{"report_id":"06e755a4-e879-4cf7-899d-a32ebcf6b61f","version":0,"status":"done","tags":[],"date":"2026-07-08T11:57:57Z","url":{"schema":"https","addr":"rainbet-es.eu.com","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-es.eu.com/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"title":"Rainbet Casino: Juega con 30 Giros Gratis y 10.000€ Jackpot","dom":{"size":147193,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1887)","md5":"cdd47b30968abdff026caec7ff515242","sha1":"2d0081ed560584e26481f1557c6f8c3967033040","sha256":"c9db0079607d0a4cff0c6bd686b6522ea4e2802e8413d49c775c3f2a28af8635","sha512":"0f0e06a8105eaf9006baaf317c1cb59157f5c895d76c94769af093cfd1da7f06fffa95788e1307f318253e93f0ac8051d1b3d369516cf45e82faeb404c922409","ssdeep":"1536:Sbb1jeIgRCTxuZYtvnPB/nGo4RLAI8qDipE7Dc/qEm0tU7tUJLBySNb1jRIgRg:ogYTrLNo2m1URIPgO","tlshash":"07e3e6e926f00ab3049382c26f52af2b3ed1d653d5098a40f2fd4be51fc6d59ec63949","dom_hash":"domhash486b7e3ec8e879eaf4e484b93b90cc36","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbet-es.eu.com","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:57:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-es.eu.com","ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-07-08T11:57:58.849659Z","last_seen":"2026-07-08T11:57:58.849659Z","alert_count":111,"request_count":111,"received_data":3302474,"sent_data":61844,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-es.eu.com/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"417059994afd0dd8c789b596b009b3a0","sha1":"480684f1bbc1cfb35720065b3e5ad910fcfe1f6c","sha256":"e085846ea569ec60010f181afe09f306ada48308ab8057bbcb7a57b8fbbeaf18","sha512":"8a7e01b7bf73c61232c7904ff65a34f92b27c7073eb6f1b33a6297e95198859a8735ca96b7d5a588b1df6fd3100c0d5d14b2618480225ccad2754142d8625e45","ssdeep":"","tlshash":"3180000a820a0a03300a32aea8c230c80800000a3f220aa08a8ff008020a8c880c28a0","size":27,"data":"","first_seen":"2026-07-08T11:58:04.35592Z","last_seen":"2026-07-08T11:58:04.35592Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-16T20:39:59.108583Z","times_seen":397946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/build/frontend/runtime.js","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","size":2001,"data":"","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-16T11:27:37.638486Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/build/frontend/app.js","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","size":46320,"data":"","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-16T11:19:41.924976Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[type:null]","filename":"https://rainbet-es.eu.com/build/frontend/app.js","line_number":2,"column_number":42616},{"level":"log","text":"es-ES","filename":"https://rainbet-es.eu.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"es-ES","filename":"https://rainbet-es.eu.com/build/frontend/app.js","line_number":2,"column_number":13046}]},"http":[{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/magic-mirror-deluxe-2.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.816Z","timestamp":1783511853816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/magic-mirror-deluxe-2.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/magic-mirror-deluxe-2.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kis0mvwal56\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60MlLewP0OdTdP%2Br9p4KFY83Wy%2FUuTKuCxJEflQHSrdfEeeVTrIVOFh0T7Qfr1i97GXu9lTz11v374pGb%2FsCZ5J3cNlI%2BR0y5TLe%2BH4YP8YTyu2x5esFVAZcLKcHf85RiyEJFg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e5c162efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27402,"size_decoded":28432,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"46cea7447bab37ffd2b3fd22fc373a8d","sha1":"41a3e91df04a32dbeacc0d95f82e17842f2050fa","sha256":"ea5764949f0b53fb706e07ae734091ae456486da6edf81589bdd5101424f04a4","sha512":"c33287d02a9b1f2528c3bd16543df839e2ef1a51b916dc30d6461451e368740c450dd43539986000b46b18f13066e82d4e827bc6d46956c5b7f6adf9fa1d6efe","ssdeep":"768:DnCxyoq6rapwn3DeJBEw1Z5ytwGSCcvv6GsAfeQfllGiI:mxywrswnip1ZoWGSCcvv5Rdla","tlshash":"f2c2f10967e9745cf94876b10e6dafd483381f4427a97e3124bbb92133ec5e8931784b","first_seen":"2026-06-14T07:59:02.151545Z","last_seen":"2026-07-16T11:19:41.914835Z","times_seen":4,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/tally-ho.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.706Z","timestamp":1783511861706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/tally-ho.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/tally-ho.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kiunw8apmt8\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1jhkIft49Ot%2BZDqkQ40ERuffDcsy%2FXyWiESjJ2Mwe14oqa0eiW3kOUKggEkURm2um%2FkoNB97Pf9%2FeT3bKs48BKAC8eCZtc6xqtERpLl%2BSIEHTmkLGO3d9g7o76sWRJZDQmtnw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9afbc802efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29564,"size_decoded":30581,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3d3c4bc3173e919af2d57a62b6232491","sha1":"e433e8b09863566d773c3ce5e04d32a76c1782f0","sha256":"460a0fb39c6831bd163972fb921cce481e94e11dd83415eba98ef652f638ccca","sha512":"4580605a98185753c793ef3e7d15e555dac4d2cd6be6fd8181fccbe975a8975ba9c3a0bd149ac9c0da2c6b82aefd552f7d48878a0a3870907473969981e95bf6","ssdeep":"768:1KPtYW7ho/YZGSJhn0zeibyWNqT2tnP3pZ5y:1WiWlSYZwCQyRTS0","tlshash":"2cd2f1ecdc2b9c1096dff9d3791487a0c41bbcda937d230a6a41e62573767b18b6980c","first_seen":"2026-07-08T11:58:04.195631Z","last_seen":"2026-07-16T11:19:41.931555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":333,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/time-for-a-deal.