{"report_id":"e9f24704-b4aa-4eea-b604-abeabafe671f","version":6,"status":"done","tags":[],"date":"2026-04-25T11:27:49Z","url":{"schema":"http","addr":"metamaskcasino.ca","fqdn":"metamaskcasino.ca","domain":"metamaskcasino.ca","tld":"ca"},"ip":{"addr":"172.67.194.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"metamaskcasino.ca/","fqdn":"metamaskcasino.ca","domain":"metamaskcasino.ca","tld":"ca"},"title":"Metamask Casinos - Your Guide to Crypto Gaming in Canada","dom":{"size":13039,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e8a57b7bb512160252a3aff81e3ea8db","sha1":"0ee18b37c88d0ffb08906bd3af81797b1cc748b3","sha256":"9082752388c5c4b7cf60ef1f7529c2a01031d79ded7ffb994b2369d8c1209aeb","sha512":"a3d1e4dbb4d881dbaa68e4a28027edcf65a58f52051b0526e1f94a268a8048a4c77e0bfadda05cad22c15c5eef90070e9ffd27704b497600e31005a0bdab2586","ssdeep":"192:BrDlHtaTMS2/9yQ72gBYNnY/Ypl8au4Bv9lSc:BrpHzGBX","tlshash":"87427813bce711aa744381956ba737fe7dbd94039305dd353a9c77a08f83bc68862688","dom_hash":"domhash4f3fea6b36bb810a17bc7d81e8c3f07e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"metamaskcasino.ca","fqdn":"metamaskcasino.ca","domain":"metamaskcasino.ca","tld":"ca"},"ip":{"addr":"172.67.194.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-30T11:27:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"topk2paycrypto.org","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-19","domain_rank":0,"first_seen":"2026-04-25T11:27:50.107609Z","last_seen":"2026-04-25T11:27:50.107609Z","alert_count":0,"request_count":6,"received_data":96434,"sent_data":2812,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":6,"received_data":231540,"sent_data":3315,"comment":"","tags":null,"fingerprints":null},{"fqdn":"metamaskcasino.ca","ip":{"addr":"104.21.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":5,"received_data":152725,"sent_data":2262,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":2,"received_data":14841,"sent_data":959,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"topk2paycrypto.org/ca/","fqdn":"topk2paycrypto.org","domain":"topk2paycrypto.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e23af65edffe860165d30ff268c876ea","sha1":"3624deaf683636cc0bfb36743f57c9c6259d522f","sha256":"d9d734b1963fe9bbf27f6555dc7835d03e3bf22dd30e36a41b8e6e2c0ea6febc","sha512":"3565a2adb870aef0006a6624139b0b5534a43a3db29817c65cbeeef1903b9f6b74b821969bd973b833eb80e9b9466e0f1fdda473ebc442dda63152412a7334ce","ssdeep":"","tlshash":"9d01e13e6aa67429c963312b27af7712386791036204de127f4ca3409fb18a3a965bc1","size":821,"data":"","first_seen":"2026-04-25T11:27:54.986331Z","last_seen":"2026-04-25T11:27:54.986331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcasino.ca/","fqdn":"metamaskcasino.ca","domain":"metamaskcasino.ca","tld":"ca"},"ip":{"addr":"104.21.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09492fc5ca88b22f51067e9e90d63a44","sha1":"096f7309369a988b907c63e33d1411d126243ed5","sha256":"4e790adeb87ae7a1650a0d331288773ff0165887561fefef213b4e82effdb363","sha512":"87d74992d75eb446cd708d41bac0e0ce3d1f53d68a40cdca50b19ba7b0c6e732b1d850298bd1c1cae749062af71f56d227a61a30ae64a545c8d91d1a6d663585","ssdeep":"","tlshash":"1c017b7fa9b9153001b7f22727aff2a035b550933204ec023eac46990fb6fa150f6ac5","size":674,"data":"","first_seen":"2026-04-25T11:27:54.988921Z","last_seen":"2026-04-25T11:27:54.988921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"topk2paycrypto.org/images/vavelogo.webp","fqdn":"topk2paycrypto.org","domain":"topk2paycrypto.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topk2paycrypto.org/ca/","date":"2026-04-25T11:27:29.