{"report_id":"fb316589-4951-4f07-9691-5f7cc537b932","version":0,"status":"done","tags":[],"date":"2026-08-31T19:15:43Z","url":{"schema":"http","addr":"betgrwcasino-ca.com/","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"104.21.15.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"betgrwcasino-ca.com/","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"title":"Betgrw Online Canada Casino: Game, Bonuses, Mobile, Slots \u0026 Live Play","dom":{"size":91623,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65469), with no line terminators","md5":"96849a0d1a92e3978a3d83f6e35ab7e3","sha1":"5a62a12fd38615df8ede18ae5a118ed70b3b7add","sha256":"d71e356dbf6c53bf2ef6fa45f158c81f7101ad52f2f919359bfa63087ad04389","sha512":"6d5da9810af3c6ec2ada4afb7a0ae16813051ce2789134dcb5942adc215bf09f042c64a0b37e8fd33e64a6fbe16c97af0d1051a7cc6807b2f2098fb184d83d0f","ssdeep":"1536:H8biXP178biXP1Gm9e1der9BedTevle2/eJ3eBHe16eHbeixevPeyWenXeIAeFLj:US3pL/jDKP3VhFhehqh3hraoYIK7D8Cf","tlshash":"ab93e997b2600237423342c9724f7b6632f6d28cda4114b49afe63b45bbed367437989","dom_hash":"domhash1c986d7dcfe8535840da9315590220df","first_seen":"2026-08-31T19:15:45.698207Z","last_seen":"2026-08-31T19:15:45.698207Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"betgrwcasino-ca.com/","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"104.21.15.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T19:15:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"betgrwcasino-ca.com","ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T18:35:25.539924Z","last_seen":"2026-08-31T18:35:25.539924Z","alert_count":32,"request_count":32,"received_data":2311990,"sent_data":16876,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":10808,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":6,"received_data":156894,"sent_data":3500,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"betgrwcasino-ca.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-01T00:32:52.467573Z","times_seen":428586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/kit.94a08940.js","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dff858947eb8c559661b60beaf08ffa5","sha1":"79af67e8ab4d384f7ee90137e033938aa0d0c613","sha256":"94a08940856c69f05d47a5f0a9f4407a8420d3a3c814db71fa6de19d57298e5d","sha512":"5f736b27c2e2b7599b65a4612ab29d8e0d76e69110734292b656389c7f6285181f9c43536b3c90499d9ac67b1b2097370b28dd45e84bdefd556a88743d3cb678","ssdeep":"192:VkoQPUaILA30gygUk4KbuAcgSH21bm1lOOd7pecvfatl0Fc1CdLaKbCqqGVKl7kH:JzWyWHK1HHjd75cQ0q0kVQ/2J","tlshash":"347260cd3f50a19e31bd34bb132f49aae4261d4adc88c199d241b4986f3d768e53be48","size":16732,"data":"","first_seen":"2026-08-31T18:35:31.024935Z","last_seen":"2026-08-31T19:15:45.727261Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/tracker.72c4c45f.js","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0031a6d406624f51568743d2ff9f10b4","sha1":"069be06ef1348994bc9e69a9bc4322d02b565c04","sha256":"72c4c45f37b50a90e02ad72da7ab938a8e89fda1e7071852318e6309ae7c32dd","sha512":"9bc416e788149fcecbd81401689841dd5aa51cd15b5a68d1bab53fc89eddfefbaf55dec0785a8399d6132b72d4522442a0a1d9b35691be307f8e86a71af6f527","ssdeep":"96:zmBAqVeJQdZ+ybfHrA5C9GAL7rq9iJpRj+W7AyFwi5FXY5nIrjz6WnfCZlcUYQCz:6jYed/b05CoAL/HBrQs","tlshash":"8d91838c7e12b1d0375d0ae77f3e549f42298ac090cc096ed12172d4bfa6722edcaa61","size":4463,"data":"","first_seen":"2026-08-31T18:35:30.966922Z","last_seen":"2026-08-31T19:15:45.710151Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/partners.33b743a0.js","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60aa025ae1265f5135193cdd6bd3d9c1","sha1":"5697f8d42f6ebc96a90d84a06b7f906410a8e9b8","sha256":"33b743a046b041f7393ef221ee6c36259c27409065b8cf4b82acc12a1ca41fc0","sha512":"2fce5b692a87237e7a3c0618322a266939bd5261f20072b33127c8b0b51ebef0cc92acbdce2de866077f7f4d582a871e6124fe8c6989e708be0d8d39604c497b","ssdeep":"96:2mBAmV6Iu5wGWcZ0N9M6DjiFJSFvm+mr6qZ+qpwVmx:lbEzZRFJSFvm+mr6qZ+qpcmx","tlshash":"be8130815f81b6e033229cf30f3fd4a95739c6d190c7c70af2255588ad58b9db9938b0","size":4136,"data":"","first_seen":"2026-08-31T18:35:31.008931Z","last_seen":"2026-08-31T19:15:45.749645Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-63de11fbf7db.4e94dd38.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.993Z","timestamp":1788203713993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-63de11fbf7db.4e94dd38.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:01 GMT\r\npriority: u=5,i\r\netag: \"6a7f271d-7289\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmtrr0KQ0oblTgCCL8FovJN%2FiKVxgy5znl7KqwMIeywGZZk1xbBhNsO8GSRmoCHR8N0pFqnJ3SBPxithVx7NPOlk2SyY6V5Hv3p%2Fxg33IKLzytVUVWHws1%2Fd4q1PyFawIVINyAzN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc8c7fe4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29321\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29321,"size_decoded":30075,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"6d28d0d43d112f393db36304acded20c","sha1":"39611a210dcde06322223b1e441e210373fef1eb","sha256":"4e94dd38122f74eda2827d8022a1e8c541f1ef2bf3db411627fcb56d1a0d58fd","sha512":"9f8b925e91d1c1974c08ba5637b00b9d54e53e56cab1976216f58fbd9ae7fc79c8ae0d683feb212e986ee2d522b5d3c4ed04ba4e9c613bfd19406039940c30e1","ssdeep":"768:BOU1QKW/QB/evhwyktDGlckiW6x/UohI7L6i:BOULwQBmvuyktilckV6xhICi","tlshash":"b8d2f10f0804360ebab241108f6a82bbe46674e16ce5d07ea67909d44feec9357d13ef","first_seen":"2026-08-31T18:35:30.952923Z","last_seen":"2026-08-31T19:15:45.70204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/744b5d1ea837.json","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:14.013Z","timestamp":1788203714013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/744b5d1ea837.json HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: application/json\r\netag: W/\"6a8c4977-6b\"\r\nlast-modified: Mon, 24 Aug 2026 13:39:03 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=60\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8NJc1%2BO8p7Opg11N5OEDZIaTdUiu6Ht%2BTgGYb9uvoUBluPo97huOcGvyJi3Dcl7gp56d%2FGCLBgbOqLLBaTHpTrUo7O%2BDqNDtnDbySQ4%2FC4Af1Y1gsf%2ByEWgpqBMcR2dho5bvbO9\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a33e5cdcac90e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107,"size_decoded":804,"mime_type":"application/json","magic":"JSON text data","md5":"d881fa89e751b3a0e93a58a2d6efe916","sha1":"53851d4b1ac3aad14823acc4971faffc2c3bf0a2","sha256":"b663df539d30de66fbd844f6c6d8f87b915d706fab758dc478e3609c9783da1c","sha512":"00aca6e772b2dd2f4523d287bd016257b88f73210928e191c0af84e5bd7fcccabba21f596f2ad0fbe645019e58442de26408256551b8a64fa7c864dd222cef56","ssdeep":"","tlshash":"79b0927322a8203643a033c24506d00b690672baceca1ad66a5ba602461c6990a8bb81","first_seen":"2026-08-31T18:35:30.949946Z","last_seen":"2026-08-31T19:15:45.70398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-acf5da9c7e7e.70da31c0.