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.862Z","timestamp":1783511861862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/time-for-a-deal.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/time-for-a-deal.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kiv26mraqxj\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSW6RlbH1HZC%2FSb%2FVeGrpvT6y0dwKiApPH9HxgoYYdichqLYhUO4yaHPzROY9zoyO9J%2Becye%2BmG8fUXDf%2FEXNOHk0bIqPCACE0uVq9ye7oHLJbyZON54BrwCMjuoJoOLfOIKHA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b0acb82efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34903,"size_decoded":35927,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"bbe8b1d687b590d164397ea9ae40f265","sha1":"9aa48f05392c59e66e1af45d7e7de97b6888ebe1","sha256":"85b0f2a0eb5f3614b253da7780d3f9ce973c416d2db75dd66fc819151dea7737","sha512":"200bb014ba4cd8522cc96d14aca9dfdb97f85b0dbf36795b6f1f5c9a9be461546b29158702d4ee64dfaf0f7c402b4f4cb3d981ca2ede82d2d97f5df6547e65e2","ssdeep":"768:jBYhQ3TzKkA3OeakYRlf1oiV/IAkVdqOYqxyQF3c9IFZD+6y1V1SkhEslb:jBTTzK+eQf1xV/YZfMQdo6cEslb","tlshash":"bcf2f19da2b43863dc3efa960317bf65d74348c6f8318e092a9246130738fb8b5ad464","first_seen":"2025-12-20T02:09:47.80214Z","last_seen":"2026-07-08T11:58:04.196752Z","times_seen":3,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/rumble-in-the-jungle.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.870Z","timestamp":1783511861870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/rumble-in-the-jungle.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/rumble-in-the-jungle.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kitqjyk110jy\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6pX%2Baceq8VOr7%2B1IaXtsXYpCNzCyDgd%2BHdUp5gTw0P15A6PCU4BvhPo35GGq%2FlqvjzEcj9c7PsLOv03TT3Vk38NcRjvQ0ksW%2Bwf7Wwh1NKctOTAaTPn1ty9dYG2uU4936vTLw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b0bcbd2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47374,"size_decoded":48404,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"fcb20fa71b2817114423ceb2ac60161a","sha1":"f175e1bf4f4411b7050fa382f8fcd06c3171d142","sha256":"5b6f3efb6da114ba660f4b9d8a3d5791b220e98a7aad26ad8ab8fe2e2ee83734","sha512":"fb78e2947cae01913846052aca4787da9cd7e9d8c8785e34f6a2c94acc0ea0b43143348e0d5c854aaa165f56a3fffceb099de07abdd5c4914e539c2045c1a5f5","ssdeep":"768:37d4edt/e/3pUxnJ1s5Q6FVRXy0Uq/VDwoMjVXiAAJAX7isCj4R98GdAyierPT6t:3LdVmcnJ6pfy0R90/VXiAAy7FG4R98Xt","tlshash":"3823029317090c30a949a365ad1f878bb29392ea99db9d25f4f90dc53f3c84cc26f178","first_seen":"2026-04-03T21:46:18.192856Z","last_seen":"2026-07-08T11:58:04.19809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/full-moon-romance.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.813Z","timestamp":1783511853813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/full-moon-romance.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/full-moon-romance.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kipu1od5kpx\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpwv20V92cJlKftNeUplTK9tTktl2o4bg30fXpQ9CrN0sGrfuOUXlxg%2FLXMu%2BNiL3wsf8%2BQ3uY781deiMfnBDq9SDI6mNhyppMZYF3RbMYlOqBklal8S6QfntkEoR4dU26sV%2FQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e5c152efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26853,"size_decoded":27877,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"34ffceaf6e19f884a5e35d5fdc62c65f","sha1":"e3f905850ba6875a82fa130b92142f58f80fb248","sha256":"3c9805630904816891c30398ef4daec288be55c4efd4bfeadeb34001f9629611","sha512":"c6c81eeda6788a247bbe026acbc707092e8391ad1a57aa64ed632c045f179f11e5c2d1e2ffdf93c388b1471d2e57f5c7be8daa08fce4ef99e66bafec1bb7ac80","ssdeep":"384:9AUz4GAcI6fpoGqauJ/S6NGkDp+Rce0J6a6Xuywdxi8Ry2o9Divtxqx3UD:K+0rGqlJ66n+Ru6VXbPotxQa","tlshash":"fac2e1a38b964d5ec07cbefb24c803a71398b85faa50dedcbd55387c075d4204e69552","first_seen":"2026-07-08T11:58:04.199292Z","last_seen":"2026-07-08T14:48:57.696784Z","times_seen":2,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/super-joker.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.824Z","timestamp":1783511853824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/super-joker.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/super-joker.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiuj4rh7mly\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=In9%2BWADwaqTnzEd4MMIxpniBHvBuCTsM1HwobeTKcQXIzPzrnMf1VjJZNr6oQ4c%2FkAals672kyOta2uPrMNREu6QAgDL7YFHKJuj75xx5h4SmWL1kLNBCT16kIxzZF277O74YA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e6c1f2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29302,"size_decoded":30316,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"2c09739d1f75f5dab95a8994f12ea8e1","sha1":"a286c102b2016c1ee7203f5910f99af850dce1ba","sha256":"d882e0a43bab86c55457226ce22df6c3c2a791f08c4dda4a97a23ece80e19441","sha512":"c6902aafdba81153a61df8915c35c5d3e276df0a9997c552e87d6dda2c12decc2d72b0b1de7666563ea9a0b4b7e7ccef6e0fabda59901caa90597f86c8d0ed14","ssdeep":"768:/uV1d4M7JpSjf3pvdHckZW/ZUJM1x02QazXVVWh:/uTdHgf3pvdH9gU92dXVMh","tlshash":"efd2e1c92f3db1d46e5c06281ca99f748be098e51837aacbda38f7901f9c4d1d8911e5","first_seen":"2026-02-02T10:45:14.607076Z","last_seen":"2026-07-08T11:58:04.200773Z","times_seen":2,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/fire-vs-ice.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.828Z","timestamp":1783511853828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/fire-vs-ice.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/fire-vs-ice.