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topk2paycrypto.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 10:05:21 GMT","end":"Fri, 24 Jul 2026 11:03:45 GMT"},"fingerprint":{"sha1":"CF:F0:53:D0:B4:DF:37:76:F3:3F:67:5E:67:E9:E3:9A:0A:53:73:04","sha256":"21:BD:B7:1C:4C:EB:51:6D:A4:B9:E8:37:45:16:0E:B0:B3:09:A0:5F:71:15:66:62:D8:2C:49:BE:44:43:94:3E"}}},"request":{"raw":"GET /images/vavelogo.webp HTTP/1.1\r\nHost: topk2paycrypto.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topk2paycrypto.org/ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11876\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 17 Mar 2026 08:37:19 GMT\r\netag: \"2e64-64d343e512dcd\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgnM2yyFt%2B2NIPwYVqKN5WvO95NortZnmoVD6LMqB6dYO%2BbQ7Q72JsgqNnPbPrSucYaFOaZtsW%2FWFs%2Bpd4VyRmYgAmHfBIk8pMF7iedVPcRKSSOz577v8blH1%2BatbpWsn3gR8dg%3D\"}]}\r\ncf-ray: 9f1cffaf0f45b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7020af84feead410f7277c2613c2791","sha1":"7f52dcb706643687323053889c088244d33dc76e","sha256":"0101f3ba7d56e8c2e3bc544ed80889ba026e09236e52b2fa934cdbd1bfd84e60","sha512":"c9250065f3377d864f99d3001b4b872b948396c454c2dc35ea3fda7d0c68530e66c2477dfdddcb2113bdc6b9247057b87d42a0c007e9b3bbafc5b9197a186f85","ssdeep":"192:lwoPKT+1UEJ8NKsti6we1PbvI6fcfDyfsMMY9qc4IOpRi1CL8h8fgu6cvJKhLx0+:vKT7EJ8sIiKPs6foDykMJ34ddA+fgDcq","tlshash":"3332d0be1d1686a7f55bb120a04d6bf8212777b7c07771ea377b2c5424324698438e8f","first_seen":"2026-04-25T11:27:54.966075Z","last_seen":"2026-04-25T11:27:54.966075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topk2paycrypto.org/ca/","fqdn":"topk2paycrypto.org","domain":"topk2paycrypto.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://metamaskcasino.ca/","date":"2026-04-25T11:27:28.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topk2paycrypto.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 10:05:21 GMT","end":"Fri, 24 Jul 2026 11:03:45 GMT"},"fingerprint":{"sha1":"CF:F0:53:D0:B4:DF:37:76:F3:3F:67:5E:67:E9:E3:9A:0A:53:73:04","sha256":"21:BD:B7:1C:4C:EB:51:6D:A4:B9:E8:37:45:16:0E:B0:B3:09:A0:5F:71:15:66:62:D8:2C:49:BE:44:43:94:3E"}}},"request":{"raw":"GET /ca/ HTTP/1.1\r\nHost: topk2paycrypto.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcasino.ca/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 17 Mar 2026 08:37:09 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZL6T1Fzg9rf41ylNqmiyFrgcN3jc94nYQJzY9LOJexFUs886S2bRagCO%2Fj3sfGvdyHy8BBB2iTxaic0n%2FIS6dJzm6LKKNZq4NxRbfaFunV1A2SD02rDVruZgwunTK%2BEsXRRL4c4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f1cffadbde1b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13501,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"db92eeb4f3eec807576eebaf621e4133","sha1":"7d4f18c45dbbf470c5603d053671c9dd5f388568","sha256":"d9b4fdafb65eaab7af77841bf6f12494999413a33adfdf62a8cd1ecdc0054705","sha512":"190019d232887c5ff3c3066dca7d22dce54c4f9886d2068880affc4ba33fec5e589b75f6d3437a543253ed46816abce2ce513bf91b1b133bcdd4c09803f1d11d","ssdeep":"96:jiVmtJm3jUW03F6clrOtaU0KH5/rsHgMpqYtKW+brRLzDpdMBuM0FI7w:WIHmIWUIIrOoU0KHZrsHlVbKRXXO7w","tlshash":"00524437b8c511ab543382559b63377ffebe801393015a353adc77a24fb69868c53a48","first_seen":"2026-04-25T11:27:54.968438Z","last_seen":"2026-04-25T11:27:54.968438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":220,"dns":29,"connect":1,"send":0,"wait":139,"receive":0,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamaskcasino.ca/","date":"2026-04-25T11:27:28.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metamaskcasino.