{"report_id":"dbb18d80-30c7-40cd-9df9-771882fe52fe","version":0,"status":"done","tags":[],"date":"2026-09-15T13:50:57Z","url":{"schema":"http","addr":"casinorainbet-canada.net/","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casinorainbet-canada.net/","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"title":"Official RainBet™ | CAD$500 Bonus + 100% Match","dom":{"size":349982,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63386)","md5":"5c62f99675bd5e3f5b342e52b66bf1a9","sha1":"0559bab55069da941effc3d037be347f7f252489","sha256":"8fbb0d7313d7c8644e18d4b0384f848b5a48452e13732cd3f9de16de3cf7adf6","sha512":"c125d398a766a874ddcf71f0952017f46b2b4a822efe580a7f5906825d963944f18658376c5addf61bdaf7345994dbb951515a96c30ef2219cd2ced0909c6fda","ssdeep":"3072:svzkdYY2TT56h6lxwD+ce+eaeneyeAq3UUAW:+FlRe5hUrW","tlshash":"4f74fae31500ee3a285b83d093249b577386f74dc6135d90e6ef836c8bf6e53ad25688","dom_hash":"domhash03efe544ef6d9c2e595624a1cb9d19ec","first_seen":"2026-09-15T13:51:00.749798Z","last_seen":"2026-09-15T13:55:27.341917Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"casinorainbet-canada.net/","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T13:50:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"casinorainbet-canada.net","ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-09-15T13:50:58.062867Z","last_seen":"2026-09-15T13:50:58.062867Z","alert_count":30,"request_count":15,"received_data":638381,"sent_data":9437,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casinorainbet-canada.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T14:29:51.602845Z","times_seen":436748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a9167256269637a319b5a64a828e705","sha1":"f3b0ee195bc380bbec7dc77a8cf44c38f13006ad","sha256":"3f6470de409d4e194e457b88cde94a9037367d515ab804540fc6307bef822e3a","sha512":"464a12bff1583bd083f97426ad5b3a7244495b652996fd50366ea29908c801e9e70082651fccc762c94ca41491ccc9cf843c4ef06f2e4b803fe1d1901f8574c7","ssdeep":"","tlshash":"f9f0a35d941425d5085675850464041e780b44c33dd0b4e9be5cc14c0b36b6f7efa7df","size":472,"data":"","first_seen":"2026-09-15T13:51:00.766862Z","last_seen":"2026-09-15T13:55:27.353277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecc6478d530c8f5f68e66ecbb15d3674","sha1":"6d6f7792b0a8497217c78305dee7c66f3203310d","sha256":"95325de73d3ce2cbc50601a5a280c80b1020c75344774f2c21484c883b96e3fc","sha512":"6a729c488e3775f67e2fb71b3cde956bfff9d30db905df1d59dea28d50b7348d5d7de9a780ddc1e1f324a47a9a950fc7d25cac88d4591949411fabb84bf9ed25","ssdeep":"","tlshash":"16b012a3083a02400a4113d414835000485c19d5318280d2ff4d40001f815c700327c8","size":93,"data":"","first_seen":"2026-07-15T07:58:47.850003Z","last_seen":"2026-09-15T13:55:27.35404Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"acf0d24caac6cd5ea7276714eeaecd44","sha1":"a0454ee7f5c20d2423eeeacf371d40f7d5e0f6aa","sha256":"09b0c4d1b70cc52b8293e585d0eb65c0bad274735b0318fd54e2d4f7ee9ecca8","sha512":"e847ae9c57306c365776617d3ea7c985e5099ec749210f2e4f5be2f97c8c12ebd22cee26a4cd14fa1eb3348510afbd35162dd68a14e0ce993df0e4f54e825861","ssdeep":"768:P9tZRDpI4LYIV2BZRl67wx1MSXbk6Xtv3yjMXpvhzdubvZ8GVmSMpeFK1EupjWg9:dRDpI4LjSH8nJrpk","tlshash":"ceb2f825b764257a44da1aefb14bb704be3714c37805e0a1a93e8c481fa3d5335b2fad","size":24953,"data":"","first_seen":"2026-09-15T13:51:00.768488Z","last_seen":"2026-09-15T13:55:27.354602Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"casinorainbet-canada.net/media/big-bass-bonanza-megaways-67fd29761cd1d555018261.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.726Z","timestamp":1789480225726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /media/big-bass-bonanza-megaways-67fd29761cd1d555018261.