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kip8m2oaneh\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXsQeH7MZ15nG6lgxAYNAYG5faRjK7%2BNC9jRsBFNdBK6j9LNYcqPD%2FgnDPJRRY6ndHkSiGSw0bwoxeL4Fpby3wE%2BJjJh9TXLO4AeclWyuytgvipH8n%2F10bAZ5lupNqW8%2FT635w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e6c232efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30329,"size_decoded":31349,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"81216874e2a41df3444cabbe6fcbe36f","sha1":"c5b1316fcc22170f8e6ee5d9b29ce20ee528e06a","sha256":"5efed83ac6318ee970e703919361b7e9d09fd8c920061bcc4aab22cb2562eb49","sha512":"caba496a63ec9d371402cfc1fe6f88330fffbd3ed7864cb2e54ca881bcc276a4e3b5516216f66b8b790d0231f1f9d7efcff6eab9618919b5bbe47243784708c3","ssdeep":"768:3HTqB1eljm0lOI8Zua6LvqKSIvSgKUtvXAuTBLjaObBD3Pv:3zqBoNmw8MaqNQuJbBjPv","tlshash":"ebd2e1028c528b2f445937f781ae874e795089df4284ff060efb2a39eb7881ec015b76","first_seen":"2026-07-08T11:58:04.202103Z","last_seen":"2026-07-08T11:58:04.202103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-1.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.852Z","timestamp":1783511853852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-1.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkho6m1i17d-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2tHhsUX2hsCUQXaiSDs6%2FBaH9t3lR%2B7H32bqY%2BHd9mfM0RLgpgGNlvAXDLW2HN4bf8LdWrgKSpK1TIggehdPZnxRgAf9TRiY1%2Bv%2BUvR5Qsb6TcyeYzKft%2BH3hcz84wkVIJK6rA%3D%3D\"}]}\r\ncf-ray: a17ee97e9c3b2efa-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1654,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8de41f5da8783028edddb1f521f0398d","sha1":"78b41d70d90a89940298e7b3b65a8fdff911fa9f","sha256":"f3018c6592ef85c6177eaf5368ee29a093e8e755e025061c7ee22555f329b0b9","sha512":"d11bbb2f2f9445bf5df0ceb5d5da933637472f9c1681f4156155f586a50e092d71b65a396ee923028f97c8143daa3005b345fa796f68408cb7fb43c0f4a9d705","ssdeep":"","tlshash":"2731a7eec0d1a2c064b973fc8c3176e4654b3c7a6eb7d3764447d1a27e240988c0d959","first_seen":"2025-09-23T10:56:20.40165Z","last_seen":"2026-07-16T11:19:41.937238Z","times_seen":59,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/1.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.874Z","timestamp":1783511853874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/1.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhlsvmr1be-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGGYLCzCCRoZW1n06SWA6rJ9xTRs6t%2FPsWn2f39jwvOn1LYSMxfa9XIJ33qRQhZFj%2BQLKArzHs7R%2FWRC5PulE1AUxTzv77ilEM6DkZpZNEJhr5elY%2FZeJFRyO9Sx30A1NXq0EA%3D%3D\"}]}\r\ncf-ray: a17ee97ebc4f2efa-OSL\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1706,"size_decoded":1732,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7939ced2f00f966d96df6259b176181","sha1":"ccb852adadddde6148885995f7a9830b41fcbcca","sha256":"dccac0c3395375b36619af3a3f58b4246a3c9e80539f383873f8c9d0805a17fa","sha512":"faf4cb8a3733e770bd494bbbe39c122a91d77795282db091f4906fd9de4c5cc0100ed48a1964d144d6bbfd616caada42feb7d86e625a6c1e0679df199faaa817","ssdeep":"","tlshash":"a63150fc33dcc9e4550be3d0d335180a797b38f96f9ae71d80e50918eb181ac4ae8884","first_seen":"2025-09-23T10:56:20.41091Z","last_seen":"2026-07-16T11:27:37.627654Z","times_seen":75,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/3.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.876Z","timestamp":1783511853876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/3.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkho6m1i11l-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XlSG4%2FAT9qyaJt%2FFYzQSpDsyufXgYprLxkMUoGqIdMTsCT9VAe3fPKUEBfS1IDiJI3uZBvAuGRIX9EPSOmmiJ6EtFYE0EEGJjirkmFQisfVDQ%2F6Dwj%2FBD9zZ1lJJEIEKVJ5%2B5w%3D%3D\"}]}\r\ncf-ray: a17ee97ebc522efa-OSL\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1353,"size_decoded":1713,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cca30d934324d88cddd9876b5070785","sha1":"d867219049c7945dad6e981df487d16f0494a826","sha256":"83b991de4d7f807eb05532cc2da05df845425fb1f4937e8599a951c612dab690","sha512":"b794792d3223d4173c89a16993c89fc8e8b38179bf9efa7abba1e95719b22ad7ac65efc8ffb96dbffb62639f5ad08d849d190b894fd071f4f444252431772b63","ssdeep":"","tlshash":"282131a792dc91c4a40387f4ca1e34a1329e25fe1b6acbec53d0ae717c4916c854d9c6","first_seen":"2025-09-23T10:56:20.346607Z","last_seen":"2026-07-16T11:27:37.551625Z","times_seen":62,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/bowled-over.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.861Z","timestamp":1783511861861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/bowled-over.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/bowled-over.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kimzn4qfs5v\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obaB716jyMzJ%2FOTeTQhSzrr1ZE5Bksn%2FVDwexGWShMHaCgvsQARB3X7sOuKdiIabAGtVh7Qtdn0newk2DIKSqm%2B8IEfwDpUxwlisoMUu5JjFSkMJn%2B9w6XcbLGHwdp88bPRxow%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b0acb72efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36499,"size_decoded":37517,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6d775c7aeeca32312cbdefaa6e5f3025","sha1":"5c502ad1d2af537016a470debcc6a18a76cfcc83","sha256":"32605121cbe5027b3903507f435d1c9ad56e6082a39a00552bb2252874e0ec0f","sha512":"1d6228b144492832f001cf67a8003d66b27d1c929a3d23be7f605e4120a66c075e1049ae30fbb03da87c678377a18be2a7c2ec589f7587123715dfd2c493ae88","ssdeep":"768:pjYMbJWZexKLW/dCo30nl1u1FX2axeAmqBXdiWeNpS/0nQ8yzFr9mRBrSLy3ngeM:KMbJWFW/t0n7CN2axLhBX4WH/0Q8qd9p","tlshash":"d3f2f18d42db7f9a92af873382f5567043aeeff10463bbc5d8641634d390e1d21d1968","first_seen":"2026-01-03T05:05:42.391177Z","last_seen":"2026-07-08T11:58:04.206626Z","times_seen":4,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/ajax/winner/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:48.413Z","timestamp":1783511868413,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: es-ES\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-es.