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Apr 2026 02:00:56 GMT\r\nexpires: Sun, 25 Apr 2027 02:00:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33992\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-25T15:55:11.061613Z","times_seen":348983,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":87,"dns":1,"connect":20,"send":0,"wait":44,"receive":12,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamaskcasino.ca/","date":"2026-04-25T11:27:28.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metamaskcasino.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Apr 2026 02:00:56 GMT\r\nexpires: Sun, 25 Apr 2027 02:00:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33992\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-25T15:55:11.061613Z","times_seen":348983,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":79,"dns":1,"connect":21,"send":0,"wait":22,"receive":25,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamaskcasino.ca/","date":"2026-04-25T11:27:28.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metamaskcasino.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Apr 2026 02:00:56 GMT\r\nexpires: Sun, 25 Apr 2027 02:00:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33993\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-25T15:55:11.061613Z","times_seen":348983,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":140,"dns":1,"connect":22,"send":0,"wait":22,"receive":9,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topk2paycrypto.org/images/21bitlogo.png","fqdn":"topk2paycrypto.org","domain":"topk2paycrypto.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topk2paycrypto.org/ca/","date":"2026-04-25T11:27:29.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topk2paycrypto.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 10:05:21 GMT","end":"Fri, 24 Jul 2026 11:03:45 GMT"},"fingerprint":{"sha1":"CF:F0:53:D0:B4:DF:37:76:F3:3F:67:5E:67:E9:E3:9A:0A:53:73:04","sha256":"21:BD:B7:1C:4C:EB:51:6D:A4:B9:E8:37:45:16:0E:B0:B3:09:A0:5F:71:15:66:62:D8:2C:49:BE:44:43:94:3E"}}},"request":{"raw":"GET /images/21bitlogo.png HTTP/1.1\r\nHost: topk2paycrypto.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topk2paycrypto.org/ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 32111\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 17 Mar 2026 08:37:18 GMT\r\netag: \"7d6f-64d343e48e8a0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pN6gi1qQaYLT3ml30OMSw4rM80Kd01klajd8GqwZO%2FM7FFL7rXuicnGYcDeN%2FNnooLxsknAOmI104X%2Fm92Tlwo5L6zqijGox0Ib9MO78bK8GR6O73D3EIzuDIGhwQoJgzlQmXQo%3D\"}]}\r\ncf-ray: 9f1cffaf0f4cb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32111,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"01529ea8c2bc70d1a678fcca624edf4d","sha1":"1cca3cf412029ec36201801152b53d2524873354","sha256":"9125cab5f445d09f0ea6fb3da49b4412e0e6dfde2c268e1f5bbd0c4bb261077d","sha512":"10c0dd4f1a0a095c9d25e638a33ed8d6a1cd2a2a8816db1ee84c9a667ef9161bde46b1edbfbf76047252f72f69a62b202f99e8ac611bccd6d4e4e00c39daf94e","ssdeep":"768:mQeiwcfBmIrmKYoUIKlMLujb029hfeJ6WTJREJ:mQeiwOfrmn0Ke4hfxWTJc","tlshash":"c6e2e1e08f13ee6fdd08946dc9558042f24e90eab45d5f98f1ca997cc87105afe04b2e","first_seen":"2026-04-25T11:27:54.970627Z","last_seen":"2026-04-25T11:27:54.970627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcasino.ca/images/metamask.jpg","fqdn":"metamaskcasino.ca","domain":"metamaskcasino.ca","tld":"ca"},"ip":{"addr":"104.21.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskcasino.ca/","date":"2026-04-25T11:27:28.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcasino.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 12:41:44 GMT","end":"Fri, 03 Jul 2026 13:41:37 GMT"},"fingerprint":{"sha1":"BE:07:45:D6:AA:47:C8:67:1D:1B:E0:64:5F:92:04:29:56:67:B3:A3","sha256":"1C:E1:0B:46:1A:A1:3C:29:FE:70:AD:2A:D4:05:FA:71:6F:2C:E1:74:0C:A4:6A:72:64:F1:8D:D4:6F:2B:D9:C8"}}},"request":{"raw":"GET /images/metamask.jpg HTTP/1.1\r\nHost: metamaskcasino.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcasino.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:28 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 06 Feb 2026 12:18:19 GMT\r\netag: \"e408-64a26c8dfdab8\"\r\naccept-ranges: bytes\r\ncontent-length: 58376\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6NsyvWBuNLHPoTzVbGTAOOD2XNu9T4mHolmhvd%2FnyHKAJPtD0xDKGLLYSEeeSAc%2BNP4vMQcfl0UQGMnVc3Ox09v5ljmtyy953ZbdY5h%2FUeTk1HPsDTonS1XBVCqMd735v45MQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1cffac5c025685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58376,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=0], progressive, precision 8, 880x495, components 3","md5":"25f8a8c850d605363169090cc4f43f36","sha1":"915064ab470dc8b808e480d9100b95ab4ffe2eca","sha256":"61a7118950be25812d4eb104611023360bb71bbf4fceb2ba277b3dc1645d4055","sha512":"7105adbd7275c0564f772ed9723fd9f8549e01ca613f6749d80a7b6ca8cbb43182c27314b71166ba5b04b2bfca736a00bb0354333ed29586c3f7dc503efb455d","ssdeep":"1536:Ab/2eEJdQ6wZfyYY1ru/mKr6gtrIIxIg83K7TsNvx6jFv:AbtEJddYYQmKr6MMu836TsNvx6jl","tlshash":"2643027cde4c6d31ffe1e5b6ba899fda6300e09d7aa0f005a1ac900934e59150a3b1db","first_seen":"2026-04-25T11:27:54.974507Z","last_seen":"2026-04-25T11:27:54.974507Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcasino.ca/images/canada.png","fqdn":"metamaskcasino.ca","domain":"metamaskcasino.ca","tld":"ca"},"ip":{"addr":"104.21.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskcasino.ca/","date":"2026-04-25T11:27:28.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcasino.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 12:41:44 GMT","end":"Fri, 03 Jul 2026 13:41:37 GMT"},"fingerprint":{"sha1":"BE:07:45:D6:AA:47:C8:67:1D:1B:E0:64:5F:92:04:29:56:67:B3:A3","sha256":"1C:E1:0B:46:1A:A1:3C:29:FE:70:AD:2A:D4:05:FA:71:6F:2C:E1:74:0C:A4:6A:72:64:F1:8D:D4:6F:2B:D9:C8"}}},"request":{"raw":"GET /images/canada.png HTTP/1.1\r\nHost: metamaskcasino.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcasino.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:28 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 05 Feb 2026 17:24:12 GMT\r\netag: \"553b-64a16f0ec0700\"\r\naccept-ranges: bytes\r\ncontent-length: 21819\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFIGTe4fBGYL3KsJqtiDk3y0CMeGstLz7WYfw9TQzjYtCpxQjA7rEUGN%2BBn6OMrfBLDjhE9PNx91BfNiANdluuUyatc8D6BtnIbn29McTdVediDeIjsTZ8HFx7fnftWL68h7jQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1cffac5c015685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"65a31700c3cfbc3fc5d7e57f467627e8","sha1":"4e3dba8e26b34d503c2e7696a3bc2a7db343027d","sha256":"45c5e4b004bbd35fc708aa6a96ee71c238430447fd66ecb1898554fd0077c3f9","sha512":"c13679e0d8319d12f781a6bbd158840f9cbe21dbf1a7bef755bb1c0472127e4a2af5a88fba2de144f1dc72f0fe69156acf0d58d467097673248634e1c0dc4e46","ssdeep":"384:daXFW38ixLULYVHGyql/j1iymx+dAj4HKSqt0ObNPrNQLk5Ts53cEq+lbUtwRt93:daVdiEwHi/JiwdAjiKDTbtrNQq41cI9d","tlshash":"21a2e11a853342bdc5f8498a90ae4e960f8b2633c698dc4b274e6e48d54501956e8bdf","first_seen":"2025-11-21T19:54:47.678878Z","last_seen":"2026-04-25T16:50:04.539974Z","times_seen":3,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"topk2paycrypto.org/images/rakebit-logo1.webp","fqdn":"topk2paycrypto.org","domain":"topk2paycrypto.