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Apr 2025 15:27:50 GMT\r\nx-rgw-object-type: Normal\r\netag: \"7ee1a3c1d5522feb93557016fd90f11d\"\r\nx-amz-request-id: tx0000086a3487af94c3a33-006aa94d21-2e378819-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qeF0TBpxDftSX1n9p0XFjyK1b6CpjM8JZTpSWoezUatUuuGuyCUPsNfdFof8VoeIJEdH8eXAN3st%2BmP8hDWGxot%2FnGUAwyzmbePp8TOtkrwIu8uhr7O%2BHgxSiDym0Qcyu6OJB7CVWBgn234%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b2de4ea5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6912,"size_decoded":7872,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ee1a3c1d5522feb93557016fd90f11d","sha1":"e8355568375312db45c6d043ff4762a200d07a39","sha256":"0898e162d9d53719e5fcbe42905673c47c1e72dde1951b0fe24bd568f8f39936","sha512":"f866e3ca0b6d4f47140bd425fd5a15abc745df13613b515eac09e4db1c217e4031ab1c4e12be5a63f978265e0c25f03ccf14c812d747ee63c9f0bf05ac71fe37","ssdeep":"192:bgU834+NitA9U7CWSvMhg97vp7L1HMXjj5f:b8yYwCzkg9Nf1Hmt","tlshash":"48e18d3730cf9781aa836911351c1ecf54066637919bfc8f7885c3a5ea848372a8d8b6","first_seen":"2026-07-15T07:58:47.824531Z","last_seen":"2026-09-15T13:55:27.350629Z","times_seen":5,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/media/crazy-coin-flip-6854fd608f755522946390.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.720Z","timestamp":1789480225720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /media/crazy-coin-flip-6854fd608f755522946390.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:19:12 GMT\r\nx-rgw-object-type: Normal\r\netag: \"517da4d88bfb81574bd395b2766dbf82\"\r\nx-amz-request-id: tx0000027e9b949a360d7fb-006aa94d21-2e3a13a8-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cC7fF2lrDRxyobuRY8K0U%2F%2FoEmpGkWufReVtJOCHPqlEdX91ASYKoLAPSIVkFV7e5A8H%2Fdjv7H9bADtBrzGRE8X7zQ977YtrYIQ8v43L3iJSM%2Bu12q3sRW6Zmw6i49TKWWLNTpq9EqogExE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b2ce4ca5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14488,"size_decoded":15451,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"517da4d88bfb81574bd395b2766dbf82","sha1":"321021adaeaf21583754e1c9b2f74eb325078b01","sha256":"e8a84f94ec073b968cdbfdb7cbb5715b7fc427952f7ac2f9af54cc01cdf807fa","sha512":"c5ca47bc69a31112d6da57720ca67dbd3d4b7f4ccb00b2543dd1f535d338abea3f730dd5fb9e099d43cee1cd0b2a934f02c0f2e78203ee16c99cb7ea12c5825f","ssdeep":"384:KYJgpkmH3pqqD4q4VUhxJhrtFsgt9KP3Ml+k8mj4R7ENl:TepbdkUbJh5FX9KPMl+z37ENl","tlshash":"1352d0490c8a7b439141348f0d5e24e59b003f27dc8bd5ebeb3890b54aa2c4acb36de3","first_seen":"2025-11-10T15:09:50.333151Z","last_seen":"2026-09-15T13:55:27.343776Z","times_seen":6,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/media/rainbet-logo-696e739d435b1865325084_457x156.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.450Z","timestamp":1789480225450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /media/rainbet-logo-696e739d435b1865325084_457x156.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 19 Jan 2026 18:10:39 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ca265593ece4163274471e4635ae92b6\"\r\nx-amz-request-id: tx000006c9607b3a950cc02-006aa94d21-2e378931-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKP7p20DgnODtdmUaE%2BbDYlvPJKEjxYQ80YMxLk30nWgg0aaM73Gv%2BFe2w1DxgpOFWNVd3Z4RB3e%2Br5cQHM%2ByxCBFlZz8zgF1EXA%2BnqNevL0NUMBVmEgQxSrICivh20FrTPoPeaD3jvDkLs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b11de4a5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7426,"size_decoded":8390,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca265593ece4163274471e4635ae92b6","sha1":"7aeb376433047aa1a3cc6421f22f951eec93460d","sha256":"8b52e4c93edd6b6761639e7217bb66025ce018ce1f2b2f73a9e6931277629eef","sha512":"f75e750b03a3664336096abbf14c869025938d470183665548785440cfc672609f2ea83ada18d256f7021fe267f86ebb9d32eb815e7e248a3be5b758688533b6","ssdeep":"192:RnVUEt182DjZXSKcrwUk5H3ZFaRQDpNnSPuYD:fUIO2D/crwUoXeRgnS7D","tlshash":"bbe1afd721c8d4b2b2495c6df8e50f2ef1c4bce84c8ade772529841189b7c60e36b252","first_seen":"2026-07-15T07:58:47.83243Z","last_seen":"2026-09-15T13:55:27.345871Z","times_seen":12,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/media/immortal-romance-6855522e36502395893490.