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"770\",\"150\",\"591\",\"633\",\"341\",\"117\",\"289\",\"743\",\"903\",\"931\",\"323\",\"390\"]}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T20:40:23.423558Z","times_seen":17297509,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/socket.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.848Z","timestamp":1783511853848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/socket.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/socket.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kil2kuuc4ei\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmtmzdXtLl8yI9XaLP3YFN6hlLmpbOfOnnTHGjEYj7jWGvY0TcSa5KGwvgVlVezhFhI6VPDlp3W3cTXhWmtL1eDiL%2B%2F6qJghNgCfvf58S%2BusBkMZHsEQrjsyorXgABU0YJzQzw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e8c362efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5706,"size_decoded":6719,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"47971aabcea9daa0304f6e9d17bd01d3","sha1":"b8efe0ffd70e7fd56b8ac10030df6cb8b420dafa","sha256":"57725841aa64f85bb6ba4578dc36e020bccffc49814e16905e1702f66b11cf23","sha512":"180ab7c950f190509f4be0a6494e0e516d195daa7491e14d414471869416bbbea55f2a3b140fec4275d084e3d541faef894d60046a189f9938dfaab0c5dde6db","ssdeep":"96:APnKeqC9E9rql9PloGroqHJFXrNm8Ptf2R14kgmkOF6haCJFMfMtT2o:AfHqiE9rqD9RpHJlVPtf4mkgxOFNCJFD","tlshash":"8bc17e22ef154273f07e053ba5380e603ab3e986a0079b73a51062191bfb29e5e17135","first_seen":"2026-05-13T21:36:15.87801Z","last_seen":"2026-07-08T11:58:04.207708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/2026/03/banner-jackpot-69b94e97668ee0.05443055.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:34.279Z","timestamp":1783511854279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-jackpot-69b94e97668ee0.05443055.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/2026/03/banner-jackpot-69b94e97668ee0.05443055.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklc2jmy\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iapXkcBEeAbahvJPYReY318zoWmnvgLL87oD3X4mwJjQktbnwzd30EoZNTkaOpnVi4FD7uCoRrZksriEfznRqcLV3NWsDVv1d07XbVcz7jAR4T%2FczgYXDNt6U9sBs4ApYR0Yrg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee9814ca52efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118762,"size_decoded":119174,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x449, components 3","md5":"a130020b2effffe03dafe556977cfa40","sha1":"ecfdf860eb8b22edba00354f96171dedb2091860","sha256":"870205c01379c38c3cb9ac96abde6dae262c1f465128a92f21c2d0e079126e39","sha512":"f616a634c1d28de529d6e3667396f3b2ce3e0cf5eccf20e7df21cd54cf069e450a180a89d80253005fc1754863b5ab3808f490eeceba9dbefc7f2a4764a83436","ssdeep":"1536:899Zck5Zl7/MtkzM8nfxuCu1RSfOpAUYNglvbNadNgn7rkhcdNn0mdAAyeY3zWis:uZSkzMSZuCu2fYAUY+adNgnZf0EWWfNH","tlshash":"0cc312a320ef89d815b857b8c92f246beee561b1c4763d62f344c84ef7e0a5d684708d","first_seen":"2026-07-08T11:58:04.208607Z","last_seen":"2026-07-08T11:58:04.208607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/live.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.849Z","timestamp":1783511853849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/live.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/live.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiXuEbg1JTYc%2BoaSHdgwD3%2FEa%2FxzhasJeEFLrJgeJ6zanaBUELOfUn1vNZ3e66xYlpurZHErHY%2FY4DLHXb7lM1IIMgMRWyTA18gIJZSAMY1qcAS3y4A3u73iIX8EalbL3B1clA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kki2h0i26j\"\r\ncf-ray: a17ee97e8c372efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":235,"size_decoded":1138,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b4b1d6bd9eb199da2a8da2fd336258a","sha1":"3409a3abcfeeed1629f32e912dd2999905e0f6ca","sha256":"c93aa5ef0a425835222b705e5d77271351b56c48a55d8812244f78acc4a2b10a","sha512":"da202b7ec7b4bda755bdcd3edadae88d74f79c4164fc98b8a3e6ddb451b185ad7da9454d45a9ae3733edf48548418d413084795ba07fecb68fbb2816bcb157dd","ssdeep":"","tlshash":"cad0a764c24cd82de610c4a8e63b75a013db51c6038d3315b4801b2ae1185df34bf1ec","first_seen":"2025-10-14T14:51:49.240721Z","last_seen":"2026-07-16T11:19:41.998228Z","times_seen":27,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/play_icon.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.850Z","timestamp":1783511853850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/play_icon.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/play_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kki78hbljl-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mosO9tQhS0baZxGjiDpNz9ky55dKMpyCSxhFoWT0C2JO5gcBDqH65wIaGJfQf62AwwRDbRodu3zt%2FoKIwws3BivECwWIt2g0hARepl%2Bnl2frSCUGhg7q8de0rhWeEKXaPIp%2F%2Bg%3D%3D\"}]}\r\ncf-ray: a17ee97e9c382efa-OSL\r\ncontent-length: 343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":705,"size_decoded":1364,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1becf64ab38054f7190d96aa5e33ef3","sha1":"42850c0f349d3e2877ec33c7ea56c46a9da253d9","sha256":"fd83378fec0e980ea08347fbbda859be8c4bcec9268f42b8138b7378a3876891","sha512":"1c6ac795da14dfe35d644d8afd10f72e5d4088e54408e8bff9de13ebce425486b2102871ac979bdae345c8a2699a558ebe25fbdab506274b35e1fbc160490b97","ssdeep":"","tlshash":"3e017ba03136a239b6006864194a014d6f5e40e2760ba3d38e917e0278a305a9d394eb","first_seen":"2025-10-09T01:23:42.719096Z","last_seen":"2026-07-16T11:27:37.721048Z","times_seen":34,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-10.