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topk2paycrypto.org/ca/","date":"2026-04-25T11:27:29.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topk2paycrypto.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 10:05:21 GMT","end":"Fri, 24 Jul 2026 11:03:45 GMT"},"fingerprint":{"sha1":"CF:F0:53:D0:B4:DF:37:76:F3:3F:67:5E:67:E9:E3:9A:0A:53:73:04","sha256":"21:BD:B7:1C:4C:EB:51:6D:A4:B9:E8:37:45:16:0E:B0:B3:09:A0:5F:71:15:66:62:D8:2C:49:BE:44:43:94:3E"}}},"request":{"raw":"GET /images/rakebit-logo1.webp HTTP/1.1\r\nHost: topk2paycrypto.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topk2paycrypto.org/ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12576\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 17 Mar 2026 08:37:19 GMT\r\netag: \"3120-64d343e4ce03f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3W2LkBARmFcK0K57DHv4EZLFvl7xEzh7I1Ua%2BDNeAWrlHyRvDSzEX58n8PcInvPCMGNAn7bPwgEYTZXKJA9am8elyJHOkOqnLtZerD0z8Xk8%2FmObSgu8kUI52J4rLbmvMfOahUg%3D\"}]}\r\ncf-ray: 9f1cffaf0f49b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12576,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7fd96f50b341181bacf0c9b9b0101494","sha1":"6b75fd378a3b9886a8393676ba0a1ee30b409411","sha256":"a8732f643dadb4867621299415875d7a12ec70ade6f5e8ed53c301524ff8a0d7","sha512":"b25ea24fbdf26a01e66dfc4019d2db2bcf746e1355ad26e88abf3a99882201e3b96b75cc6e11c1a031053d8412dcf6588f1ff9567b0d78405fca2909790acc3e","ssdeep":"384:nzSQlcimCYHyq98cHl+FUkNLnu5MDgY2m7NrI:nzS4cihYHy+HF+FUyLu5MDgaNrI","tlshash":"4042cf18daf11ca6b65b855e1aa11b3300a84739d7c75e033e72eb4fe49430d1f3019b","first_seen":"2026-04-25T11:27:54.978517Z","last_seen":"2026-04-25T11:27:54.978517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topk2paycrypto.org/images/bitStarz-logo.png","fqdn":"topk2paycrypto.org","domain":"topk2paycrypto.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topk2paycrypto.org/ca/","date":"2026-04-25T11:27:29.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topk2paycrypto.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 10:05:21 GMT","end":"Fri, 24 Jul 2026 11:03:45 GMT"},"fingerprint":{"sha1":"CF:F0:53:D0:B4:DF:37:76:F3:3F:67:5E:67:E9:E3:9A:0A:53:73:04","sha256":"21:BD:B7:1C:4C:EB:51:6D:A4:B9:E8:37:45:16:0E:B0:B3:09:A0:5F:71:15:66:62:D8:2C:49:BE:44:43:94:3E"}}},"request":{"raw":"GET /images/bitStarz-logo.png HTTP/1.1\r\nHost: topk2paycrypto.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topk2paycrypto.org/ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 10343\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 17 Mar 2026 08:37:18 GMT\r\netag: \"2867-64d343e4a1d38\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8je2g%2BqKQdDcPYmCl4l6gR62pNkCGrLsNdnp0oNiszgE2Vnz7iq%2B4%2BUdjLqQjxXE3wX%2BJkRL%2Fr64w9Yy0WOEt2x%2B5VhT3GCeGADSIPwEui6uxGvzNxaht2FCRETkgAsl2srzf2c%3D\"}]}\r\ncf-ray: 9f1cffaf0f4ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10343,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"2ec152207e9dad149eaed3c1edf2091d","sha1":"8bf3fb9e1b5e976596ef8f1ee79d3ae9801a2670","sha256":"fd712a2e839d5c1156bd0fa899cbd354b964677304a4764166187c9245a5a8f1","sha512":"574c7bb34be93ea5f03083d14383eda6b6f39a41ee66a2727e0263ba96ab9d6dff0327058c3c775f260cee51a0a35cd20bdceda50f08d795d51acdd108792d56","ssdeep":"192:OMJZ33/4Aslt0GMd/FiAU781gZ+wkJJNcpMDOgjUUPtQ:OyZ9GMdEWyZ+hxoMBjUCS","tlshash":"d4225c9b43f369696a9f75193c556b1df7ed8cd312772231fcb9b6620c10892a01ce4c","first_seen":"2026-04-25T11:27:54.979786Z","last_seen":"2026-04-25T11:27:54.979786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://topk2paycrypto.org/ca/","date":"2026-04-25T11:27:29.