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.723Z","timestamp":1789480225723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /media/immortal-romance-6855522e36502395893490.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 12:21:02 GMT\r\nx-rgw-object-type: Normal\r\netag: \"136c2e305c5fc2bd04e8526cbb78927f\"\r\nx-amz-request-id: tx000003722707d8f8578a0-006aa94d21-2e38c8cd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YedeuANWjU9ob6zj7u1qqsXx0CZv0uSMV81XYS9UXrHdrC4psUjaILNveL98S5oWO6OOFU8h3A68SifBrforKgvt%2F5qWRiXrk8se3f5Ha%2F22IWOv1O4yUQtEUHTMH0omXw3LRTaVx3U%2F3io%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b2de4da5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31080\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":31080,"size_decoded":32041,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"136c2e305c5fc2bd04e8526cbb78927f","sha1":"634a503c5c9b083d3ef9f4f4798b0d7b1b090919","sha256":"e277800779356465747847d3dbfbebb9047a1a93b3ed0aceba9b246a4af292a1","sha512":"c3dba0ee8b6af1d420db317be2aa0eb970bb547f3521e93f67c60ec9d2cb6e69a2c410e9f415b8dfb45198aa1c65e60802deedf15706c77c8caf8303df03c8a7","ssdeep":"768:dzUlctzpQBu5toqQilg9r/F+5L6RtUa3DePZavgJJNfP4es1AV:dYlctVVBQiy9r/cL6XUaC0oLNf7cs","tlshash":"20d2f16e916eca4d4ce800e7226ce3cb0b415b2c6bcf3669dbd5d80372511739aaf891","first_seen":"2026-07-15T07:58:47.762514Z","last_seen":"2026-09-15T13:55:27.34519Z","times_seen":5,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T13:50:25.029Z","timestamp":1789480225029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430; Expires=Thu, 17-Sep-26 13:50:25 GMT; Max-Age=172800; Path=/; Secure; HttpOnly\r\ncache-control: no-cache, private\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9ae5fYdVoeGkl%2FOhVDa6xT6OS7ctIP6t4vNX51V4NCCgLu3FtXW4Ai70ZVepp4KT12uMDktZAnq9h86vhJpbS30JBILYuQJkOUFXf1p1BPAmE7Wlgzl02OG2leDdZjeVJf9nQZICz3cz44%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819aecd3ea5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"http-cookie","value":"1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430","quoted":false,"path":"/","raw_expires":"Thu, 17-Sep-26 13:50:25 GMT","max_age":172800,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430; Expires=Thu, 17-Sep-26 13:50:25 GMT; Max-Age=172800; Path=/; Secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":351877,"size_decoded":57008,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63412)","md5":"58e9a9316cbaf82a7090a5472f738ef8","sha1":"28e90a14495822b564361e32ab282df6bb56b6be","sha256":"830a1b95bfb01b09946ac817edb70fe56d24fc7f827ff2572aaf4e4d8a52f6a9","sha512":"784b428cac2acd74c8e11def278a712ec5058d665865f189b8d29957d18f1d252ec9cd238051659ab736a9900d712d6bbbe5b4f8ecb3229de661f7eb93dc8d59","ssdeep":"3072:nvzkdYY2TT56h6lxZD+g+8+m+5+a+aq20mA0:DkPdMxS050","tlshash":"7e74fae31500ee3a285b83d093249b577286f74dc6135d90e6ef836c8bf6e53ad35688","first_seen":"2026-09-15T13:51:00.755986Z","last_seen":"2026-09-15T13:51:00.755986Z","times_seen":1,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":13,"connect":35,"send":0,"wait":186,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/media/favicon-rainbet-696e73a68e392311559144.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:26.321Z","timestamp":1789480226321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /media/favicon-rainbet-696e73a68e392311559144.