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.861Z","timestamp":1783511853861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-10.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-10.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkho6m1i29u-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1c3gRYMLJJs9DEaiRlj%2B9eYMU6sEAl3WgXQRZSFJqX29cqUSeQg6XvMA5ls76pM3pGZomzKBBtB3L1srTkUXMApDjw57IP8PFycFDkkpM%2FnsqA%2B46Ixnoyo6fEACCn%2FGIQDyA%3D%3D\"}]}\r\ncf-ray: a17ee97eac462efa-OSL\r\ncontent-length: 1341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2946,"size_decoded":2374,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf19e0bcc8b2548cccf8f41676d98487","sha1":"3141412148b5170366857d4458eb3a06999878fa","sha256":"fa71cd3e8c51271d865c74f200eddcceaff5aa1caefe4f67c6e9e0e0ab0a7f7e","sha512":"2235b1ab0256802dccdb6e07a39cef8cf01df0869ed130a1a125d07632b8c7e932d873668b7e23819f80e0e607310a53f1e0da0d8261c46e6c0a9d672e11a9eb","ssdeep":"","tlshash":"2a5189f652d5b2e0c107efb0e923d5e9724e34bf2f6692c64049e9a4e2952d5c89cc50","first_seen":"2025-09-23T10:56:20.513339Z","last_seen":"2026-07-16T11:19:41.998814Z","times_seen":59,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-14.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.866Z","timestamp":1783511853866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-14.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-14.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhqkcga2nr-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcVyOSD9F%2BFHNMrFMgLfO0ioYkhFhJ0%2FcElX7tis4MBepNY%2BG4tSPzOKDODyq%2BlzF4nYnZZIQYn17%2B2y4QQjClHZvn9Ztnbg406O81JjdIcIR5BTjfbV9vxuPFevZE5oJ0X6Sg%3D%3D\"}]}\r\ncf-ray: a17ee97eac4b2efa-OSL\r\ncontent-length: 1375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3447,"size_decoded":2410,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8868f668d3136afdb9880eb4060f5a6b","sha1":"bdae8cf240610b282d1d9d6c68499736dc9ec8e7","sha256":"4ac5eb4fb1e8d08409ae5f4fe1b604b94bb02e1599f601e7c8905be30d5a48d4","sha512":"3e7582fa02e30cbf1fbd3a1da22ffdb54e0c9b98f95f41cdc757e2b5c0891cda3d5d444f90be6864a5d78550e7d0e096261ed38802e50fe1107bc2174fa62e3d","ssdeep":"","tlshash":"7d6134e94bc924e4a9458bf0e5229b327f5738bf7719c7d58210eaf4fb0545cd285860","first_seen":"2025-09-23T10:56:20.342454Z","last_seen":"2026-07-16T11:19:41.984497Z","times_seen":59,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/ajax/winning/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:48.409Z","timestamp":1783511868409,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 107\r\nOrigin: https://rainbet-es.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":107,"data":"{\"exclude\":[\"988\",\"2057\",\"2592\",\"699\",\"1501\",\"790\",\"608\",\"326\",\"152\",\"590\",\"2199\",\"1576\"],\"locale\":\"es-ES\"}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T20:40:23.423558Z","times_seen":17297509,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/broomspun.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.838Z","timestamp":1783511853838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/broomspun.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/broomspun.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kii3eue36xh\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJG%2FbTYRzN%2F5e3RH6nfyTuhzjyMrMEqxa3kXiyiuaQ27DnEx%2B6K5snD5QqwQtwfL%2Bpobk8o0pDfxg3UzHMIxdxdBDjQ73RsvmmIU4nmtqJ3p4pYI30cOyw%2FFSW%2FFLHhNa7Q3Aw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e7c2e2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8981,"size_decoded":10003,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"13134520b1f0c77e3a29f632ebfa4cec","sha1":"516fa77e6b05e078b69e994a2017af37ce302f57","sha256":"7291b49883cf995fcc1dedd0123c41cf15c0e572745e3348dbef19213b2faf6f","sha512":"acf2817c8b48b1b72d6df826ed0a63ec2c5b6e52606a0b28a1e9872ca5a78915369736624999fd2983db5b3c0d56d7796967446c09909deb8816d9f9f0873f33","ssdeep":"192:jgJMJnXMg2J5WBRjNg51tzn658DxtGAL/WeoR2BVqYqs:jgJMJXfe5WqxT658VtGI/JDBCs","tlshash":"b602ae9fb3015c00f92d2335c4fab5357ef29f56076c2a67c6e219e817ab0510bad23a","first_seen":"2026-03-16T14:22:50.897651Z","last_seen":"2026-07-08T11:58:04.21209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/all-lucky-clovers.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.811Z","timestamp":1783511853811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/all-lucky-clovers.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/all-lucky-clovers.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kilzx4l0voo\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ek%2FW88M3w%2FlPuFxu89jkkGLIN0HPKltwuJEzK2%2Bk7sQK3Pls94HLIMdfvDL7gnZVIlIG6H12EB46kWmYNbi1j1DuFqE%2BA0BylpRhImvr3O%2BlBm0yXd4jJahRg7tJm6prJ6E4jA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e5c132efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41064,"size_decoded":42090,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"82f5ff953f660008c0776a4ff82bf77e","sha1":"c4c6b4d8170e68d190338f013e0b9375ca9176fb","sha256":"c23a7067b59cd81157eb6fdb15a0be98f52c94e1d209f3e62c638f3f91e4a6e6","sha512":"937290bf37722f09fb244a1066d5e8244a6f52ba2c6a2fed076a4df35e4eebc600fe8fe53fb9d7987cb2e7a83c4ff579dab44adf46e6bacd196370b09ab98016","ssdeep":"768:45GJp2BsLJbux2RZDRQ6FmwjGeJlTeXL9J2Txlqu/YewmSuJN:KGJpYGJyxIZFQIrj/o2Vlqum8JN","tlshash":"830301b28f75f4a85bae9e2e9080d363fd352f7ed70ab4b203aa53564359700c99c1d0","first_seen":"2025-10-09T01:23:42.771606Z","last_seen":"2026-07-16T04:01:52.304686Z","times_seen":6,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/ajax/game/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:40.397Z","timestamp":1783511860397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 132\r\nOrigin: https://rainbet-es.