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://topk2paycrypto.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Apr 2026 02:00:56 GMT\r\nexpires: Sun, 25 Apr 2027 02:00:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33993\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-25T15:55:11.061613Z","times_seen":348983,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topk2paycrypto.org/images/wild-io-logo.png","fqdn":"topk2paycrypto.org","domain":"topk2paycrypto.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topk2paycrypto.org/ca/","date":"2026-04-25T11:27:29.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topk2paycrypto.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 10:05:21 GMT","end":"Fri, 24 Jul 2026 11:03:45 GMT"},"fingerprint":{"sha1":"CF:F0:53:D0:B4:DF:37:76:F3:3F:67:5E:67:E9:E3:9A:0A:53:73:04","sha256":"21:BD:B7:1C:4C:EB:51:6D:A4:B9:E8:37:45:16:0E:B0:B3:09:A0:5F:71:15:66:62:D8:2C:49:BE:44:43:94:3E"}}},"request":{"raw":"GET /images/wild-io-logo.png HTTP/1.1\r\nHost: topk2paycrypto.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topk2paycrypto.org/ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 12004\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 17 Mar 2026 08:37:19 GMT\r\netag: \"2ee4-64d343e529915\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zp6HhyYF05lsJH7lZ0zex598nAjm7TneFQj6KyrHZ6LCxjwULyGuUG4p7ok26hR3orV74DR1XYNUmQ7M%2BTZQnddNxM%2FbhD7utWBQjr9BX6lmy27bBqx7NkFCWomfIAWH093%2FpWw%3D\"}]}\r\ncf-ray: 9f1cffaf0f47b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 820 x 270, 8-bit colormap, non-interlaced","md5":"7c75aadc448fc09dd58a4f7695c8bba6","sha1":"5050cb7272971a2b13ee69c0f55321c53a764fa0","sha256":"c4424ebae654808a3e953bac795926381578199ba285cf27516aa841469d3772","sha512":"db566a46b2bfe994cfed93ff252d9eaf0d256a686e608d91641205327487dd54ecc4aae631c12da86a1c5858f5d5efc573c0b05d89894a06983dbb8cf08ef36c","ssdeep":"192:n/2oSQ/RvUxT7oQKWOmtyToLOPl4jf8fadbV5pexZ3KIdG1MZmkPxU+v:+LkvCTbK6ynPWjSxBKN1M8PO","tlshash":"9442b0aabdd602829deeecaa1eb6d44313564f4627734188b1327a06dd3a25a0231f17","first_seen":"2026-03-28T08:04:02.394336Z","last_seen":"2026-04-25T11:27:54.98093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcasino.ca/","fqdn":"metamaskcasino.ca","domain":"metamaskcasino.ca","tld":"ca"},"ip":{"addr":"104.21.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-25T11:27:28.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcasino.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 12:41:44 GMT","end":"Fri, 03 Jul 2026 13:41:37 GMT"},"fingerprint":{"sha1":"BE:07:45:D6:AA:47:C8:67:1D:1B:E0:64:5F:92:04:29:56:67:B3:A3","sha256":"1C:E1:0B:46:1A:A1:3C:29:FE:70:AD:2A:D4:05:FA:71:6F:2C:E1:74:0C:A4:6A:72:64:F1:8D:D4:6F:2B:D9:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamaskcasino.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:28 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 06 Feb 2026 12:21:13 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zl8nM9DWqjf%2BpjTaPyrhLYrX791%2FmxMI02oDmqqCedAwdfbrhfGDJEv%2BSLY5S6TJlqYKbgN5ZvlUOmE6bae3%2FpM9MOJBRURF6bkp0Tjf0d%2Bj0IMR9GYgoIqAVMNzC3vdMNx%2BkQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f1cffaa7ae70b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23925,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (338)","md5":"219a0130cf739c4ec3aeb810737ce600","sha1":"169f75f43a6d1d9f294ca751b0859f74e0efaf0a","sha256":"7c896885291aa672b2f2f07c2d87e3dabf1bc1537f0b881aacef92afd8640d6c","sha512":"fe4da38c55480f8447e9a659ded6332fde3ee8dc7cd063d92f511ef74dea124af12a36c89ec302522cb8651593d4ba489be0aaf4f1df2ab62976848b28e72d98","ssdeep":"384