","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T10:12:19.973Z","timestamp":1786270339973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nwpo-cache-status: cached\r\nlast-modified: Thu, 06 Aug 2026 15:37:24 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3WpWFMUkJnCGL5s8kROfHLvdPjVGBFvP9yLWEnhCZQVu5jR4Tnyv268Wdb1ArOVX3NTQCPPVnSKbS27xvIiCmnMBl3Wtzo1HoXOmYUX8KMYMuOtvdjWjWFMaCXoTRKhV6Grtt4%3D\"}]}\r\npriority: u=0,i\r\nage: 12366\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285fb58fd70b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Yoast SEO:28.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WP-Optimize","description":"WP-Optimize is an all-in-one WordPress plugin that cleans your database, compresses your large images and caches your site.","website":"https://getwpo.com","common_platform_enumeration":"","icon":"WP-Optimize.png","categories":["WordPress plugins","Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":82948,"size_decoded":22300,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139), with CRLF, LF line terminators","md5":"4c966c30e5246a4bc5909134e354b035","sha1":"c7f30c3367205379353c1b4d8900319be81a30c6","sha256":"6136a268bc1c4b27b767d1fd2a1deb85b1f69bfcfe160ab22fdd7af13cd35f5e","sha512":"dfaaa5a059d2ff8cd48dcfaf167e55a146f0fd5fae8aebb84a3be2673dce80bdf75928e2b45eaf99b357ff1867f3a0f22d74379b2b833eec091d069f38311258","ssdeep":"1536:QN9ypEgv86lcFwA7IslwEDRXm67RXK7RBf9P4iB:QNYqK86lcJ73lwL4iB","tlshash":"7483f773c0f101fb22aa82d5d255b309bf50a403d9096aa5b7bd414c6f87fee227729d","first_seen":"2026-08-09T10:12:48.14656Z","last_seen":"2026-08-09T10:12:48.14656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/cache/wpo-minify/1782212697/assets/wpo-minify-header-08d620f5.min.css","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.223Z","timestamp":1786270340223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/cache/wpo-minify/1782212697/assets/wpo-minify-header-08d620f5.min.css HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2YeNvk1x%2F1Bk8rBD4a3DW3%2FVQz8g%2FkQ7fJz8ssF9PhPb3hMx%2F2aDHWfVe3E2gtZ7M6psE%2BwtomcoSk%2FpD9nxBTv9RKdS3BKmXYkY81RyTL5pEttvR3js3T1sv%2Br0mQyXYMvxQY%3D\"}]}\r\npriority: u=2,i=?0\r\nage: 12683\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285fb5a6d78b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":548,"size_decoded":1027,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-08-10T12:48:24.033462Z","times_seen":20724,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.225Z","timestamp":1786270340225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 11 Aug 2026 10:12:20 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JdpCwHopim2su5PWB4%2BtP%2F483ac0CAYt59JKKdivnLO3OKGKhSkCU23zE57K3%2BAb0s67NU6hXjbsVGvk9IOZESyxzmpf7y32XVS6E%2F2XoonHZ3qk8PeMv4T2ra0prxHrN0WzYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\nserver: cloudflare\r\ncf-ray: a285fb5a6d79b4ee-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-10T16:52:18.865547Z","times_seen":417635,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/uploads/resized/aviator-180-180.webp","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.345Z","timestamp":1786270340345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/uploads/resized/aviator-180-180.webp HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en-ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 01 Jun 2026 18:00:10 GMT\r\netag: \"6a1dc8aa-1a72\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 