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:30.005Z","timestamp":1788203730005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-acf5da9c7e7e.70da31c0.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Fbetgrwcasino-ca.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:30 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:02 GMT\r\npriority: u=5,i\r\netag: \"6a7f271e-8939\"\r\nexpires: Tue, 31 Aug 2027 19:15:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLdc9o3Y2KrMJNNx6Y32rN2IM7jzaYi%2BBskoAyZRTOPUuAmx%2FRe3%2B1mRwyGfYobQdN%2Fyma1YI%2BwfXMab0ZmXQpwMFqSagwSm3KCxmWvX8gc9Iao3xQAIMEPwshsbXj2QpfEMQiGt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5d409bcae4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35129\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35129,"size_decoded":35887,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"bbd4980ddf138871e0cdd4948f5e1314","sha1":"a5891a06b9f0c842cd709b1595e2fc3975dc0142","sha256":"70da31c04dfda0997f079da6477af0d06e11075d9e71a87da8dd7d0bf1697fd9","sha512":"1cf94872200287f21312b16753a5b6435f052c46a59f3d91d6cf9b6d75115e94367f305e6b55eb0b7bfd6167b86c8512d6910617d08c341d22065d397b26ae20","ssdeep":"768:OHRLxrKC7g7ljIBOSkNvX8vpOrxz9IgsOOX9cCQ05DfdNnT2bE7tNPL:2FxrKCEiBIpX8v09zBWXRQqdNybK1","tlshash":"3bf2f179b608551ee0fd037cacfaed2a8e2065adbc14c56f665b13c0cd442260bd5ab2","first_seen":"2026-08-31T19:15:45.705926Z","last_seen":"2026-08-31T19:15:45.705926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700\u0026family=JetBrains+Mono:wght@500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.749Z","timestamp":1788203713749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@400;500;600;700\u0026family=JetBrains+Mono:wght@500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 31 Aug 2026 19:15:13 GMT\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10124,"size_decoded":1510,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"07b84c6db3d4cac20e1499bdd0db445c","sha1":"b267fb902e30268509a093e59909e63b5f1bb5ae","sha256":"1a9c2cb57f11128fc1bef1a29786bf549ce4d3797a37b63f282844bb9c73acb4","sha512":"d4faf0affe8ceadf0c18e1851b143447a7142d6e2c8fe89a216236419c09eee7839dd61d1ac87fa0cc1b3473524492169767891300d81f294c57c0bd939a70ac","ssdeep":"192:tG9Up3qnXfFGbep3g5XxWx/GiZC4GRZfRG4ZYiG/W:UC1OZDgRt","tlshash":"0a220fa1002b9504eb571cc633cebe36bd8ea1166091d9b99fff18989d9ec32133475d","first_seen":"2026-06-05T10:20:24.470765Z","last_seen":"2026-08-31T19:15:45.709069Z","times_seen":7,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":34,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/tracker.72c4c45f.js","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.757Z","timestamp":1788203713757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/tracker.72c4c45f.js HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Aug 2026 13:38:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8c496c-116f\"\r\nexpires: Tue, 31 Aug 2027 11:51:41 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 26612\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FpcV98iMrGLrj8ENJdrijGrUnSCn9I27DCKOqXmE8HFakJo8xkbUBYEe4opFGmtkrl13KObDH93eUgcsc8rIPXMlBqJ0Tz6gQgyYIwDJmHezj25VT9OF1PQJJGD4wt3c3Ne1mBU\"}]}\r\ncf-ray: a33e5cdb0af4e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4463,"size_decoded":3026,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4463), with no line terminators","md5":"0031a6d406624f51568743d2ff9f10b4","sha1":"069be06ef1348994bc9e69a9bc4322d02b565c04","sha256":"72c4c45f37b50a90e02ad72da7ab938a8e89fda1e7071852318e6309ae7c32dd","sha512":"9bc416e788149fcecbd81401689841dd5aa51cd15b5a68d1bab53fc89eddfefbaf55dec0785a8399d6132b72d4522442a0a1d9b35691be307f8e86a71af6f527","ssdeep":"96:zmBAqVeJQdZ+ybfHrA5C9GAL7rq9iJpRj+W7AyFwi5FXY5nIrjz6WnfCZlcUYQCz:6jYed/b05CoAL/HBrQs","tlshash":"8d91838c7e12b1d0375d0ae77f3e549f42298ac090cc096ed12172d4bfa6722edcaa61","first_seen":"2026-08-31T18:35:30.966922Z","last_seen":"2026-08-31T19:15:45.710151Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-dae19eb708f1.14b56a2b.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.981Z","timestamp":1788203713981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-dae19eb708f1.14b56a2b.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:01 GMT\r\npriority: u=5,i\r\netag: \"6a7f271d-9189\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JoPN4eqixlY%2BySHwPFwY7dJieTQeQXlRkew5Whw0H0wIxVyoAxVpkf%2BlyQafUvC3GgqbITliohBXcdZWhDPc4vVH39ZjLF31jhvsBqYSOss8eJtrNs9%2Fs2L9U%2BIiFNwhfvFnTimx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc6c6de4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37257\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37257,"size_decoded":38013,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"d7fa3dd2ea19e13bf1f86c2730d90538","sha1":"6f1b17e52d2e700e31c48c402b8b48fc088cc0b9","sha256":"14b56a2bb221723c0abf53c190a4cb94963d235e81bab00ef2c441404ec48483","sha512":"64b643d2203505be3d6254b1c086d4d9b361f0dc2d34c622a6732f053f93b064a862c597dff2d193b4776a5fa6b15f3c2bff3b8ebc6d04aab6763d34f12338a5","ssdeep":"768:ka0XR4A2oWDjY7xWGl8xTfaIEJ9zkYGRUEfWFy6RB1RWfsc+sJwEfYPFmtW:TI2hixWe+zMJ9zVGCEfIyik+sJwEeFmc","tlshash":"0bf2e12511dfb715e8ae42a44adaa259b1cdfeaa4749b5ac7f4ce0c9d003143d303db5","first_seen":"2026-08-31T18:35:31.020542Z","last_seen":"2026-08-31T19:15:45.713174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-342b78b1110c.96ca84c7.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.984Z","timestamp":1788203713984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-342b78b1110c.96ca84c7.