:vrRYYjnhUTwXsQBkv6b+v5zkfTjK+HKscuU60YcQj70tmxZzTsATPirJ+CVEH+tk:ZjnhUX6IyjKxujmKhu+CGetF+aFxnS","tlshash":"b3b20917e6983777228313627e5b6745ff75c01383246329b9eec01c2b9385f893ba99","first_seen":"2026-04-25T11:27:54.982137Z","last_seen":"2026-04-25T11:27:54.982137Z","times_seen":1,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":53,"dns":5,"connect":1,"send":0,"wait":130,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcasino.ca/styles.css","fqdn":"metamaskcasino.ca","domain":"metamaskcasino.ca","tld":"ca"},"ip":{"addr":"104.21.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcasino.ca/","date":"2026-04-25T11:27:28.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcasino.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 12:41:44 GMT","end":"Fri, 03 Jul 2026 13:41:37 GMT"},"fingerprint":{"sha1":"BE:07:45:D6:AA:47:C8:67:1D:1B:E0:64:5F:92:04:29:56:67:B3:A3","sha256":"1C:E1:0B:46:1A:A1:3C:29:FE:70:AD:2A:D4:05:FA:71:6F:2C:E1:74:0C:A4:6A:72:64:F1:8D:D4:6F:2B:D9:C8"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: metamaskcasino.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcasino.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:28 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 06 Feb 2026 12:20:42 GMT\r\netag: \"5af3-64a26d169ac16-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5449\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMNteeckh8feNEExnf1muryDfmYW6F3KU3XssvAJ6g4LqbmgC4jCXrnQLQqVsH5g%2FTQz0f9I2GSsCry3CilKGUrBvC9sxYVCQuMmNn6dtbx6116b4UHhmZ7tidWmulvRajAsjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1cffac5c005685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23283,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9069d33a8f058113204e8d151041e64a","sha1":"12c5e89501f9d7b8dfd034ab219ffe2ddb8fd79f","sha256":"a59ced9af50a88206229fde9bca509fa508372d2127deb473b77cbb41c9364d5","sha512":"48a9ad6be37faeaaf94e1a640b09ce0e46455c56ba28980bba64665fb4dc309f259c123304d028652e169f0b5418f16d58c493e5c6b329bac8278b648c1a42ab","ssdeep":"384:MlfAQXMY+w3OkxvTc5cXKUFj0yW1q16U5OWG8XI+MKcsDo0Q:kAQXMY3BxvicXKUFj0yW1q16qOWG8XIh","tlshash":"8ca285c67aa020097447d4687d926b44236cc406d60fdebd7bed209cefc929899b77cd","first_seen":"2026-04-25T11:27:54.983392Z","last_seen":"2026-04-25T11:27:54.983392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metamaskcasino.ca/","date":"2026-04-25T11:27:28.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcasino.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 25 Apr 2026 11:27:28 GMT\r\ndate: Sat, 25 Apr 2026 11:27:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5781,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"148cc8bc3772ef785e0c9e5dcc14c96b","sha1":"a813a47fcb59092a94e27056f64c22032a6fd3cc","sha256":"861e24f2671c62fc6904b65b99285a64d7d1a7eb0452e0d8bb9b43f9ce9fcac2","sha512":"ebb272fc8f02f2c57efe2b8c5259e3d01876149b2930ca8ff4ef716756496fa10bf6089b9f8a46084eeff72cd993cc088013490c5bbe4f405ce818550cc31678","ssdeep":"96:AOOEaRwOOEaOFZOhOOEaJOOEaeJc+udOOEau9NtOOXaRwOOXaOFZOhOOXaJOOXa9:YRo7TbOmuwRv7M0OFu6RB7W+Oju8","tlshash":"dbc1be91105be500e6472cc923cf7e2add4e21667494c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-09T07:23:51.356456Z","last_seen":"2026-04-25T16:01:23.881424Z","times_seen":1442,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":97,"dns":0,"connect":20,"send":0,"wait":31,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://topk2paycrypto.org/ca/","date":"2026-04-25T11:27:29.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topk2paycrypto.