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":132,"data":"{\"exclude\":[\"335\",\"535\",\"1292\",\"2367\",\"646\",\"921\",\"971\",\"2182\",\"1067\",\"2001\",\"2389\",\"563\",\"2410\",\"309\",\"1791\",\"1507\",\"1144\",\"1697\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:40 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2HFlqwUICwrjP4X9n59KE2g8O12OqpbEb0aocfm55VmBD7Th0sOd%2F82g0LawR4yLV0H4kD4JViw%2Ftf8wMabQmk7kzc6JlgjAf2gXIIUbCrFaiWQL5KATMq9i3wiwpP3JpsPEOw%3D%3D\"}]}\r\ncf-ray: a17ee9a77ae92efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":76,"size_decoded":1030,"mime_type":"application/json","magic":"JSON text data","md5":"aac8213d5bb58a07128045661da9b5c3","sha1":"81222afc487b14c663bf5d4d4fe930c815cabe58","sha256":"2bb81de1710b150d5a07dd96ddc202c418816b5e48e19f4fb88644f412f6aec4","sha512":"dcbd3f1300d176d26032810587baa0c0af4af4eedea60249222cd83a8d1e05aae5ac71b12f64950d4d4aeec7d0536ac3c37830dc0626a91d20bec05d15dab42d","ssdeep":"","tlshash":"a1a022eee00028ca223b03082c0b3ce0203b0e8b00a2ac0033e0fcc20e2000e2003c80","first_seen":"2026-07-08T11:58:04.214523Z","last_seen":"2026-07-08T11:58:04.214523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/2026/03/logo-69b94e97ea4b07.28716055.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.805Z","timestamp":1783511853805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/2026/03/logo-69b94e97ea4b07.28716055.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/2026/03/logo-69b94e97ea4b07.28716055.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklc5rd-br\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hM6ex%2Fbh%2FaqJ9y3WDTB%2FNbEmlY2fsu%2BTObM1Stm37iMAWuIS%2FJm%2FEHsqfeIEvTwuPAqxSnVjVvmDcLbqQVfOWp%2F%2Fz2jnCxQIgnRNqyEBZPcDPmLeemF0nJ3tDsV%2B%2BEWxG%2FPCvw%3D%3D\"}]}\r\ncf-ray: a17ee97e4c062efa-OSL\r\ncontent-length: 3347\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7465,"size_decoded":4421,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93bf60c532d2c3f96b8bd29af98342ee","sha1":"7c77a2a583b1841af605e6a7d96f0a6bfe0a0d83","sha256":"15c3fe8e4a658db084d0b84e8589f61e0ce1f65ef0de286b1835f6549400b085","sha512":"10801879dfce9354420cfc48b66a18665050ac259d76314d7c51de1b137f5e4c78b0d7b3b4765805a69a01e7ffa58719faa22070d50e5e27ce29a819f0e14999","ssdeep":"192:kKAow4/s+pbZ+2A+tjEPrFPZq077e02qiw/DoVEYbz:b/sgbyvX0K/cVEg","tlshash":"1ff192dc1f796ee889c88bcfbf1260edba17e1b289560e05c29c1f5925c2c6c9905d93","first_seen":"2026-07-08T11:58:04.216325Z","last_seen":"2026-07-16T11:19:42.050836Z","times_seen":3,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/golden-osiris.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.817Z","timestamp":1783511853817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/golden-osiris.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/golden-osiris.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiqapt8hobx\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5cDBvA1F4gjtZoNWuno8rCWezHBF0N7PtcmlXKcjmCo2imwszCPG63GnuKkzipFMR3T%2Fb0ds3b8CGLN4jpYd9wU1%2BAXofRSYcUdAl6ViVLsyrxDLZZdyBZhJxA7HIbUmW0APQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e5c182efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31533,"size_decoded":32549,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f3d22e88998e334e0457b99f51d958a7","sha1":"4bbb1af7ff52d8bbe9c8c82edd8c76d3cf65b8b9","sha256":"5ae264ac1ba092f233029a244f2ee5942d2e370f67ff60ada30730a5233cf88b","sha512":"80f40ff7ab75c8a719d29a16997e97257a8cc8ee6c2b3d1efee9b25732cc17f5aa5d595c73ad471555f688e9bfdc2548f3a0c9709c0e227f50e937b2677e5a8a","ssdeep":"768:ptlYPEECqViVyZIXCF7tE+wK0IqOmG0ztujbxvt:cNnayuXCF7G7K3qnZxuPv","tlshash":"43e2e1a9b23014973ebdf13a5224dd26a7542fb84283e72b334d4124b71b5c5da316f5","first_seen":"2026-06-30T02:37:59.019107Z","last_seen":"2026-07-08T11:58:04.217343Z","times_seen":2,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/sweet-life.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.851Z","timestamp":1783511861851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/sweet-life.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/sweet-life.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\netag: \"dh52kiunw8apjj1\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2Cgo0%2F1ZiWaaHofWGBXWYsBa2sDnalSM%2BMBNeq1DEHfRudbW1ibN0GqCwmwOPHCMZPNbknkgRkHifdltCxzo1hCHskoHDeKSjNmcQapAVhZSDLQJ4kw1bNVH5%2FN0NRmCBIv9g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b09cb32efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25309,"size_decoded":26324,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"9dc0701045ccf75f81407f2e3d13ead3","sha1":"2e0f8af7e2ca8fdf55241e3270ae955f932ba7b8","sha256":"cff8c7d73272e3b13570d6905b83ef1a5f235ecdce9d978df65138be50e0470e","sha512":"3e68dc74f9dc597e300a8b13a31e0a7ba205a111374b06fdf51df67c9ca8916138e8dee6e75b9d8fb806c553eb589736e908a57ad59a312b06120f3bbf9fdbaf","ssdeep":"768:KDEt9VaHS4hc/isfdRgUUkk4OVTtMqScmYP3B:KDaVaHS4hwd/JPaMq","tlshash":"7eb2e138dfd0440f8c7c973a5dc44bb567bc6fbc15686391e570ae86033a928bb5a2d4","first_seen":"2026-06-30T02:37:59.039564Z","last_seen":"2026-07-08T11:58:04.21851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/ajax/game/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:52.506Z","timestamp":1783511872506,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 132\r\nOrigin: https://rainbet-es.