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:02 GMT\r\npriority: u=5,i\r\netag: \"6a7f271e-7f31\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7v7lZN9BjclHIIY4IteEbPW5%2Bbx39SW8P9LnUP5GXj%2FMlOwxbV8fH6Oqoe5ru4Vg%2FdX%2FM5pQGMm9LVk%2B7CJ%2Fg2H49lsnITK%2BeZnp718aTuf8AeboJ5grkwAIDgxv4hBzzJDPJr%2Bi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc7c70e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32561\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32561,"size_decoded":33325,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"e46c79db600b9e04070fe5cbcfbf12f4","sha1":"cbad5681646a1b182e9c2e3d5668f05495427f22","sha256":"96ca84c7c5ee0a1e3664ba3d54f439800aed322bd0cd2f7fd0ada1d7f7ae9de5","sha512":"0e03c6bd76b220739588a159153fc995d53847294270e493ece540ac3bade900cc0047891ecdff4768bfe87f0ff50e07b03e6a5ddc3bdbaf60e74467c02e589a","ssdeep":"768:WSDkUynApLRdu0cWzwNJvCCUJUX4oBrouHbfLqKZ:WSByq/wGwNsFJR8rvHbjB","tlshash":"c4e2f1e7c30ef5de8e25b0e892cd6437fc854bceb66c624450459ded4d5e22a3c8c18a","first_seen":"2026-08-31T18:35:30.958132Z","last_seen":"2026-08-31T19:15:45.715418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-984e5245e7e5.ca110c9d.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.989Z","timestamp":1788203713989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-984e5245e7e5.ca110c9d.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:03 GMT\r\npriority: u=5,i\r\netag: \"6a7f271f-5f59\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Bzy8v9ZKY083MVTJJ%2BDgWjx7l%2FHq5NyR3yXT725isbrwfXntb%2BrNiE%2FThEuPuxRgnb0s12w3%2BEWzmr6LmLRtntYH9Yrvc2DBwGN3zSgs0AeflaTFXeTOZL7nDWBd0BBoZWjeWtD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc7c78e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24409\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24409,"size_decoded":25167,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"274cd35d0450062cc44a7561bb900b34","sha1":"026d940c374c55ddeef2cc3996fd3980b0304608","sha256":"ca110c9d1882e062da40a0ce1bb78563a5623b008f44e56f971425c71b47b047","sha512":"82d1d6c67f9668c34fc0bd6065350f60083ea6524300791e1c9ea00e5f36d104443fa005bf9a28f4f5ac75cb0c3c3a66448fc0f1e330fafd2bb5ed51a5aa8591","ssdeep":"384:D6GL/RVWHnEOOinsdCidkF3NPUKiYpzZy1OE+1z/TgnLK6r6qhRfGF7i0LMg/etQ:WGbLWklcsoikMMmLsswptvJ","tlshash":"3ab2e173eaef760ba4e9bb7c9839181d7090a2c4168d586b60b286cdbe75f10434b94c","first_seen":"2026-08-31T18:35:30.962485Z","last_seen":"2026-08-31T19:15:45.717302Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.961Z","timestamp":1788203713961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betgrwcasino-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 06:07:04 GMT\r\nexpires: Fri, 27 Aug 2027 06:07:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 392889\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-09-01T00:35:51.635682Z","times_seen":17136,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-cb4321112e47.8462d71c.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.982Z","timestamp":1788203713982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-cb4321112e47.8462d71c.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:00 GMT\r\npriority: u=5,i\r\netag: \"6a7f271c-682f\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dcUFm%2BpbRbXFpLWMvyP7%2BIqR1u1hH19CqlDP5JPzqEjvJ%2BWgj6zR6CvW%2Fa7MKUAR0eqC8rkKfWdEinT0AwjsWqi6azs%2BMYVTTjNsEvp5%2FnN2WkP9Y%2B7lkaNgtVvY0h9sXlYNSj3k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc7c6ee4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26671\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26671,"size_decoded":27433,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"ca414d4585f48b9e264f30a1ec460513","sha1":"3126f2e29c94b4e0ca7de9d33a097bef74e5f45a","sha256":"8462d71cb5c10cacec5b6e0e883861bffae373727c5227eef1db8de0addd77d1","sha512":"e5da73da458ff317c26e153b9e1627e9af844a2d82c4b364124f3d9bf12a9bb1c999bd37437da2cbee6e9c2b541733d2770cbd9df03bdf1071a7f50ece40afe8","ssdeep":"768:B9mUDk1WGKskIuhjuMKOTjOgR6p2HLsZ0irgk8U4ti9nBKp:1Dk8BIuhlK0jOgR6IQZ09UT5By","tlshash":"06c2e15afefdc4f1d66eed7400032e840409a41de6dc89373781a4ce72662b0add96ab","first_seen":"2026-08-31T18:35:30.946432Z","last_seen":"2026-08-31T19:15:45.721006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-4c01c28cd29d.8e7e67d4.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.983Z","timestamp":1788203713983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-4c01c28cd29d.8e7e67d4.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:00 GMT\r\npriority: u=5,i\r\netag: \"6a7f271c-6116\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7M1EkwpYDoIMBmYRsClxArLVVkK7mflLEoC4gJXIM%2BOTG5VHWjnJdFQGoVAV598VZqq0lXww%2BmPAVBMuhoui8aYKPdz19AUgpKwLeC5lj%2Butbof5%2FyIqetls%2BR%2FM8LhG66xbdTUW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc7c6fe4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24854\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24854,"size_decoded":25614,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"581c73f89ff23702b4e8c5886617ac03","sha1":"82ad87de0928db44227e9a4c841dd5775f916786","sha256":"8e7e67d4fe203d1a83ef7b5e6289edaa87aa5c07e28f95888b41239965398dc1","sha512":"64edd035695a48b7ec9af9db496001457b797513ec52eae13a885e3223e6f8e09978dba2578dc9dcc73390e4fae08ca2191d0f24f488be37b20b6093f440c859","ssdeep":"384:hSrbY7SALdOHxztNRsWTU3EGbdebhiIXL49dmzkLpNkEfu1qn5NTaBhcOZTh:hSo7SodaK13bepXL49d0wNPice","tlshash":"e4b2f164bcf83c8fd13892e458472b57d74a0302b72a189ad1e5d4c6aba514fcc1f07e","first_seen":"2026-08-31T18:35:30.947978Z","last_seen":"2026-08-31T19:15:45.723304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-8177141745a4.48bc398d.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.988Z","timestamp":1788203713988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-8177141745a4.48bc398d.