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 19 Jan 2026 18:10:46 GMT\r\nx-rgw-object-type: Normal\r\netag: \"16a2a18afdd98e09cf6c56d272de4318\"\r\nx-amz-request-id: tx00000bcc8c9d85156f0ea-006aa94d22-2e36961d-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFxc1I3zcutihAxRiMbCVehCSaJmTA4xI2auC2r0mCAxlw1LiOphJRlTTGdxZjbzGnpTheuu6gxXoyCVdcBPGbhj%2F81UMWu1ghcXrxRU%2FEEQJFkHxdjsVWO6KeGB%2FiVUHjTHVFclXz05KH8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b68f07a5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11086,"size_decoded":12050,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16a2a18afdd98e09cf6c56d272de4318","sha1":"044f3b36acc71b547934b998331319605bbd1e04","sha256":"604694e170f85e28737886427cbae4d5b3d4a8eebdc8daedd1c2ce60b5d07717","sha512":"0ba7fc83fff5797e7ab68263cf67f718c14ecf8e08db0037220db58c6acb8b67a78b74459f3f7b28739887d40055c23c340953d901b4c59bc620f32f98f0feef","ssdeep":"192:FDHd8AFZQJ00ebN/jlqfRiTSJImYhbnC/HuwNqKHZYRS1+hvb25FV/tVoJfTwOL7:v8AoJdepjlqfRiLxRnC/HxUKKRSA1q56","tlshash":"c232c038a28d758630ce19509376cd30904ca84bd79d3cdb862c69af4c4866eba7bd16","first_seen":"2026-07-15T07:58:47.573374Z","last_seen":"2026-09-15T13:55:27.349558Z","times_seen":12,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/media/tome-of-madness-6855019d2a99b798700716_365x312.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.731Z","timestamp":1789480225731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /media/tome-of-madness-6855019d2a99b798700716_365x312.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:35:41 GMT\r\nx-rgw-object-type: Normal\r\netag: \"160288684380e3e73124972bee4bfad8\"\r\nx-amz-request-id: tx00000dc9f61efd533922a-006aa94d21-2e36314c-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlhzsI9znjmh2XITpwORkvVvI28eiv09wkIjXdvAagoOhovNLMnRzp%2B6UVT80bab%2Fqvu8NpkhladSjSBGNS1S5vSiQE9LjzviePe2oPXiCKv%2FOFFFVDv53Qcp0ZaySDW0aLAZzSA%2Fi1eYy0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b2de50a5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21364\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21364,"size_decoded":22327,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 365x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"160288684380e3e73124972bee4bfad8","sha1":"5b9f4bf0867bd774afeb0550ad0940168adbb797","sha256":"c3881fa847762a35683b3f8d18661fbe89a12d5b644a7535f4e90f1159fa71de","sha512":"ec389bb4db4d56842d0afda17557592234c9d48e5f3546548997e016affa2692cf7cfaed45f3abdf5c1d15798de423eb6bea9fd9a7f636c8c9a92397edb37ea9","ssdeep":"384:l3f4fvI2wfu82Veh+9iZ5Z5EfE1161mnq/0PIYieWJyqr7qH68bKt:Rf8LCth+96Zqc1Q1b8PIYieWtuHm","tlshash":"6aa2d0764f2a795bc1028201ba0918692a9a1d9d357ffb0e0fc435f472fa8f7c0da462","first_seen":"2025-12-08T06:56:23.149438Z","last_seen":"2026-09-15T13:55:27.347775Z","times_seen":3,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/media/legacy-of-dead-67fd2be2191ca545468439.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.732Z","timestamp":1789480225732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /media/legacy-of-dead-67fd2be2191ca545468439.