12648\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NIOHXCiuBQIZS3OQIAcpyTLUFMQbZLYCELj2jgkjAnoxn4bWy0Nik65mOBV%2FQhevK7WazT73CatXMaIvCZYx8y6mbR%2BRVUcjX2STEtHmTj2bHZ3NqLJYyloTBZADmjW%2BVYAZjRY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285fb5b2d90b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6770\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6770,"size_decoded":8040,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6554d6dfca5707b0dc5bd4366b3fddc9","sha1":"9892b21e43c5a008aa212303981b1106ddf85455","sha256":"c9aac198227e095795c235c2b86a328be52d447e5e795a59655bb2eea33f96cd","sha512":"9b4f23649996f962516cd8d916c7bde3c4fe64b3c789341cdec1e15138e7e73accd1c2e0e8d2f7ca31a4c154279e1722175b69ea9ce5dcbc1a2b23fecbfdb8dc","ssdeep":"192:2DKoXeZdTO1i6iDiUFWF27tSdea7uOhfkvXFW:mpkTcr2WClUuU8vk","tlshash":"c7d19e023d58a8edc9f57c557d7e2a6be8dfe0b200521a06d36dd3c906848ec3912325","first_seen":"2026-06-03T06:45:24.935506Z","last_seen":"2026-08-09T10:12:48.148667Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/uploads/resized/chicken-road-180-180.webp","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.346Z","timestamp":1786270340346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/uploads/resized/chicken-road-180-180.webp HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en-ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 19 May 2026 12:18:59 GMT\r\netag: \"6a0c5533-2538\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 12648\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cncy0Nd2uK69uOrPaXrux9bwxZYkuoAptDe5eHW%2FGh3n9rjaztCx0OivaMIH7KYFwwwuUlW5vS0EwjF5fElWg5IkVd%2BYsg6OzoksFuBVWzgJN0q0sOTmeqzMMQUy59nuf%2F0XQck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285fb5b2d91b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9528,"size_decoded":10798,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d462e2966b99f2c0b01ed35a3a6ce4f7","sha1":"9c5bf1dba0f0b5b3357fe3d8d5a90fd6a872e2f7","sha256":"cbf86dbd0f504387209bc7adec8bff7c172cca81ab0c9405d67ab38c6af059f8","sha512":"2709a170f221d80bb80c14c0bc63d2797fe39238197051be6d5ca7e016ccf530135ce41f79c63fd0d9abae2d92acd99cb010aab58074facff0b6d06d14e96b6e","ssdeep":"192:0kIrtzybxGKu2Lo1dKxX+YdYfnFYD8gZSLwZWgmMYEJf:0kIz8bXLNUYmgZDZrmMFp","tlshash":"7912c0d5cb7c0a756d6803926d67d78166620374089c4c78bf832947bb94ab3283c4ef","first_seen":"2026-05-19T22:46:39.101302Z","last_seen":"2026-08-09T10:12:48.149205Z","times_seen":11,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/apple-touch-icon.png","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.398Z","timestamp":1786270340398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en-ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 03 Jun 2026 10:53:11 GMT\r\netag: \"6a200797-b36b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nage: 11843\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FrkCDAHLNrTM0aqd2Lt2scRVKIYvYtN6MEroXqCX4VNRcE7TGw7NPTggik0t0xxtvOIGODCkGkomWPi%2B%2FGaNVCWpjqxaWOK93rDyBG%2Fw%2FSSM4jswZq4TYj%2FMCYCl7TOe6MFWTo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285fb5b7d9db4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45931\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45931,"size_decoded":47210,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"bd52b24424384f14833523ca8d7ad123","sha1":"032b75b97a38ed33c4b5ce78f46df478ab56199c","sha256":"53ee082c24eb6c2d929cef39e49ee5f0aade32560fcef96ac26e2f2459090ce2","sha512":"44e5e9837d30b1904829b3009f7e5e3dae3373de8c85b8317537d30f0f57519feeb5d6c9ab6f1480ab808dceb924a435128b3abe0a90c82514a1bf4c594feb30","ssdeep":"768:P8ZNoP+NZnrDDXO7zXHrQtw+DtoG775gQQ+Cx5jwpQkOZuQJzB8bz9lK1cQ:P5mdrybrQyotD71gmC7bZlJl8/9lKKQ","tlshash":"7323f123e456253eb3501f901f6eac1d6efb50cad8161b83482ba276607645c79cd78a","first_seen":"2026-08-09T10:07:37.883704Z","last_seen":"2026-08-09T10:12:48.150017Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/uploads/2026/06/background_image_6a1972e882e04.webp","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.292Z","timestamp":1786270340292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/background_image_6a1972e882e04.webp HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 03 Jun 2026 10:53:11 GMT\r\netag: \"6a200797-7912\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nage: 12643\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJRlnHdobbWpqBif0g47D4MkUtYv3z7TRrYBWjjHLVwaJHSJNEhJltwQERu68xjxp2aZ4%2BbsSNGrZcdyjL6Bs370agg0mhXtYetoETM9lg3y3VHe0%2FGiyt75sc%2B627ui7KMV4fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285fb5add85b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30994,"size_decoded":32265,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 988x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3db026351ded3d4883b8902e80691a5d","sha1":"34c1a9d48576125f5cafaa00f192be2788126d50","sha256":"237562c2bcc18b63071d4979f49a8f10f78f320dd2c4759c23f95d1eb40ab77a","sha512":"a5411500123f154e2d18102aa4e4a3159b40b67790b92ef3e28afa42babfdb30f90737d414d9367200116f71ca574fa51679251b74c3ed4016b9eb5ec73d110b","ssdeep":"768:kEUnzUTK0FgCGq8DilhHGXc6TqhU0lC0ktX7JQvidtRz:kEUOgC7NlxZ6TqhU0lC0ktFpLRz","tlshash":"dad2f1d7073de30a60a5936f495f0b6a8134781f132cf391e4a0aa17959ee5c947bcf1","first_seen":"2026-08-09T10:07:37.881637Z","last_seen":"2026-08-09T10:12:48.150953Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/themes/mono-casino.child.theme/img/sprite/icons-sprite.svg?3","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.297Z","timestamp":1786270340297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/themes/mono-casino.child.theme/img/sprite/icons-sprite.svg?3 HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 23 Jun 2026 11:04:54 GMT\r\netag: \"6a3a6856-39f1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nage: 12683\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIsggKB9W3sdSqGPxBgFPYz4TkDmrH2%2FXbzrMGcHd7CA87sVK%2Fhd4HzqLZm7LUfVjAT8VD370CjiKBBzN0GcWoCtqr7iMKmXhrFYs%2FIOuZ7vBHKhKAu5kTpqFhN1VmNN9W5z208%3D\"}]}\r\ncf-ray: a285fb5add86b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14833,"size_decoded":7005,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9706bb3e3e792ff45a76f00c29a79e01","sha1":"ddbcc21a41cecd2aef314bd88d8dc62840a9a6b2","sha256":"e22d26903c8b900671631e742f8022c24f38b95f2f3fa700a0423383015d82de","sha512":"8cafdf520d347a167527979bc09aa86fffd1c1ee712faa5821b3e94db2a4735f18671ccc76e1abba203bd6ab4b7b0771fbeaba748a5cea39b407533857fc8909","ssdeep":"384:uKnT1/Qkn2otwJ3FajMhW1JMZYIr0bcU17q0vUxWTGLMY:jtG3F4MZYIAbPptUxUo","tlshash":"f062b7da4764c7cc70cdce38ef796e85601f70bbb5ea82c896ea4718644b9e5fb04850","first_seen":"2026-03-08T13:54:10.699928Z","last_seen":"2026-08-09T10:12:48.151883Z","times_seen":38,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/favicon.svg","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.399Z","timestamp":1786270340399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en-ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Wed, 03 Jun 2026 10:53:11 GMT\r\netag: \"6a200797-21cb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nage: 12346\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQ3Mu%2FT2TyHjFwVW%2FcTphdPIjPKVVKJgbUnOyM2HKPOFDRazAsv1oZZ%2Ff%2BnLkZ%2Fqg4jAwHXMG7Nz4Uyy%2Fk677RCpvVCr5BGMgNwSB6MO6QW6vyJHHKneyNZPzCvQ2WQT6o1STsU%3D\"}]}\r\ncf-ray: a285fb5b7d9eb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8651,"size_decoded":7800,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcb983f2c6c350a28edc59e07176ef1b","sha1":"aeb73a587aecb5429f53c2639849132e1bb41a30","sha256":"e6de4bb229d0e2fdb60a64221c2034332245bf16132d0c09481710d90c8ac2d8","sha512":"b93f633231109ef3c38e58dc193ead50c4f4adc8b303b68965e69fdda1eec171c0a290e5090c1c3a5ff47bc7997293314c612eb5f8f23c8a4b81ad7a0d2951f6","ssdeep":"192:GkbGbPQ/f/qLJWbuYh91jXc7ZMFIVwYZoT418Lsl+MQI:tbqNVWbRFowuoTbQl+Mt","tlshash":"c902ae3fa65b9c1e12c73224c3689912d45e2568c46ed7af9dc0d12be0e03947ce5fd2","first_seen":"2026-08-09T10:07:37.87686Z","last_seen":"2026-08-09T10:12:48.152423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/uploads/resized/triple-card-poker-180-180.webp","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.347Z","timestamp":1786270340347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/uploads/resized/triple-card-poker-180-180.webp HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en-ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Apr 2026 09:14:10 GMT\r\netag: \"69f31d62-2888\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 12648\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VjIV5b5FkXCjPBWp14ug%2FUEfxWgebjrbmCDV8prBqRBrSV32JylqxhahQQI6LOjAGZrtG2ZO5JY49JTbpd4M4KljeshLyisllldnfqgBgRiBdqmqSjlNSWb5pQ4oWJIOkCYl5DA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285fb5b2d92b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10376\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10376,"size_decoded":11643,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6854d06ccbd02c9ff825055918a96b65","sha1":"3d2a6e861ace3611b78c8669752689444531ce5a","sha256":"ce4be4b796a85e128d7d7d6f1c62f9eb81470c646c7078d4c1d2b6bee9ac4b4f","sha512":"c13ab39ca2e4a9f2e7d7620038e65e96bf70c143f0df479bda806b70b0da5b04cb200933ec55b6d8b18f974fdaa58752faaabcbcf8e35684504bb5c66c9324c5","ssdeep":"192:+orEpSZg5P2s6lb+BRKIbR4wl8A+F2KBuXh2YVfxfrUk2Brct:+iEpPR6lORxbFTkuXhpRNUk2BrY","tlshash":"7a22bf689e704f91681abdde1d18cffd713016ec1e17232f5f67020731652d8a1abd98","first_seen":"2026-06-07T20:49:43.598586Z","last_seen":"2026-08-09T10:12:48.153256Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/cache/wpo-minify/1782212697/assets/wpo-minify-footer-709e0d07.min.js","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.226Z","timestamp":1786270340226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/cache/wpo-minify/1782212697/assets/wpo-minify-footer-709e0d07.min.js HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FpdCdpYlzg5szUqrggzy4bsduMjDJq7qzLv6bx9vClSMkXZqn5MhYbvurz%2BSPT0ZbhhIz7SrIHR2VseJ5CoQsCMwGG0jkqqurMw1MsBFjfcO4rpRtvFxjaYvRHjJFRzc9bx7rw%3D\"}]}\r\npriority: u=3,i=?0\r\nage: 12683\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285fb5a6d7ab4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":548,"size_decoded":1015,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-08-10T12:48:24.033462Z","times_seen":20724,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/uploads/2026/06/main_image_6a1972e7ee03f.webp","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.262Z","timestamp":1786270340262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/main_image_6a1972e7ee03f.webp HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 03 Jun 2026 10:53:11 GMT\r\netag: \"6a200797-35be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 