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:02 GMT\r\npriority: u=5,i\r\netag: \"6a7f271e-7e1d\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eG9jA9SkhVGKBhKMC5xAlbeInmAhKCAfi0%2F75fh4yyphAgIKYhpRqspnWC6ngBMeAOM668TkzDwCBw92RpRP1qkdIXMh%2FtcKXlASGZuX8qfOpDFkmdOSvbMLkKgkBoPF2WBRI%2FIS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc7c76e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32285\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32285,"size_decoded":33039,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"39b4c5f11d484d6ad1ce817dd5239716","sha1":"29ad24101b013a9575f73d675051769a92574102","sha256":"48bc398d1f5907636d915e21f35b05d345314f56684f6992167154327017093d","sha512":"a424fa29e626d171c4625a2df91d0fec6f650c97949f636e8de738bf0194d9f02f90e8bd3371f5371defed13fb3e6e296522acd6176140db40bd9f6aa34ac8eb","ssdeep":"768:aGxRN6JBskMLKvkAHuyCt9geNjzcyle5MdvBLV7bU4Zx:aA68wvoJt9geJn5NqIx","tlshash":"92e2f1d00c5daa4a5f1b333485db64b1bc0eefd3ca023945a18297f8a53477780afb86","first_seen":"2026-08-31T18:35:30.987301Z","last_seen":"2026-08-31T19:15:45.725331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/kit.94a08940.js","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.756Z","timestamp":1788203713756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/kit.94a08940.js HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Aug 2026 13:38:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8c496b-415c\"\r\nexpires: Tue, 31 Aug 2027 11:51:40 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 26612\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cf4TAZ3Iv5OKBfQ1XI0dPPDYaf6EEy6AAn8oq394eJPgwpNqxbo%2BT7Ad7VB%2FPRbmOq6UWZVrhZrF%2B3jOn872NuT1kMpynVZ34cs8sC1k8zdktHvOwhiG0%2FPrikbS29wYXMbh52UM\"}]}\r\ncf-ray: a33e5cdb0af2e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16732,"size_decoded":7872,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16732), with no line terminators","md5":"dff858947eb8c559661b60beaf08ffa5","sha1":"79af67e8ab4d384f7ee90137e033938aa0d0c613","sha256":"94a08940856c69f05d47a5f0a9f4407a8420d3a3c814db71fa6de19d57298e5d","sha512":"5f736b27c2e2b7599b65a4612ab29d8e0d76e69110734292b656389c7f6285181f9c43536b3c90499d9ac67b1b2097370b28dd45e84bdefd556a88743d3cb678","ssdeep":"192:VkoQPUaILA30gygUk4KbuAcgSH21bm1lOOd7pecvfatl0Fc1CdLaKbCqqGVKl7kH:JzWyWHK1HHjd75cQ0q0kVQ/2J","tlshash":"347260cd3f50a19e31bd34bb132f49aae4261d4adc88c199d241b4986f3d768e53be48","first_seen":"2026-08-31T18:35:31.024935Z","last_seen":"2026-08-31T19:15:45.727261Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-bcb5f15f55e5.d95d3622.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.980Z","timestamp":1788203713980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-bcb5f15f55e5.d95d3622.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:02 GMT\r\npriority: u=5,i\r\netag: \"6a7f271e-6042\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PvIIbC7c3V0a3p0%2Fa99gTtQomvoDk8jhX8Nzx%2B2olorsj6dNmH27ifxKwUaNruEzZ0lmMvzlSC10Z3PDQVgsQHIA6%2BBfvPxyH58kIg9kzMPO3YC5r4wIgBKSbsuhcNBjrwTvlWc3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc6c6ce4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24642,"size_decoded":25396,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"d2a7aff45590307a575e4e121426a955","sha1":"f2861c7c8075a42931ec2f169341c176ede30676","sha256":"d95d3622c8cc3f758307bdf35338231dc9561af64d4db872d2fc05878da257ca","sha512":"927c043bd03f5a2fd3ae64817facc297526843512629bcc18e18f656c27d3b5adc03a447ed6875f69967e59845ccf5e84bbf178e080f1286179fa5734879ee1b","ssdeep":"384:+3XVOiqKFwO+M3y7SZMMWwiAR7Q+4m/zDpx9BnXFs5k3SSYojQhWeXLzQVnz:6OesMcSZi8RUpQRx9JXQk3SSYoj1b5","tlshash":"6db2e1b2bf21a519aff4df78457d1202edc9775d248a13042e5f73812ca2563702a1ae","first_seen":"2026-08-31T18:35:31.010498Z","last_seen":"2026-08-31T19:15:45.729138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/54a91c211de6.json","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:14.010Z","timestamp":1788203714010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/54a91c211de6.json HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 24 Aug 2026 13:38:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8c496c-3b66\"\r\ncache-control: public, max-age=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLH3pJb4TXLj6JQRku6lhJAxwr4dtytvLrkGh0QRiIMOb9e%2BIp0bz1m3zZc78WlTBqn7lcvE%2BncYe14%2FmyB3TdIBd2PObFRp193nhIAANbSnh%2FpHSnX84JKpCHXGvTdi3rkfn2lB\"}]}\r\ncf-ray: a33e5cdc9c8ee4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15206,"size_decoded":6315,"mime_type":"application/json","magic":"JSON text data","md5":"25cec8a0a395cbbb97265aece9269388","sha1":"9cc96821a315b83bb1697970b0758b91381b54c6","sha256":"2e8531b252bfbaf29527d126cd03762d061af7d7e8037d8adf6566e87373242f","sha512":"792efbba516f1e73ae632f710bd205991cd9fb9455925905b8c51fbe67b2d5915f8e1a2f44560a9f28fee0ecf1f62ad62b1f7738a730d5ce3cf6a7714e4c6d6c","ssdeep":"384:y6CuLe9lAHS8FN/jXQdZQl349z1CUne/lUicSpu9kcKG88IAf+JA6QLA9k//CQ55:eK8UNbaWovooY0DJ+VVw","tlshash":"5762e65598210cff47353d85a88bb5e9209037912bd4e738a829fb3c646ed97a037d3a","first_seen":"2026-08-31T18:35:31.028554Z","last_seen":"2026-08-31T19:15:45.730593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/site-logo.2c3b2f6e.svg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.763Z","timestamp":1788203713763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/site-logo.2c3b2f6e.svg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 19 Aug 2026 06:34:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a854e61-4823\"\r\nexpires: Tue, 31 Aug 2027 11:51:39 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 26614\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kR6MzUuOhJYClgrUZ9MlQgIEeHqaPwwntB2xwrK3L%2FKxPB1FzoB1vubifVkAByumRooxkgengQ%2FFb1Hh2ZRcxSK48unKJmK8zK%2FZRQPCZ8DH3RHbwRIJr3VeaoHggUD3cSmqpp5e\"}]}\r\ncf-ray: a33e5cdb1afee4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18467,"size_decoded":9635,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a03da15109bc6f322688e99ebbdbc45","sha1":"6b8c504d5b0ded030da7860db3a8bf2d1d855bcd","sha256":"2c3b2f6e1e11756bc47b4e76c5c1974c8c1d2a7882098732c15f6815419f5309","sha512":"1583707647c1c481e4406e52e283d944bf427e5186b5905fa63a81702ecb535261e7da000cbcdcb574fe552ec57ac22ee3529cea7c7366f4790d1dbde0245b4c","ssdeep":"384:eKeaJTYIUwHvPYz2lhfqQ+De57sf4hBSEAozmGt2ca6ek:eraJpHNlKe5jYToaEa6ek","tlshash":"7b8283dd3bb09dd08dcdd3ebff2051d9750bd1aa59864b62c11caf0838c642d9e49c86","first_seen":"2026-08-31T18:35:31.042248Z","last_seen":"2026-08-31T19:15:45.732417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.962Z","timestamp":1788203713962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betgrwcasino-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 06:07:04 GMT\r\nexpires: Fri, 27 Aug 2027 06:07:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 392889\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-09-01T00:35:51.635682Z","times_seen":17136,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-b8a9074d7a9d.1a3e0adb.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.979Z","timestamp":1788203713979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-b8a9074d7a9d.1a3e0adb.