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:28 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Apr 2025 15:38:10 GMT\r\nx-rgw-object-type: Normal\r\netag: \"2f877280a97a1a8e4203c03b330936f8\"\r\nx-amz-request-id: tx0000062f3c84ad9f7b2c6-006aa94d23-2e3a135d-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQeZvSNmxGAH2CEQ6opEQWYXhm6j54JviWdRfQbtNJcdSAAVf7hN3Q9msJ4yTmTOe%2BA8RGOOk5%2BnOSUgw9YY3%2F6rqb3%2BhKzqA%2FjBZrumcvGA5u4c0wneZcar%2FDDARxTNp29e3sD9vvacAPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b2de51a5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10838\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10838,"size_decoded":11805,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2f877280a97a1a8e4203c03b330936f8","sha1":"df6efa9d4938ead33b1728bc64c0b324e57028a2","sha256":"ff122df643672cadae04e24de0fdd7cf9fa9571cfb34dd70de8d2cc7b2ba3912","sha512":"4ea266ab88e3ca3c93d8c5b30d577c75311fa4f837b33d1ba243faf9f46bf1c8ad0fe85693ab6932cc3f5e05842c744f19d688aa6c8c0cb99f3723cdeb973a28","ssdeep":"192:nOKeFMwcgHa81drGUvbHwBbQ+3IFa81rzbrfa1Vbj0EecdVMkDUraG:OKWMcHa8S2wBbQ+3T8pnra1NjrTdVMj","tlshash":"d622cfb75fba00d0064713e4ddd670b03e1c9472dad13b46e8ea6f5781b9cbac12896c","first_seen":"2026-07-15T07:58:47.63786Z","last_seen":"2026-09-15T13:55:27.351197Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2283,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/media/reactoonz-68556e8a17450677272831_365x312.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.734Z","timestamp":1789480225734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /media/reactoonz-68556e8a17450677272831_365x312.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:37:47 GMT\r\nx-rgw-object-type: Normal\r\netag: \"bd3be7a4aac2f3a7a0577391dea2ab4c\"\r\nx-amz-request-id: tx0000048fa3ea226645247-006aa94d21-2e36314c-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTs%2FXRTsI%2FiwqR4xNvFb07sBFHXwZa3F7Yr0rvmNEfGp9u2lcc41%2BVCbVWIZKCtllV3iYm2adcu69FOea9w6tjQhE5AHb6PM5F2jTtMyukD%2B4qlFC0vd1cNQOiPIRcC5MN658OpJ2XkMVVM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b2ee52a5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25820\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25820,"size_decoded":26783,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 365x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd3be7a4aac2f3a7a0577391dea2ab4c","sha1":"797e3f566cbd3ba5ad162c6f742f14ecc6915991","sha256":"ad7a072cc0e5d4e5d4a5b7be11a23f383bdab1b9987d44cad5044f9b2ad65801","sha512":"a2af3801cd3073b92e4480afe88e20656f1a8774cfe99a5c80433631088238479995a54bd1801d037f6682ca90acebeada5558cab4f602c958f0b4eaa066c113","ssdeep":"768:CtLTpdK/PJgYpGb0O8SS61vMcfBrJ2hhG:AXTUhsDtx1dRJ2hhG","tlshash":"7fc2d0737494d6082c2c8ed139b1b7d5525958dfd35a23f3b18820e71d32f7a98e6e11","first_seen":"2026-07-15T07:58:47.646208Z","last_seen":"2026-09-15T13:55:27.352727Z","times_seen":3,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.482Z","timestamp":1789480225482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 17 Sep 2026 13:50:25 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYpibzatfdlxBXuoUNWKGfSbWxdnc9nrc9CYHbMZ1BnnBeORmCAHpEc3hTF2gDcCUBfQZmDgE3xKtQ3MNDvAKu1OgN%2FUm6ctaHU%2Fncg4JfgsEFd%2F5H%2BMsrRD%2B1Kxao99B2G%2F2fNtf4hIIAs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\nserver: cloudflare\r\ncf-ray: a3b819b14defa5a4-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1308,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T14:29:51.602845Z","times_seen":436748,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/media/razor-shark-68550077cef39870616619_416x312.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.728Z","timestamp":1789480225728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /media/razor-shark-68550077cef39870616619_416x312.