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":132,"data":"{\"exclude\":[\"335\",\"535\",\"1292\",\"2367\",\"646\",\"921\",\"971\",\"2182\",\"1067\",\"2001\",\"2389\",\"563\",\"2410\",\"309\",\"1791\",\"1507\",\"1144\",\"1697\"]}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T20:40:23.423558Z","times_seen":17297509,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-12.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.864Z","timestamp":1783511853864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-12.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-12.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhqkcga2xs-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1rwHhkcL0wVTHpqGhKsIoAtmw1n6C9NUlE4O5%2Bw%2FhOV1JioVu02jOizvgcqex7y42haG%2BvcHAzMNnAaSEtmbmck3evTHnxz%2FMWlwB1fuwKRfxEljDdxKsPQEU1zc%2FkMO72Nqrw%3D%3D\"}]}\r\ncf-ray: a17ee97eac492efa-OSL\r\ncontent-length: 1704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3808,"size_decoded":2739,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3dc1b0be849e1a76c39d73119c54a4f2","sha1":"ff8c4c594605b5cda33a996ab2517c08639c39db","sha256":"65825152ab6d1b8d197cc531a0458467374105a29935f430f2de99b9b7c5925c","sha512":"b55f9fcdac28dd4f93e13cdee62019222442403ecf69e7c7a6012920dc52e8a5f6ae6576f82586e93a265af089d970f5a9878e27479df89eec40e3dab08f84b6","ssdeep":"","tlshash":"a97163ffd7c8a3f0940ae7b4ac13447a73ee3c7b77269b4543808694e75519888cc840","first_seen":"2025-09-23T10:56:20.252423Z","last_seen":"2026-07-16T11:19:42.04437Z","times_seen":59,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/king-cashalot.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.868Z","timestamp":1783511861868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/king-cashalot.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/king-cashalot.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kirctjsoxy8\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRKLZzu8IOPH5nFHnbHcS56qHCnJWLqW5y14vnV0mXH%2Fvco4xStO%2FFTnTfVlSxFwAA1HZ9W0mzr1BeOK%2Fw5T%2FnfVA7VkJEsE9yKLJp0Xyto%2F%2BN0IQCb6pUZ%2BGXtPnaQgp%2BXOxA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b0bcbc2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44000,"size_decoded":45028,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"aad4786e2ba2a15eb7427f65bd2158f2","sha1":"297504e260aa935fde82fb8cd83967d47a23a5dc","sha256":"fecd01a09ead7614eb8dbb4457c51e916197beee900d7962e6883bfe625b4a29","sha512":"40386da7e0ed4e5a2388a9015bfeeed581428835e91e908b05be423cd421f541364c81c317959950c52bd427610966ac0034b9100e5ba7552ce4b3e48d01fc8e","ssdeep":"768:IBeqE0qnpKRRubEvxVDt78gwpjZPEWJX4d5kX0vRrcWMnrXhE1lg89zf8f:IafKrHQlWKX4dWvWMrXiDO","tlshash":"a3130284c379cec8a419a5eb038e276790c2ee5fb59467f0ced42893c5f5a8539ac274","first_seen":"2026-06-01T02:18:17.533217Z","last_seen":"2026-07-08T11:58:04.223952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/owls.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.821Z","timestamp":1783511853821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/owls.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/owls.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kist7otfem2\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQ0BrPEZNG5c7xDOep2Fg%2FMOG137rIuO9AEV5rCA4eBq4nWRskqw6M3SIYZzGjbSds5CLTeYswd6TRIB0LjFDQF8O9sw6t%2Bu0maUMtliatnFFAtCgDc5jqePgbrxDV1BvQ58MA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e6c1b2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18938,"size_decoded":19945,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3aae99780887ce54e6fd19a151b02a90","sha1":"503c17a6e7995b791d675a8e427ac89260c02445","sha256":"136fc0737f2b1809c0e45ec11fb0d78e47c37bddbacb907b8b2a7369c3fc5610","sha512":"da260436b239b26ba43d50f8e4a61f3a4f642d509b476297b6d815e52552fc37c4523c86353fef983be9eb223dc7af851edb855179e608c70c5e8f689f9ea754","ssdeep":"384:qE/JyADNAsA4l2s/bfsV0fCu9e0aVVVI5tS:quJy+NAs72cbE094VV+6","tlshash":"7882c0f123859f41b12d268fc545e6fe44b858a776e9835ad0e46541af3e8cf8c3c4b4","first_seen":"2026-03-16T14:22:50.785505Z","last_seen":"2026-07-08T11:58:04.225989Z","times_seen":3,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/scarypumpkin.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.837Z","timestamp":1783511853837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/scarypumpkin.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/scarypumpkin.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kil074fl2w0\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mgxitv700hKt6J%2BFW6wWhBxdXQPKzZqKwq1AvAp7kfURoC5Ug6W%2BuTGAXvuGOL6JsnhHRpguhnU6YvAXYoVE53FmsTVF42tZjfhQZJYflw7zMnWfAnRfzuml1Pqw4COJl6lmGw%3D%3D\"}]}\r\ncf-ray: a17ee97e7c2d2efa-OSL\r\ncontent-length: 3729\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3744,"size_decoded":4765,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"18b1f3d8ae2495006466da0d6471ccf7","sha1":"a2e93acad208e3eea6db0f79cc08849d6c13d120","sha256":"b1c0367c752b11408ba30b165f1f2ef8d0b6cfd39ddc59857b71002ba9198a7d","sha512":"0253ce9967aaa5e82f55f184f8f7a7890819e8e3f3b009e5af60e9540491bafa49831be2ea11db5e7636f19c78a4a66d7927497436989437d288a14e94c84d0a","ssdeep":"","tlshash":"a8714d5a27174983cb5fb1b041ec68f6b34a1e7629c06756a4971ec473bb0b60aa3341","first_seen":"2026-04-09T21:54:52.217217Z","last_seen":"2026-07-08T11:58:04.227221Z","times_seen":3,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/close_icon.