other

English

lastActiveTabID

_ScCbts

_ga_Z85QEBVWGW

_scid

__qca

_gcl_au

olg_ga_cid

_fbp

_scid_r

Domain 'proline.olg.ca' uses the Canadian country-code top-level domain (.ca) with subdomain 'proline'. The registrable portion 'olg' spans 3 characters split between one vowel and 2 consonants. Breaking it apart gives two words: ol, g. Median word length comes out to 1.5 characters. Most frequently, 'ol' shows up in Esperanto. It also appears in Turkish and Croatian contexts.

html/eb/1d/eb1d9961-58c7-4a67-b163-569270551ed9_fallback.html.gz

Event

html/eb/1d/eb1d9961-58c7-4a67-b163-569270551ed9.html.gz

default-src 'self' blob: *.akamaized.net *.ferrara.ca *.llnwd.net *.performfeeds.com *.olg.ca *.stg-olg.ca *.zencdn.net; img-src 'self' data: *.abpo.io *.adsrvr.org bttrack.com *.bttrack.com *.connextra.com *.doubleclick.net *.facebook.com *.facebook.net *.ferrara.ca *.google-analytics.com *.googletagmanager.com *.gstatic.com *.olg.ca pixel.quantcount.com pixel.quantserve.com *.prod.bidr.io *.qualtrics.com secure.adnxs.com *.snapchat.com *.sportradar.com *.stg-olg.ca t.co *.twitter.com *.vimeo.com *.yahoo.com *.yimg.com; style-src 'self' 'unsafe-inline' data: *.cloudflare.com *.doubleclick.net *.googleapis.com *.googletagmanager.com *.qualtrics.com *.sportradar.com *.vimeo.com *.zencdn.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes' blob: data: *.ads-twitter.com *.adsrvr.org bttrack.com *.bttrack.com *.cloudflare.com *.doubleclick.net *.facebook.com *.facebook.net *.ferrara.ca *.googleanalytics.com *.google-analytics.com *.googleoptimize.com *.googletagmanager.com *.olg.ca *.qualtrics.com rules.quantcount.com sc-static.net secure.quantserve.com *.snapchat.com *.sportradar.com *.stg-olg.ca *.twitter.com *.yimg.com *.connextra.com; connect-src 'self' *.abpo.io *.adsrvr.org *.akamaized.net *.azurefd.net bttrack.com *.bttrack.com *.cloudfront.net *.connextra.com *.doubleclick.net *.facebook.com *.facebook.net *.ferrara.ca *.google-analytics.com *.googletagmanager.com *.imgarena.com *.llnwd.net *.performfeeds.com *.olg.ca pixel.quantcount.com *.qualtrics.com *.quantserve.com *.snapchat.com *.sportradar.com *.fn.sportradar.com *.stg-olg.ca *.vimeo.com *.google.com *.yimg.com; font-src 'self' data: *.ferrara.ca *.gstatic.com *.olg.ca *.qualtrics.com *.stg-olg.ca; frame-src 'self' *.adsrvr.org *.cudasvc.com *.doubleclick.net *.qualtrics.com *.snapchat.com *.vimeo.com *.windows.net www.googletagmanager.com; object-src 'none'; frame-ancestors *.olg.ca *.stg-olg.ca;

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

appId=cid-v1:6dbe9c2c-540f-422c-bac1-a370b5b46b51

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-K7zHpWzm' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:164:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:132:0

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-KDYzMhmn' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-cYWaJFqf' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-qZGNZkyx' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