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:35:23 GMT\r\nx-rgw-object-type: Normal\r\netag: \"f2318020f38b8f8af47c637b5563a7ec\"\r\nx-amz-request-id: tx0000098e43c997cfe793d-006aa94d21-2e41f610-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFFz8xycjWpEspl3%2Bqe28Qe0ahB16WN1BRuOiA6uCvY%2FSLbu5MK0JhYrh2IqwLQsVtoqD50HfF4g2bhi7e%2FwIItgZXpfCzPA5rqV%2FiixVHN9rMtwRCCipiwGJGbwwXHSWiQsnq6%2FnaLd0ig%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b2de4fa5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34370\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34370,"size_decoded":35335,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 416x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2318020f38b8f8af47c637b5563a7ec","sha1":"69df90e9ed17ec5c269fb8b264af62dd3563b0eb","sha256":"1171b09d4879599e61e6ee02b9e5cea3b2378251bb8cb5e8da90893194d3e26e","sha512":"4087933f2f236cec097093418e418d17d8ff4a221706d05d7932e324fbcd98421779f7e62bfb4ca45aa4f765c6a45d7cd129e7d6d6d7129074a4a507657bd42d","ssdeep":"768:E73tB9+V/OBLRVllmEekach0FsIplbZlMHYyzU8yieoE+c9x:C3C/OzVllmXFXVluYyp4Xr","tlshash":"31f2f1d27577aed7abe02254bc4220c04965a89f4249cabc6bcbd464f9c6003cdd29f5","first_seen":"2026-07-15T07:58:47.847196Z","last_seen":"2026-09-15T13:55:27.348455Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1812,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/assets/fonts/exo/Exo-Regular-dRuUrx5.woff2","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.447Z","timestamp":1789480225447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /assets/fonts/exo/Exo-Regular-dRuUrx5.woff2 HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casinorainbet-canada.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 08:35:17 GMT\r\netag: \"6aa26bc5-2fe8\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRoH0pz0QTFPAvrTLrqz9WppCHap6Zz9aU8MnvIJpipA%2BLna4qFLUbY%2FhuIyD%2F%2BPUGhsj6eR8Mz8OoELBd6QfUklcTLCGjcv8gFxZihTrT37Jj%2FBTMPHn2jBJxkYtT4Y%2BPA8HucpRQOMAII%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b11de2a5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12264,"size_decoded":13542,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12264, version 1.0","md5":"02937a1785441f2ea3a18fb652872c02","sha1":"7c7e177a3d0d02036fbb17ba638d4e8ddea24d3d","sha256":"54be207d1f76e357721a5a6f203e5a2e62cdc6857b6ac2fb529ff675cfc337cc","sha512":"1a0b4f3ad34a2dfeda5070bf64cd234579517722d68d249bd99b4c785f7d0315dc11957288651c64ca83db5d7908fb82690799f9bc705181961b462224179911","ssdeep":"192:591I3+HJCIKim6la215/mwEdNR4Z2U3DZ4cEkDHg0Y9OnOnFPFlkcznDwTP+2x5z:/rEtol5/mwWs2U394c89OnmLn++2IBRe","tlshash":"8442c0525088b45bbd8613e77c0ae3e8a7914f94e09769d897cab634c08ea57d83790c","first_seen":"2025-06-21T22:25:39.97851Z","last_seen":"2026-09-15T13:55:27.349024Z","times_seen":518,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/assets/fonts/exo/Exo-Bold-KTP6gCR.woff2","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.449Z","timestamp":1789480225449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /assets/fonts/exo/Exo-Bold-KTP6gCR.woff2 HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casinorainbet-canada.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 08:35:17 GMT\r\netag: \"6aa26bc5-2fb4\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yfk0l9MQi0s%2FHKVceOy8UDCS6I5dsggnmADimqqVnDcV%2BAgruitAWqRsUvPxN92wcdtV4pnYjoYb9Wckg09DnGDRcafHhhZOEQ60FTjKOeqeSV4Tbb79ZRuUjhxTkSV7EmYCLlynq68o3lk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b11de3a5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12212,"size_decoded":13482,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12212, version 1.0","md5":"a3a53af2eb3f1e1280e1f1d2a8ed91cf","sha1":"0627e8bacc7b5e874a46cfb03b928d52ba183ec0","sha256":"2551840e57fde2f6a58f300f364a798be1ca8bd49753777adca5f74f41102777","sha512":"43dc7bdf69ee3b2686da5383636d7be13a94466ca99a535c24d27c4f5e29fc331651fbcaaa8826f6031a22e11590ae3937096ee487bbd5f3a9c16f9539bf05da","ssdeep":"192:pDpBD4PPvItyxEhy9Xk7uFXWtuWSNzRoDbl3qvbzoW9r7bGJUjBVqq+4Kf664YTD:FpSXR+hy2ipWuxZUp32XJnGQVqtxiQTD","tlshash":"4642bfde33b91e5ce5c0703d1de92332e228b7add06e0942d9d52583f7c286a96b946c","first_seen":"2025-06-21T16:29:17.315005Z","last_seen":"2026-09-15T13:55:27.350114Z","times_seen":121,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/media/casino-banner-war-6a4cfcae57e43734115852.