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:03 GMT\r\npriority: u=5,i\r\netag: \"6a7f271f-7585\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVtKROubAY18AUQpqxsjZhIOGexsafaGMkll71doMrCbap0Qk30Hr0HoIrw%2Ft25ftwp7zJmCgOdt88ywe7xcRSI1%2F2tUaqTx%2BoPQzsZdXQgyuQQrQKuiGXbsAVS9zXnKbAoJGjgj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc6c6be4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30085\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30085,"size_decoded":30839,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"b8f682a55c48a5f7d2b46e97d45c273a","sha1":"a45abcf611473cd47cee682b8fd3407583e55445","sha256":"1a3e0adb3e632b8a6abb675b499de35d9fdac58cfa698e156408d8ec9caa304c","sha512":"8239d7be6f9e38314718d3899155adf260ff7b2de93cb1b82c7ae088cb09f73e0ab677f42796ed9e8b9007d5d59fd746e5652e3c8cf653f923c5f1c50125419b","ssdeep":"768:HX74sE1Z9pXWbVh3VtNxGZsjrQ5NMVzKA9hsp:3ksE1jpmZhFD0ZsnQ5GVmAzW","tlshash":"6ed2e17cac03f24666a421f652f6ccedd5e792717e81cdb88c13d1ceb20cab66991463","first_seen":"2026-08-31T18:35:31.004848Z","last_seen":"2026-08-31T19:15:45.733865Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-7827b76d97ba.1918eb69.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.985Z","timestamp":1788203713985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-7827b76d97ba.1918eb69.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:02 GMT\r\npriority: u=5,i\r\netag: \"6a7f271e-696e\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jqdv7hLB1YmOxRWBacC%2BNQzFLxj083MIDwlFhP5paQpkL5l%2FaspyUTXXzmLsUrHXR5dkbcaA0gRdyxvY83ReAYi%2BiPwZF0UY6vxnWL%2Feigkj1pt8ojEV0fqavx6AQ3VMqgSkpqkj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc7c71e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26990,"size_decoded":27746,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"645ad4854e3c1000c61f31f7f7f45015","sha1":"4fe27a434385febc67bf58ea9f92d98d10634b88","sha256":"1918eb696351018969d03e31911efd6b5271a06a5cdbdd891efaf074e829e2ad","sha512":"fcc65851b59071adcff529079fa3d0333a95313ebd5a0543e39431fc46fc4fcb83d5842bd026b9af6ac4f0bd224f0d3c924775354909b315682fb76cb0decafc","ssdeep":"768:24VcNDQ8EKMoAiZWMCZEwdTEUfe76baMVI4ylbx4xWL5fdBe:24+NUGAisB29mji4Abgu5fO","tlshash":"ffc2e1f5527e79fdc518ea71c0f393c36aa0fd618620437a2424e4f4e46b99e21fa11c","first_seen":"2026-08-31T18:35:30.993069Z","last_seen":"2026-08-31T19:15:45.735268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/favicon-96x96.png","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:14.289Z","timestamp":1788203714289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Fbetgrwcasino-ca.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 14 Dec 2025 10:22:54 GMT\r\npriority: u=6,i=?0\r\netag: \"693e8ffe-28f9\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hLND0t1%2BHIe0UXg3KXmAG312725zlYamIxJSPI5v3NQ1%2B6%2BQMo1S4Cy2Z520%2Bw4pwzKggEj4HGDg6ipVcLW09QBNnhy%2FEv%2FPC7KEbFKm6eaVGbEqsSXKZX7Fr%2BU5W1N8pvJPpDpO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cde5d4fe4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10489\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10489,"size_decoded":11253,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"4d95255e5766fe9ed952fcace8d5e32c","sha1":"0a5e17467f56b2a4b62db99158b9757c500e0234","sha256":"61c2357bd184fa09fdc64b59cf1b066fd22306d37984bb98c846584a6817f26a","sha512":"b16f3c2bcacfdc8c5dbc6d06ba068d3619b43e9580e3352e27e59122ea7a901fa3c9e35a3110a5715af5e9d8c0898791eff88d1e683fef961c40c94fbc069e40","ssdeep":"192:Npmzfm/Dl+xa11LytiIZuDs48VHV/ujHhIbGrWsobdk5MLdSJlF+GHZCzp+:NszN4PMEoVVujhI/sNSSJlF9HZC4","tlshash":"c422b0621bf5d52d920e4e4ffa871feb7454a18086960e015734b03f169fdf6b8ad04b","first_seen":"2026-08-31T18:35:31.022047Z","last_seen":"2026-08-31T19:15:45.736817Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/banner-2.ccee381a.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.766Z","timestamp":1788203713766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/banner-2.ccee381a.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 06:34:09 GMT\r\npriority: u=5,i\r\netag: \"6a854e61-a2ae9\"\r\nexpires: Tue, 31 Aug 2027 11:51:40 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 26613\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWol3ONQ5S28NZMcINjM9OexsZJKdc2wf8tVqeLgm6CzryUElA7Las1fBWzFcRvakMccgdVvSIazErCWiCjhEN%2FuZ60l8yFEwZblKkw5rLonJSYrILhOCOP%2Fy2KbYH87Vu762LuK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdb1b13e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 666345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":666345,"size_decoded":667110,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"a2b2ddc3f1f37a53d8856722af215fc8","sha1":"27cfdaad64ad2f7ed42ad924ca980f953a3d2cf8","sha256":"ccee381a2911e2903047e881289fcd620949a9d4f689c8ab96cb2428d3f2bcfa","sha512":"716878fdf145d10b8ce25720e67d68038cc8216923b100682e56823f20c88ad1204ddcd4d04f21d1ecc4857c9675ff32dff75b23a95205240f1f5943ab9b19d8","ssdeep":"12288:5PlSyWMq1uxk176R+gJkkPp/S3Bo1jrn2NM7wNEK6fDur+oMst:3QLOR1uktuBohAM7KQDur+Ot","tlshash":"cfe4232c1a1791c810955ef7fda71b03adb4ea6e2f05da884451043ebefbad44487bdc","first_seen":"2026-08-31T18:35:30.969136Z","last_seen":"2026-08-31T19:15:45.738225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.754Z","timestamp":1788203713754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 02 Sep 2026 19:15:13 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHjnCMi2cVYRGob8QemYqhQkaHPbObAWYcNoAWQ%2FwbYTfh0NT23EGubEjf2kHYqCejXYTZbfKM5BYiJVrGEK5eGpSxrBCurP7tFeZoe5%2B3o8jmO9TmE5Qpzs91o17rTsbkY8Ow7b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\nserver: cloudflare\r\ncf-ray: a33e5cdb0af0e4ea-RIX\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-01T00:32:52.467573Z","times_seen":428586,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/hero.48c50653.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.765Z","timestamp":1788203713765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/hero.48c50653.