TTD Universal Pixel

29e682fc3c4e09b4f1b29df75601dd77faf0c2afc0a8e1ddea70d17bc4a7d37e

83cad628862dea966718157e27b4950130e460538d1bdb041df2f7fb5f6aa967

de25ff38288676dc79292a95d410944c2045e6e09c5e4563c40d08c615a20c54

e1477e459968a08904795c6c229d876e4c339599d1a876cdbda25001cf6c3f48

d20f83374c5fa319d676ac85b796fb9c8dc6590d43d6fcdd5648820dc66a539f

cf4012855810edd80ff5404202e855e5c57f735d55131472105b51987d81cd35

15ac7c79df675a4e07c8f59b54ed2d978cbebe6af18372265677cd46b95365fb

2b51a2fde17d970821a0dd472517baf704cfcb2fa67260d77101e6f231134d64

0225eb034d024a03bdc90ea6c79f56193662e7c3eee909696298820e517cbb83

b61e51e7d5aaf26afc873c2b6b17f586d7359637730c4c1d40a23bb9be50ae00

7f601b1b258803287386acf9c747b98d5775345193c93dfe2dbdf3e5829a06c6

2b83530ce7bbc358359de91b0a9349b4823fc4d97fae16df8ec5186ee29a7a5d

d3391d9f1643968bd3c2c88e52cf2b421314be48e94a4ddecf5938323f9a0566

7abb31a60a5aa66d483b502d3beb880db1757f83696e027c57351b9ad4fbc258

3313f26c24cb6f92969a77e60645fb2d7230612809697b48be48c1a6cef9aff5

580c515f74a655b4e0e270fdc011e03a5e4d4bd8d82c1c7f6116fb1092c0df0b

499e00bdfc907559efa130bd104755f37b35b6a40c87cab600ec544459d7803e

580cf9587d8e1444e6c84cb64657f95def50d90c0b4c269e0bfda957acaaab9d

9b967605bf283d29254acd2ecc672d4e80f777e726fe9e5b3703da3f5baa53e7

e113e109b08da80fa18eaa661d1e1eee6b1d454153b8ab7199f6a9ee12fc2418

4d8968a73c6390ef202ed1d49ec857b70400467a01cbf39dfc3286f0bf36ff33

9dc68e7c174b17011828f9615287bc9709010452cb14815cab29bd130b7623ed

e766072e4635b71ea7fa982623204916ef1fa1d919b10334aba6adb2d0ea1834

aab53e7c8f9cad1a6b8011accee6989658fd36825efb29826c0542617c2c249f

5be495fd0e11f1c734ae1c38130f9a4a7c8aab946ceba3df895f38c11181142a

665dfb04893768db5ffc3bae48f3fe6ea11d92176fcfbaac3209f89d8b1043f1

10a2b1cb9783521eb570226ee61dfa0c023c83d2a320cea5e10729be6cc57fda

976152aa3f854986c052bcabe9fc523e9d624812bf1842d84b5b451232c28541

e1ad0a8675d4a25d569df0740679b9535c3fc8bbe0b7a15614d208c0e1f3eb8a

viewport

mobile-web-app-capable

description

author

keywords

next-head-count

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse Contact

Ontario Lottery and Gaming Corporation

Internic.ca Inc.

Ontario Lottery & Gaming Corp.

olg.ca

Admin

Bidtellect Inc.

TECH

BIDTELLECT

{"props":{"pageProps":{},"__N_SSP":true},"page":"/[[...app]]","query":{"app":["en-ca","event","e906556-Club-Brugge-Barcelona"]},"buildId":"4JuqwTWjxH7o_kEv2tYnQ","runtimeConfig":{"embedded":false,"sta

(function (w, d, s, l, i) {
                w[l] = w[l] || [];
                w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' });
                const f = d.getElementsByTagName(s)[0]

(function(a,c,e,k,b){a[b]=a[b]||[];a[b].push({projectId:"10000",properties:{pixelId:"10169063",userEmail:"\x3cemail_address\x3e"}});var d=c.createElement(e);d.src=k;d.async=!0;d.onload=d.onreadystatec

!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version="2.0",a.queue=[],c=e.createE

window._qevents=window._qevents||[];(function(){var a=document.createElement("script");a.src=(document.location.protocol=="https:"?"https://secure":"http://edge")+".quantserve.com/quant.js";a.async=!0

(function(a,c,e,k,b){a[b]=a[b]||[];a[b].push({projectId:"10000",properties:{pixelId:"10206528",he:"\x3cemail_address\x3e",hph:"\x3cphone_number\x3e"}});var d=c.createElement(e);d.src=k;d.async=!0;d.on

window.dotq=window.dotq||[];window.dotq.push({projectId:"10000",properties:{pixelId:"10206528",qstrings:{et:"custom",ea:"landingpageview",Revenue:"%pu1\x3d!;"}}});

typeof _tfa!="undefined"&&_tfa.push({notify:"event",name:"prolinesitevisit",id:1830888});

if(-1==google_tag_manager["rm"]["30221229"](51).indexOf("object")){var exp=new Date((new Date).getTime()+31536E6),hostname=window.location.hostname;hostname=hostname.split(".").slice(-2).join(".");doc

ttd_dom_ready(function(){if("function"===typeof TTDUniversalPixelApi){var a=new TTDUniversalPixelApi;a.init("97hoaaf",["3z1yoh3"],"https://insight.adsrvr.org/track/up")}});

Requests	IP Address	Location	AS Autonomous System
88	192.132.33.68	United States	AS18568BIDTELLECT
1	87.248.119.252	United Kingdom	AS203220Yahoo-UK Limited
1	52.16.181.129	Dublin, Leinster, Ireland	AS16509AMAZON-02
1	52.60.172.32	Montreal, Quebec, Canada	AS16509AMAZON-02
1	3.163.248.4	United States	AS16509AMAZON-02
1	13.107.213.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
1	18.66.102.121	United States	AS16509AMAZON-02
1	216.239.32.36	United States	AS15169GOOGLE
1	57.144.244.1	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
1	142.250.74.198	United States	AS15169GOOGLE
183	96	-	-

Security Scan Report: proline.olg.ca

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History