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.451Z","timestamp":1789480225451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /media/casino-banner-war-6a4cfcae57e43734115852.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 13:18:38 GMT\r\nx-rgw-object-type: Normal\r\netag: \"674d0751fd8677a42a15dcb3a3121075\"\r\nx-amz-request-id: tx0000080c951debf18d575-006aa94d21-2e378819-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPMJ7bL1b36RBdiLLJilLMG3gsOe0PJ6gYZJ%2FfB6fOqUSL92mohNdgc1ZiKi2Ot%2FwJlnhmU4hSf86s7CqKtiup1yzDy7JPaTPqLwY6Y89jF4tWb%2FsHxo7hH7nKZyZ%2Fl8BQBXGdl6j%2FonCRg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b11de5a5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29974,"size_decoded":30939,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"674d0751fd8677a42a15dcb3a3121075","sha1":"bdcead5de67c73d29778a69ad9b38f3ff07514ec","sha256":"151144b78311f6dc8fb3c7fc711e93e01b0af79a26699f170b039dde698f9b74","sha512":"84548e4c983a9dff2e36721e7f585327771f8082b3a5693ead1acd0e7589e766ad36e33d8c324e121f535f4fb218ba299892cb200525577e15914744a28427c8","ssdeep":"768:o3TQI2AKaOcQcJM9lXl65zJYqGy7wMJSBZ/Xp:o3TQI28OTcJmV6HYpy7wln","tlshash":"77d2f132f3eb981c1969630c6fcf9009753524c987d2e33ea4d0a529c735dbd9b489aa","first_seen":"2026-09-15T13:51:00.764653Z","last_seen":"2026-09-15T13:55:27.346511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":1475,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet-canada.net/assets/images/apps/apps-2-m66G4Wy.webp","fqdn":"casinorainbet-canada.net","domain":"casinorainbet-canada.net","tld":"net"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinorainbet-canada.net/","date":"2026-09-15T13:50:25.463Z","timestamp":1789480225463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet-canada.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 02:36:59 GMT","end":"Sun, 13 Dec 2026 03:36:57 GMT"},"fingerprint":{"sha1":"98:76:A2:33:A6:2B:87:D3:F1:C0:DB:94:FE:2F:07:CF:F7:3F:6D:9A","sha256":"ED:19:76:1D:09:2D:61:42:D3:C9:C0:4E:2D:D2:21:38:D6:12:B7:CA:03:D4:63:E6:57:3F:65:B4:BC:41:FE:68"}}},"request":{"raw":"GET /assets/images/apps/apps-2-m66G4Wy.webp HTTP/1.1\r\nHost: casinorainbet-canada.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet-canada.net/\r\nCookie: http-cookie=1789480226.184.4672.571489|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 08:35:17 GMT\r\netag: \"6aa26bc5-cb06\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJOuzQYABIVvOCt0lKdcdmEPflm7Uip7TyvR6Cd%2F3WELdF8CY17VKHT6G4gufCThQp5LPWNii6prDV38yT9a9n0mh07f1g28kyWccV2VPSWy%2B2fi3sZ1xvbGLauUAZKviAiiYwDbfGiuUeU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b819b13de9a5a4-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51974,"size_decoded":53241,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d993fca38f2f2fd85c61b809ab21e12d","sha1":"6e90f8eb8052872c98c7a39367639b79efcab6d2","sha256":"38697368054ff61f8d6cc48f4b2fd9859fc57b8697d4283149be0ac38d78635a","sha512":"412dc7626e65e547e9921b5fab72cb7dc4f0aab756d80c4223238d03b792c04562ed3432e30c73b45e58ce160376da58349118af106796c4eb0c745ea15a4521","ssdeep":"1536:c9MhKNS6+4LMR6cEDk+Ydu8VZm4DX6PHlm1ly5:qMhKNS6+OM/Z+Yu8Wo6Pi4","tlshash":"d433f1fc90c2676846a4dcca3e846f4a123e053970b5a1d6f327135b8962ee7b14e968","first_seen":"2026-04-29T02:33:08.384758Z","last_seen":"2026-09-15T13:55:27.344516Z","times_seen":6,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":334,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"casinorainbet-canada.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}