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 06:34:09 GMT\r\npriority: u=5,i\r\netag: \"6a854e61-d27b4\"\r\nexpires: Tue, 31 Aug 2027 11:51:39 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 26614\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QE%2FwrcXhkM5bXIsM3o8KVrJt2bf%2FcUEdug8Z47zKIliWQbdKP3NsJNrWNsg0xlTbiPlf06bkV0KObZuQIg2nObVkj90hl6VaxBQCGAa2Pt28gLjUGe8Nx9ZL3ui84LjKuZBe4n%2Bl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdb1affe4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 862132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862132,"size_decoded":862899,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"f5838d834cee809194e6b5f216773ade","sha1":"fea8dc5c3213b0e577ddfbb40050a26fa1a1b515","sha256":"48c506530d13e93c9f270ef4c0bea61167c721b0289d9738686d548a6f04ad50","sha512":"8e79fe6f2b13ba65ba6eec81c09823a5997978e2d9952c0c943897765024f5a1142847149e05f1dbf9ab5991c4b206e2c480e78632c8a36101ad3aa3a3f233d0","ssdeep":"24576:evfhtR6nmuovWisrYn36kFOIjTXEV9nBBknIjiIzBrMD:eXTcnXqKxkF1vG9nBHji3D","tlshash":"5f0523fcb71d98f120681587acae6800347781fe6996f511e33ce57e90c934bcd2ba5a","first_seen":"2026-08-31T18:35:30.99713Z","last_seen":"2026-08-31T19:15:45.740236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-354a8149700c.013c30e5.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.977Z","timestamp":1788203713977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-354a8149700c.013c30e5.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:01 GMT\r\npriority: u=5,i\r\netag: \"6a7f271d-8423\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJLhWlSY3wxjIAVbgRaFwVXAYzhldIHXqEsS58Vv3yrjPwa93utq%2Bm4lHX3P4HYo6%2Fxj%2FfM1l9K%2F%2FP0juf%2F97q1FVPOLyN03njkeW3RNhSlkTu41MPuwG6ZBRaqMRoCs0PKC%2FcmL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc6c68e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33827\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33827,"size_decoded":34589,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"0cd2d57f8064da206ab53f32be947a48","sha1":"b03582b054259b4d1e8e4b5049def7cc4839570d","sha256":"013c30e5719f0221a7dd3508f89cdedde230abec9f9a9d56e888925a6b48e3ef","sha512":"061024a3f1f1d758833f57e13431182ec7c05d91171f2b32e411f46c14a887354b4ecf631772a7ade74d4c3daf7161476ac498b294d92e6fbc140e037833eb58","ssdeep":"768:yqnchbfuUQHUN9ZZkHBEMRSbsv3PRhoCy8pymC8iKeita:ySchT6HUN/GH0bk3PRY8DiKev","tlshash":"8de2f1f3a219b711d7fc46a6da2517ceb78c22d43537ab2c41c831d0ad5954d27a03f9","first_seen":"2026-08-31T18:35:31.001797Z","last_seen":"2026-08-31T19:15:45.741207Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-f96218809002.f2f46f5a.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.991Z","timestamp":1788203713991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-f96218809002.f2f46f5a.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:00 GMT\r\npriority: u=5,i\r\netag: \"6a7f271c-83df\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rokhWE4evsl3iweQVXHMnPm2dpXoXtCSaqL9AjC0OtY4c7X5jn%2F6zSIdhuj4hpJwMl4%2Bd8vID7M7F%2BkbuQOYSqLEzOv6WSYY0oJlOd4nN9ao%2FWBcMkzZbIXeSSPamcCUmYcPYyd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc8c7de4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33759\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33759,"size_decoded":34515,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"6886bcf7b711015773bda9521bb9eddd","sha1":"56d781f7332ffc01e6a691c3949d1da15bd967f3","sha256":"f2f46f5a5110452c07a4413b2d9fa7c97a85e14e842185f7fba5f9375d192454","sha512":"ced7728e7694a875fe0aba0b1ea999b0b99edd1fda616b3effd031abb3bb8eec0350801fafcbe4f53215ab7a3cabf750abdc824570e7c1c92b691e0ec360e342","ssdeep":"768:3lOdeHUM/0W2zUt3snUqP9VL2HXFvBolh+4rY0KcDO2wTn9hvM++rBh:xHUM8u3sUaPgBa1U4wT9orD","tlshash":"91e2e191f417e3a760e28424adace8c5fe5967cd5e5e01684e9be1e831a88c1f7cc318","first_seen":"2026-08-31T18:35:30.990657Z","last_seen":"2026-08-31T19:15:45.742004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-2bb01b5b7cf3.04a5d2be.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.995Z","timestamp":1788203713995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-2bb01b5b7cf3.04a5d2be.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:00 GMT\r\npriority: u=5,i\r\netag: \"6a7f271c-5359\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1VYIl8%2Fb3%2BFOn8W%2BFEI17C3%2BORqkD8K6Mz9at0vU5TqdkI5ttGh81MXwtB3P%2F4mIU9UV0bhexE%2Bec8SUjhfCwStiROnL5aZbtoA6K0KsrOMxHhg%2FDHV9wgHfW60zcygxkG8EcUU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc8c81e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21337\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21337,"size_decoded":22099,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"c1aa6a4b380403a1dd14a13a4efcb913","sha1":"8fbb2325dfec260a41dcf30492a0518b06a06929","sha256":"04a5d2be22d15a11526318418a7b8a1159493b6cfd6b915f7a0b999d636ca153","sha512":"3eef6aa30744743bc23108d5c9690f613a58dda7ac217075575ae027cbef693768cf159e9a00b725ca90df86113965117b2e6f29cbdaff5c76e440dc30c88753","ssdeep":"384:fLIWjBC4Cz/2EZzt+e4mkCNfbCFCZjyHCZ3nlcJd+YQy:fLl075N4mvTCFCZjTVgPQy","tlshash":"03a2d0cee4497148065aca72634e5ef366102d099f34617acbf90acafc911c68ed6898","first_seen":"2026-08-31T18:35:31.02679Z","last_seen":"2026-08-31T19:15:45.742825Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/favicon.svg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:14.290Z","timestamp":1788203714290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Fbetgrwcasino-ca.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 14 Dec 2025 10:22:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693e8ffe-42c\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FT87BfRAqqvVh34M3778Y4CUE0WH1%2B24A65J4UcRLipg1lEN23%2F4la33FEssJnejhbdk15hG7kLA9uQGLa3gdxMSj3NYRtdEHcvFffzeJjTI%2F%2BDoDDI58VjIopIBDhRyiQ%2FlPmvv\"}]}\r\ncf-ray: a33e5cde5d54e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1068,"size_decoded":1568,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b8b5384e6c8f85f267e2e4d5c3057d5b","sha1":"5fbe000f22246771dce49dd3e74ede98b6798e7a","sha256":"031e0a41ee9bcbda449719e34b6d669a3522a5da4d26fafc5a2bdc3863e58847","sha512":"34a8f972a78fe325e561ef69241cabec0096d689ef6d0b40260685354af70d54e34f649e73915fa21456fa74e35790eda7c4b80f862e8fe244199ed823f0e2e7","ssdeep":"","tlshash":"6211b9d8a699910f77708835693de558cc12224388f8c1e2fdb15a55fd4a04564539dd","first_seen":"2026-08-31T18:35:31.02994Z","last_seen":"2026-08-31T19:15:45.743874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-c20388c62f9a.b8cad0df.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:30.009Z","timestamp":1788203730009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-c20388c62f9a.b8cad0df.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Fbetgrwcasino-ca.