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 25 Apr 2026 11:27:29 GMT\r\ndate: Sat, 25 Apr 2026 11:27:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7708,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fc502deab591a9005413910ef3fb700d","sha1":"5869fa8de7a48943311ebd5f09c2229cad833c47","sha256":"34672e8b84ae711f23a29b04c2ef23a27768043c059f9e0dbee6d653f59c8aa2","sha512":"ab918d46f09cc593fab103540ef245395a571c0e52978899588ac75a0b0b8543933ce6ce3f21e9310f6cd8c63c7a7f51f5d9cf84e4b19a230e3fed0b89bd38a0","ssdeep":"192:YRo7TbOmuwRv7M0OFupRS719Ocu6RB7W+Oju8:4QPTzajde","tlshash":"92f1ac91105be500e6472cc923cf7e2add4e21667494c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-05T02:32:45.701097Z","last_seen":"2026-04-25T15:59:16.626604Z","times_seen":2490,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://topk2paycrypto.org/ca/","date":"2026-04-25T11:27:29.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://topk2paycrypto.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Apr 2026 02:00:56 GMT\r\nexpires: Sun, 25 Apr 2027 02:00:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33993\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-25T15:55:11.061613Z","times_seen":348983,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskcasino.ca/images/canada.png","fqdn":"metamaskcasino.ca","domain":"metamaskcasino.ca","tld":"ca"},"ip":{"addr":"104.21.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskcasino.ca/","date":"2026-04-25T11:27:29.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metamaskcasino.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 12:41:44 GMT","end":"Fri, 03 Jul 2026 13:41:37 GMT"},"fingerprint":{"sha1":"BE:07:45:D6:AA:47:C8:67:1D:1B:E0:64:5F:92:04:29:56:67:B3:A3","sha256":"1C:E1:0B:46:1A:A1:3C:29:FE:70:AD:2A:D4:05:FA:71:6F:2C:E1:74:0C:A4:6A:72:64:F1:8D:D4:6F:2B:D9:C8"}}},"request":{"raw":"GET /images/canada.png HTTP/1.1\r\nHost: metamaskcasino.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskcasino.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 11:27:29 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 05 Feb 2026 17:24:12 GMT\r\netag: \"553b-64a16f0ec0700\"\r\naccept-ranges: bytes\r\ncontent-length: 21819\r\ncontent-type: image/png\r\nage: 0\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8KBGX2GJVttptpMjF%2B3uYxyebd1O6KxubR3YFuxLZRtAEV%2F2JiBOIRH8rqrNXbQs7t33PbF9XN4L9%2BvRy%2FOFCHvhzMWPzYaY15LbO0xqIjx055oMxc6wSsIMI7sJO7sd4fAMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1cffaecc0d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"65a31700c3cfbc3fc5d7e57f467627e8","sha1":"4e3dba8e26b34d503c2e7696a3bc2a7db343027d","sha256":"45c5e4b004bbd35fc708aa6a96ee71c238430447fd66ecb1898554fd0077c3f9","sha512":"c13679e0d8319d12f781a6bbd158840f9cbe21dbf1a7bef755bb1c0472127e4a2af5a88fba2de144f1dc72f0fe69156acf0d58d467097673248634e1c0dc4e46","ssdeep":"384:daXFW38ixLULYVHGyql/j1iymx+dAj4HKSqt0ObNPrNQLk5Ts53cEq+lbUtwRt93:daVdiEwHi/JiwdAjiKDTbtrNQq41cI9d","tlshash":"21a2e11a853342bdc5f8498a90ae4e960f8b2633c698dc4b274e6e48d54501956e8bdf","first_seen":"2025-11-21T19:54:47.678878Z","last_seen":"2026-04-25T16:50:04.539974Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"metamaskcasino.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://topk2paycrypto.org/ca/","date":"2026-04-25T11:27:29.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://topk2paycrypto.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Apr 2026 02:00:56 GMT\r\nexpires: Sun, 25 Apr 2027 02:00:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33993\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-25T15:55:11.061613Z","times_seen":348983,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}