12683\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDVy%2FGrQ90YcBKXRISO%2BFwL9T3pLX4%2FNq8AcZ%2FTII8ziaviyvldBMVkTT0gVrQWqsLpoQSmdEI%2FUbtlMGnUS%2BAmTaV8LbulshHpQRxjJVd4C20PAcNqmLsZstetesqeeziFyKLk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285fb5aad81b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13758\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13758,"size_decoded":15035,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a0c4f21607d406e2e329f9775ae34500","sha1":"a0bc7f891254b20627d03d698b30f8a3d532a3d8","sha256":"f8dc4b2ee49f44612da4320e4a02898fd066b634637c476b5de8a03a6d79b272","sha512":"519558aed7c649425585c5fcb657c2c86fd6f44eae73c5dd083efda867772fe2fa631233499245c803a987f7afdcfe90d36faadebb4ae54649be4fe9266b3f36","ssdeep":"384:aseISobK2eSduTrxY/X7cJTuXK8TKYXCXSigFNi/btXE:aS62eS0ZY/X7Ka9igD2XE","tlshash":"3d52c0d208e53c10caa77f250558aceba789181f00de4e756387be45245dbed532b91f","first_seen":"2026-08-09T10:07:37.878236Z","last_seen":"2026-08-09T10:12:48.153798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/uploads/2026/04/region-ca.svg","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.265Z","timestamp":1786270340265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/region-ca.svg HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 30 Apr 2026 09:14:08 GMT\r\netag: \"69f31d60-493\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 7671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wsg3kvdpt3ncYqJsxEhrwMx1B%2FbUFG3JvcZLsM78VOeEqKoJ9piMphpckyg7toUB%2B%2BvdM52f51CyrhM%2BCTUinL34HBB0Yj4EYMaUmKI%2Bqv697Cqw22a0snlehE7IyLjKGRaWfBw%3D\"}]}\r\ncf-ray: a285fb5aad82b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1171,"size_decoded":1844,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d08ccab9059d0350d3777b7a708c3b8","sha1":"719d0d87da48c32b39833cb3631a606e64a073c8","sha256":"3a90c217bbffa2441f9c0c7afd12912b95cc4bac65892af4a286e586053efbba","sha512":"413b604fbcf79a6c34d4c562ef5c105948d6f505c2b3d034921de2a7dc1dbbf2b7cc21750b12cba24f424b0d4e3b121deda066bebcd5b53edb256bafbd9ad381","ssdeep":"","tlshash":"ca21a9eccb4f48ab60203db0ef966a92127157a9869c053cb2449c567d1a3611d55ad4","first_seen":"2023-05-10T12:34:23Z","last_seen":"2026-08-09T10:12:48.154427Z","times_seen":94,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/uploads/resized/book-of-dead-180-180.webp","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.349Z","timestamp":1786270340349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/uploads/resized/book-of-dead-180-180.webp HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en-ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Apr 2026 09:14:10 GMT\r\netag: \"69f31d62-22f0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 12648\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52fXfSUb2DGXT9CZS7QuZehuiP7rlYijNFxqd%2FbWecmHL824FVTrD9pu4xWWVwXZyUSLdhtPFjaeSxi2QsGT33h3yFEODEOqVMD5KNSoNTOURSN3t4D%2BC8a2UQXzcommDMqOKu8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285fb5b2d93b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8944\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8944,"size_decoded":10212,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c12be765a5bea0fde969d4480777921a","sha1":"3f97d0a3387247e4831dd49f73ba858ae47ed488","sha256":"1b74e89abe18d6434617e0b8b4df90c8817483c9f3f49ef3e7f407b9772b6dfd","sha512":"defc2b59c18b358b90ee0139db2b2f2bb1e0f4021f41878c25b5d675406b8ef0b4343a469a863f7361edc22afd8733a557a94fe4a08c96f10c35b3b5ec027249","ssdeep":"192:bMrDdYekDC9PdoHEdBVe53CRt7cNDOJbuw16fAkIl7yXQuc:eeDC9PdokdBVe58t7cwJbj6fAkw7yA","tlshash":"da02af1e85b6c5f088b40e2817b279f474fbfb9b9284d750aac8019216f1f14fdb28a4","first_seen":"2026-05-18T22:46:44.984996Z","last_seen":"2026-08-09T10:12:48.155162Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/cache/wpo-minify/1782212697/assets/wpo-minify-footer-9b881b78.min.js","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.380Z","timestamp":1786270340380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/cache/wpo-minify/1782212697/assets/wpo-minify-footer-9b881b78.min.js HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en-ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqb37c%2FR%2Bkf6GlL0hYKGTvlcTn0205FNwUHM0dymlzWSX%2FNqHOIfCwRUTblK180c1zsU%2FmrAIbhU9YrkC%2FMSm2FkEYdcrlaxrxPxJKkIBYfYTXkWpzbghHj%2BoO90AobSt6EGX70%3D\"}]}\r\npriority: u=3,i=?0\r\nage: 12683\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285fb5b5d9ab4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":548,"size_decoded":1023,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-08-10T12:48:24.033462Z","times_seen":20724,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/cache/wpo-minify/1782212697/assets/wpo-minify-footer-9b881b78.min.js","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.228Z","timestamp":1786270340228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/cache/wpo-minify/1782212697/assets/wpo-minify-footer-9b881b78.min.js HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dRxLaXmczR0wh%2F%2FXbpnGldLX14YZ2nvNo%2BN7vKILO%2BiPIgGJ2tM6rM90mouJvwmHGu8ogzVcEzIvW%2FIg2U3UFD04ktpPC5URV5r8EPnlgI03C4cuxnKvIbJp4bGA9AQ2vmdnFc%3D\"}]}\r\npriority: u=3,i=?0\r\nage: 12683\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285fb5a6d7bb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":548,"size_decoded":1021,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-08-10T12:48:24.033462Z","times_seen":20724,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/uploads/resized/hero_image_6a1972e7f37d9-768.webp","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.266Z","timestamp":1786270340266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/uploads/resized/hero_image_6a1972e7f37d9-768.webp HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 12:29:31 GMT\r\netag: \"6a1986ab-1b314\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 12683\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=woSZhFoqMSPCOvG74rNcWiP6pyVcMv5K%2BsVph4NhlrB%2Bncg260YSm1o8j2BL1cJOYNtTQG1xELRUi7H6zWhfpROl2QCmUBUhJlf8ECAjqHJbbzkNllfnpu1A4d6JsjeFnGduEuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285fb5aad83b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111380,"size_decoded":112651,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb6f81e539d873a347b48cb2b6c88d38","sha1":"7dcc497f36824a7ad9eebb663ad2a27fbcfce391","sha256":"9568aaa4a932b696b5a6a4655446fd198938242526d427516ee4affeb619c21b","sha512":"8f79433d98adf97343eebd525679f57c0958ac3210f049248c8852352041a90ea4f61305cdb92c3f08a6122545c09bdb1f29b70d0d7d5d57d0eaad78bded2f35","ssdeep":"3072:8jWjA4gY0E6f7pXdokmzCQfmF0kQJAVHiCrT:0Wj6lukmzCmmakQSdiG","tlshash":"60b3127e92416f36a47e3da2ca30d648ac4eb544172b7d74e7ba28531afb90f145cf04","first_seen":"2026-08-09T10:07:37.880021Z","last_seen":"2026-08-09T10:12:48.15569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/cache/wpo-minify/1782212697/assets/wpo-minify-footer-709e0d07.min.js","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.344Z","timestamp":1786270340344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/cache/wpo-minify/1782212697/assets/wpo-minify-footer-709e0d07.min.js HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en-ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G9Fa1XVDgcyk4Rd%2BBrnGqRj1tD%2BjigE6KvWml9SVY%2FRCh0x372iy4zl%2BfsNJSOe782Uww%2FCak1%2F%2BNmUMjdMAMOIEWudvCaN2My5kd%2B4T8mWY2BOxNhb%2BiDRyavlWjsW6QNXVXjk%3D\"}]}\r\npriority: u=3,i=?0\r\nage: 12683\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a285fb5b2d8fb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":1029,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-08-10T12:48:24.033462Z","times_seen":20724,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/uploads/resized/big-bass-bonanza-180-180.webp","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.350Z","timestamp":1786270340350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/uploads/resized/big-bass-bonanza-180-180.webp HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en-ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 01 Jun 2026 18:00:10 GMT\r\netag: \"6a1dc8aa-25aa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 12648\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCMt2xtIT4YkDh04nc2W2jRLbMnHYt845JuxVjXRv9eJp7wywP7gTHpQtL4z27RuA5jUZMTVzuxfVkT%2F%2BIRxaURl3eHHGP%2FFiCqBhUMhnNSpSKKstyIxdg4GHUtntiDCkC6DY6s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285fb5b2d94b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9642,"size_decoded":10912,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d336d2a6c89b96a47556245ef73dbe46","sha1":"2ebedf186c4fe54cb03c40b6730fe8eb0601dbc1","sha256":"e2e99455e8fd618f84ffd8dd88ec5457439d02359e9f17f7f95679e29f323f31","sha512":"4b09c7cf95c5ce32494dd0cd9994c5f86d0c3e9a5bc716c71e77f5ce7bd8ea7462cad1e1f328a71e3adcdcf43c2252ddd8e961c43a8ad4053c24dadee01978ec","ssdeep":"192:oj46bd0yokBhE8EmkDf9ZjMIhe3fO6wH0NbjzWE8Id+A1irl80hF:sZd0uhORDrjXhe3guuE8O+A1iruyF","tlshash":"0e12bf06b35c2f56bcb44fa5199748956881a823c0f404e5244df7b0be76eb9fc42929","first_seen":"2026-06-07T23:57:28.192817Z","last_seen":"2026-08-09T10:12:48.156585Z","times_seen":12,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting.ca/wp-content/uploads/resized/starlight-princess-180-180.webp","fqdn":"ethereumbetting.ca","domain":"ethereumbetting.ca","tld":"ca"},"ip":{"addr":"172.67.131.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumbetting.ca/","date":"2026-08-09T10:12:20.351Z","timestamp":1786270340351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting.ca","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 20:25:44 GMT","end":"Sun, 01 Nov 2026 20:25:43 GMT"},"fingerprint":{"sha1":"71:DB:85:CB:EC:59:4F:7A:86:F2:88:A3:32:E9:04:95:BC:B3:44:B9","sha256":"3A:C0:AD:C2:C7:0D:66:9B:A1:57:C1:FE:43:92:AB:AC:02:7C:A3:5E:CC:B7:FC:3E:8F:8D:6F:EB:4D:50:08:7A"}}},"request":{"raw":"GET /wp-content/uploads/resized/starlight-princess-180-180.webp HTTP/1.1\r\nHost: ethereumbetting.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting.ca/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en-ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:12:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 01 Jun 2026 18:00:10 GMT\r\netag: \"6a1dc8aa-2d6a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: autoplay=(self \"https://www.youtube.com\"), camera=(), geolocation=(), microphone=(), fullscreen=(self), picture-in-picture=(self)\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 12648\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cD0bFn79ghUmXNYRIzrPxFUOoqh0YtuPxZizESZ1tObOyzjRuRFNo3VMpzGJvNNKbuQ%2Fe053a%2FUDTzugQpYExiXyvrfOkKVuA2Phx663GwGp0Oh%2B%2FmDxcXWjWiCSlPSBQ9%2FfCXU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a285fb5b2d95b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11626\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11626,"size_decoded":12901,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b5b1cf1ed08dc21a85ceeb3d23e5c34","sha1":"6ac40ff64b760aa55dbd09fb6df2941c2b7ca001","sha256":"2d1ecc6ee8850dc39aaeede83b0bd77501d0f286d0825c7c12d5f7cb17a7b239","sha512":"b4d367b076cf9240ace1a5437191203f80e46784a2e639248a46f7e62aa2a68d58b9b1de85b29e4ab061fe61b6f38b1bac449bd64a426a8beb259d509460aa81","ssdeep":"192:4v4A0C92f0xwL8HDs9yGoZPhUNDLllxms8SkpPIUhrIWtoTiBViGuxeaVqwnH:Q2cx88js9yjZGNDn8SkpPIeI0vVptaVn","tlshash":"0432c0a46b18a88b94b545879daae41c06e9fc44ca6077cf0143fe5c53cea3124f13bd","first_seen":"2026-05-19T22:46:39.112439Z","last_seen":"2026-08-09T10:12:48.15777Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}