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:30 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:00 GMT\r\npriority: u=5,i\r\netag: \"6a7f271c-820a\"\r\nexpires: Tue, 31 Aug 2027 19:15:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oh%2FaIyomRA3NamTenQNP1k3siC9Xui0J5fdK9WrDXgxxNhQsac2%2Fb7%2FheioFMylIiggW5%2FTsP2QbYj0y0eKwFPu1bnrHqZRA0r%2FoMKrIt3BmplK5mgMkvhmSl3oz8gDVM7MI08rd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5d409bcde4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33290,"size_decoded":34048,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"e13c691a9e022f3979af4aece89fd394","sha1":"16d940bb54569f203f7e28d97fff9f10fe7d993d","sha256":"b8cad0df01269814ff50780a693adcb5995b74260c59f1039bede0186d56acfd","sha512":"a8ab616a07b61b8d4a5cb3a4dc3204c58f41c2c756838d71f7b0ef2158363f058944fb9970717e24c453bc0a1809b56e4321247c11d3179c4eda60c1838626e7","ssdeep":"768:xnjYxhgnKuhkKNh2u0Y1Quj5yiW1Ur9tFd/5qL0:xnjYx3uhkKCY6uXW1g9RZ","tlshash":"dae2f1b057af80a6b99577bf192933190d06bb9a62110bf0b35426cc4b8f6fe37b4117","first_seen":"2026-08-31T19:15:45.744904Z","last_seen":"2026-08-31T19:15:45.744904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.885Z","timestamp":1788203713885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betgrwcasino-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:28 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 463425\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-09-01T00:30:40.77138Z","times_seen":29702,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.967Z","timestamp":1788203713967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betgrwcasino-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:28 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 463425\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-09-01T00:30:40.77138Z","times_seen":29702,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-02bd496c7ae9.dca0f96b.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.987Z","timestamp":1788203713987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-02bd496c7ae9.dca0f96b.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:02 GMT\r\npriority: u=5,i\r\netag: \"6a7f271e-7c5a\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWj%2F%2BtLXwAvx0MCDGHBTTadPtyiraOhSGEO%2BIX4%2Fa%2Bck7DzSngGwPRxR5Gkt%2FM%2FBrub58OPnKGxR3hwL31CSaQYw4jSzRbcn7QYPin%2BcDN7HANevSUGq70yXbQMcbA5UuXY%2BuK2Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc7c73e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31834,"size_decoded":32600,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"414116ac2cc2bd6ec38aa3ad5bb2aa9b","sha1":"207eefaaf6d5970b2d428477e6c00c50720a1656","sha256":"dca0f96b61a548483d7f0ea9eb3e304378fb8aa9dbb9cf057e3a01cdf633f7eb","sha512":"ce4a9cb8d9f4d42af4b1d6a249b76a0bfa657bafb7e4c410432a5af11fcf11ff700eac18db9a0e28e2c235ddc03cf3e756b9e23827157f455daefc1b4618a3ae","ssdeep":"768:D61/10IjBGiijLWrMXnohsnobBOsiX+PPQrjQxTJ2nd3eFV5:8yINGpjgMXnoaoEcPKjQxT6dc","tlshash":"2de2e1d25fc709715418966fd8c527ba4f32309917eabd4ade9f61c04200bdc2c9a7ee","first_seen":"2026-08-31T18:35:31.040774Z","last_seen":"2026-08-31T19:15:45.747032Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/theme.41463183.css","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.751Z","timestamp":1788203713751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/theme.41463183.css HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 24 Aug 2026 13:38:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8c496b-49a\"\r\nexpires: Tue, 31 Aug 2027 11:51:39 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 26614\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fuGanFG9fCggLPdOG7UZJOATwsEFjmNSVx8zRVZu7dXlsVCqRvXVNahGcMzBgshjkfDXVTvUp2UpB69r9gNwMOPVVyemiZOGezYLgbkHJ6i64yNj8lLAwByDcW4slxSytN7XZTK\"}]}\r\ncf-ray: a33e5cdb0ae8e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1178,"size_decoded":1204,"mime_type":"text/css","magic":"ASCII text, with very long lines (1178), with no line terminators","md5":"84910c07474b61ceb602611293f501f8","sha1":"0a8fc0a008a621687a7f7eab4bd503b94f0c63d9","sha256":"41463183b4275514478b2d71c64e213417a1b6fd91763b7d602fe5a55f21a011","sha512":"ffd3ce860fcd151d6552b627574139f441e4397920135f8f11c83b96ffeb6d2344357bc29c4e675830d6108fe0ad378aed18a99f710c2b19d6e45af479123290","ssdeep":"","tlshash":"8d212401fa55ab3d1526b9fd36e8e90dbf6e74102709e834b61a61f48e6f1c9c8ec604","first_seen":"2026-08-31T18:35:30.995329Z","last_seen":"2026-08-31T19:15:45.74789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/kit.a6654033.css","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.752Z","timestamp":1788203713752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/kit.a6654033.css HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 24 Aug 2026 13:38:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8c496b-c732\"\r\nexpires: Tue, 31 Aug 2027 11:51:39 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 26614\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0okM5Q3r80Ho1%2FNWFAftdhC0vGlF9ws6fMC266C%2FPWL1KtTquP0hPmEHZ%2FYcvG3DQ1elm2%2FYNqfXpeq7t1LU0EG6w6qAV2jI%2BhRlvYpkaNK7odcf3tVCX3We4kiDMFKhdctGxRlP\"}]}\r\ncf-ray: a33e5cdb0aeae4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50994,"size_decoded":13833,"mime_type":"text/css","magic":"ASCII text, with very long lines (50994), with no line terminators","md5":"41167c877b2426e0d859b0d49e3498d0","sha1":"4cde4ec1b501dc13c6b3a13eaf0dce08cf5fa5c4","sha256":"a66540337e21d95246a04b74c0901db4534d7f6365f569f0add1491bcba5d6e2","sha512":"51e812d1ef5e7bf2b807c08d25007783b38286a7d5b9a23d0971fb7e773263f42e6433b3361cd11261087d71c2da350e1c269380592e359fd914eb614def6c32","ssdeep":"768:GjdBUI97fsCCBL96VnojURpNfK5KlYxSvcbAc08PP4UmFIpeICV7:GjdBUIjsCCBZ6ZyKYxSvcbAco/G47","tlshash":"4a33682163146279bc57fb6c7feae74f6369a012d502077c799a2058c2cf2f84667f82","first_seen":"2026-08-31T18:35:31.023432Z","last_seen":"2026-08-31T19:15:45.748739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/partners.33b743a0.js","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.758Z","timestamp":1788203713758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/partners.33b743a0.js HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Aug 2026 13:38:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8c496d-1028\"\r\nexpires: Tue, 31 Aug 2027 11:51:41 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 26612\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iWYXs7tuWbLFCGjyaKQEc7Kki7J1Z8o9D7fAa3aR9j7XPZkT3b%2FUAtEIyO7yqzd7pJ626qJbWrXkmKJBhl1gijgff75wZO1Rh0h%2Fu2kuNJljZDwnGFAGRnxCu6NvWU0%2BsMVwJLvT\"}]}\r\ncf-ray: a33e5cdb0af6e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4136,"size_decoded":2817,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4136), with no line terminators","md5":"60aa025ae1265f5135193cdd6bd3d9c1","sha1":"5697f8d42f6ebc96a90d84a06b7f906410a8e9b8","sha256":"33b743a046b041f7393ef221ee6c36259c27409065b8cf4b82acc12a1ca41fc0","sha512":"2fce5b692a87237e7a3c0618322a266939bd5261f20072b33127c8b0b51ebef0cc92acbdce2de866077f7f4d582a871e6124fe8c6989e708be0d8d39604c497b","ssdeep":"96:2mBAmV6Iu5wGWcZ0N9M6DjiFJSFvm+mr6qZ+qpwVmx:lbEzZRFJSFvm+mr6qZ+qpcmx","tlshash":"be8130815f81b6e033229cf30f3fd4a95739c6d190c7c70af2255588ad58b9db9938b0","first_seen":"2026-08-31T18:35:31.008931Z","last_seen":"2026-08-31T19:15:45.749645Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-417d3666b1e4.f080e580.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.978Z","timestamp":1788203713978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-417d3666b1e4.f080e580.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:02 GMT\r\npriority: u=5,i\r\netag: \"6a7f271e-8988\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tRP8APIRYi2XuY%2FB2vBYFp3RenEQ4zEM3Yssj84a6NBfJJUjUdpzp5gm1bjcoUieu0IFh1froBxGkd5iMNM1bqyY3JaztKWcTB0JGANxKMVEyyHPajJdiG7ZdpPNl6ZiPQbyiKL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc6c6ae4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35208,"size_decoded":35958,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"a1e812f7a052c92e7880bd2a3513ac4a","sha1":"960ebc0eec012254cd53322bbef8783539440132","sha256":"f080e5805967c00e4f4e6042ca84ccae0ab8bba9a628084bae49423430bd44dc","sha512":"d01caa750de324f01fcbb4fa1755840409efb54afe3f75cf8b8e980250768865a17c01bae15f0a13885c7e36082ca279186d0e0ce2d092e0b8fda0d9a5178d46","ssdeep":"768:PkZOlIDTmHoROTy6p9iA6R/BYHqpb0O12LA3Ahnevbxu/nLRMNA3ZO:ZQTmoYPiA2/B2SQ+coAhaoLRV3U","tlshash":"b1f2f1a26754b085a1607e7f090eb302d47a92aef2d5a47e36c4cffe6d07867553088e","first_seen":"2026-08-31T18:35:31.00352Z","last_seen":"2026-08-31T19:15:45.750689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/assets/game-40f17b51ceda.abf2f826.jpg","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.986Z","timestamp":1788203713986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET /assets/game-40f17b51ceda.abf2f826.jpg HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betgrwcasino-ca.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:02 GMT\r\npriority: u=5,i\r\netag: \"6a7f271e-7808\"\r\nexpires: Tue, 31 Aug 2027 19:15:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwNprr2oMKwaSlFnpwn5t2v8XdfARjT6EmM%2BNE6Opfsxk%2FQBtFBLDVlE8a7sPfLExYEy2rxUzXlHch%2F5PZEZCqs9ac2yO0bJ9AIOOqL51pctwnCMPPUC1n0hmZsjKF4NcmqZ9fXa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33e5cdc7c72e4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30728\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30728,"size_decoded":31482,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"304785b6185a49164f2f923866d2ab8c","sha1":"d0a4b245aaf97955c61013c57b7f2789bfd9225b","sha256":"abf2f826dd08cea9c9191757abb7f41ac7b0c3f0de07f6aa69595c92e488722e","sha512":"2e975771e67cec5a1fdcdd01c6f00d017442fe3f0737062badbdb30522e4ececfed82d4b629126e198b5465441057da974c35e32d5f1dd75c5e39b27df10ffd1","ssdeep":"768:ThSiGLBYVgUoHQz/iiUT/fXH8wD1rzhRBx5epAhMRKZ:9SpGVf92T/fXvn3E4l","tlshash":"f6d2f13bd1e34368964edbd0bad1f110466bbf503aad0e2b61944ae18ec23625f73176","first_seen":"2026-08-31T18:35:31.037289Z","last_seen":"2026-08-31T19:15:45.751623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betgrwcasino-ca.com/","fqdn":"betgrwcasino-ca.com","domain":"betgrwcasino-ca.com","tld":"com"},"ip":{"addr":"172.67.161.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T19:15:13.034Z","timestamp":1788203713034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betgrwcasino-ca.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:47:25 GMT","end":"Tue, 03 Nov 2026 20:47:13 GMT"},"fingerprint":{"sha1":"2D:42:38:01:6A:04:AC:74:40:41:55:52:6A:46:11:AB:48:96:38:CF","sha256":"B2:C4:07:86:1C:46:F8:36:95:4E:16:C4:B5:86:9D:8E:EF:33:0A:AF:92:92:F9:02:6E:1F:B8:79:AA:6F:D7:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: betgrwcasino-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 19:15:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 24 Aug 2026 13:38:53 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=60\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXh3ofA3q1IAOg%2F1ez5nabwLzmsAJdfyCuW3R6xHHSU1iYjjONRKcXhttzQ4mKyfj2KzUpr5%2BULHAeuyIbZimlnHODWbdJnUWMM6XfeDBRe45FKO0D4jqObd5iNy9T9Ga1UIsKvV\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a33e5cd6c8abe4ea-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91171,"size_decoded":24522,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65520)","md5":"17e491d96fe90dba9a94cc7fe204b045","sha1":"7d7feefd1dcbeab74e4c063b608e21bfd14064a2","sha256":"333e627f8e94d1239492b25cf72b431611831806afb68da9eae8d61c0a45a001","sha512":"3fe4dbfead390ffaf4684a749c2665e3187fd2df2e6be46162f1ce32a912f7270af40e203417ec36ade18642432e36d219f9a34596d347dd653383e4b7361e98","ssdeep":"1536:i8biXP178biXP1BYAegsep6weIOezie9Ee8We0meoNecAe7YewEe9jeC6ezZem4x:idxdDVngmON878c8u8/8maoYIK7D8CIx","tlshash":"e193d797b2500237423342ca724f777632f6e28cda4114b49afe63b467aed367437989","first_seen":"2026-08-31T19:15:45.759255Z","last_seen":"2026-08-31T19:15:45.759255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":8,"connect":30,"send":0,"wait":268,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"betgrwcasino-ca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.964Z","timestamp":1788203713964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betgrwcasino-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:28 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 463425\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-09-01T00:30:40.77138Z","times_seen":29702,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betgrwcasino-ca.com/","date":"2026-08-31T19:15:13.965Z","timestamp":1788203713965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betgrwcasino-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:28 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 463425\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-09-01T00:30:40.77138Z","times_seen":29702,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