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.877Z","timestamp":1783511853877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/close_icon.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/close_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhlsvmr1ih-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NIthYtdfW0h2xwUW7tm6iAFn9Dy2diELkL2Q0fJ4iZfAUG4ghEijQOHfVSd9oxvmll4zE1lChvTjzb%2B0BJYnwLPooXas35NDpcKk2KJhgDbApZaH%2FU1uIBZSYT4mpGiY7CSORA%3D%3D\"}]}\r\ncf-ray: a17ee97ebc532efa-OSL\r\ncontent-length: 849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1961,"size_decoded":1868,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d49bf81bab3667f50b44f5734fae7b55","sha1":"ae887c96b40885b4958e8fea73db9c07b4b4a89a","sha256":"a16192114e48d9fe47a8372b58cd743c39753935f5dc79e464cafe280d2d17d9","sha512":"c0d503d9345825d690dd8dddf779b9e10766e0ba37ce3782b90936d27558ba93772e29cfa39a0aa76f8c121dad6f82d8357f6728e6183f11f06a0fbfa08b24d3","ssdeep":"","tlshash":"1541cb9f73c2a9c0f506d3a1892db4903a5675fe3d37c2dc868649b1e7a02fd482cc46","first_seen":"2025-09-23T10:56:20.484081Z","last_seen":"2026-07-16T11:27:37.720371Z","times_seen":70,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/blackbeards-bounty.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.855Z","timestamp":1783511861855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/blackbeards-bounty.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/blackbeards-bounty.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kimnqgomopl\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=faY9RYKbwNU2gzVLInzlCEuvpkN2Z3i3uwv4qnrVjgwQx7WhF5YgigKjOv9DU4gF397SkEvBB6%2BLG0wDFUoW8BHJA%2B6j9TdDZPskhXoC%2BnFyLSHe%2BzXdm83N%2BlJRotLUhl%2F1mQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b09cb42efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32025,"size_decoded":33054,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"7c01bc522aece3dc0e075994cd3feb41","sha1":"1c468a368fa17f9c63f9ca83eef033eaad238f62","sha256":"41e4af0687f7cdb902fe5ef8632c509fb7f259f85a97e3c60005fc7b4093270d","sha512":"fc8e35e323bfc16893625235fc160129b224aa9cfe325c9b5f1422404235ba511c73e9108d92b2e44f0eab60a280a124aa43c5d33f620ce169e30a12a5d8a21c","ssdeep":"768:aIEI41CGo3cSnd4hp4/r279AlvdGXJY3HhzA3PngmU:ajCRcSd4hq/K79Ivgs1","tlshash":"97e2e13aadff5812f43f21ae3dc0c170a7c5a647646385372b82786a2fd86d905b7498","first_seen":"2026-01-01T02:38:41.215569Z","last_seen":"2026-07-08T11:58:04.230204Z","times_seen":3,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/gangland.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.866Z","timestamp":1783511861866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/gangland.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/gangland.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kipu1od5jgl\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JiFP64kHcxV1aMlR8sIXOzEc%2BbkY6GtuRYRqPiGu0LOMHZ72eINf8kqfrZm3Je9KBTyXSUBRhKr%2BrXTsEBMvUh6YGthKvhy806xbUeOlAaWlawnSS%2Fin2ewdO1eoUN%2FYf6slkw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b0bcbb2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25221,"size_decoded":26236,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"074dc2b47e403428a4e45611e783c493","sha1":"2aae707a990b716fdf68e2c800da6a4754f9f607","sha256":"3e152dcd6a48ef78311ae49f01de5aa37c4c307b0157df9541b23bcd1d64ef9e","sha512":"c480d4888205e3cde87ff27d59987d3e265fd1b0db0dafa329980c304880fdad7043239e51e1a5a53800bb74f3c7596b3b908977422a4453060506f148c9abb7","ssdeep":"384:c/pbXHuzYeD7wXGEEj8vR3ygqGsY8VRN1+k1Rc9pJY0fdJU5:Qb0AWEPv9Hjs3Vr1+0upBm","tlshash":"eeb2e183ab486805de6d5a66a0fe7051ab230b393c7d42365158adfee310de8b99341b","first_seen":"2026-03-29T06:05:12.89107Z","last_seen":"2026-07-15T03:08:00.162978Z","times_seen":5,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/invisible-man.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.822Z","timestamp":1783511853822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/invisible-man.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/invisible-man.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiqyj5c3hp4\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOje%2FqfifXOnTVMFG9GfPjrdKhkAvedmCqZn17WexoQ9OFYAkhL6MK12qyFxb7oZ6wawkb4FkxAMDdxddRzZayC0KuUarC0%2B%2FXotfgDIeC0IepgpojauUDSNxzqbbzI6%2Bf0OJA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e6c1c2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22936,"size_decoded":23956,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"8af6e49e4668b80af73107c8823ec9b9","sha1":"37e840965cbc1533efaf532ab95aa48e3cecb05c","sha256":"fd665c7e6b654238e733454403451b44c497e300d2367c90a39aeb9812434476","sha512":"280845563498baa45c661850b719a7e6b1ffce2526536fd62870ee44be5bf7179156c75c846d1cb275cd2ffd8dd197339ffcfc56697b9c97bf7ac14b4be388c6","ssdeep":"384:BwBbcFQL0tvh3Fl1qaV+RVMLuxyQ+czE6EVqykFWY6pg1JtS3MdCY:BQb8tvLvVFiH6sykFF6ObS30N","tlshash":"53a2e1baad2fda01909e4c729534c971122dfd40c6398dc7d6ce01fabbbb54dd42c598","first_seen":"2026-01-12T00:47:41.918885Z","last_seen":"2026-07-08T11:58:04.235519Z","times_seen":2,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/fdewoo.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.836Z","timestamp":1783511853836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/fdewoo.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/fdewoo.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kij5ikya6aq\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mp6ECm6a9vxMgwedTlQiSxTkgD59fBCgKcH%2Fg00djzr5omaY5DBOIzl9FbSRzhGPmBlrZfnLTsWcICN%2B8SXUN38SfcnRz%2Fkuad5hvXmWFh%2BFSiWo2lPbDvF0kd8b%2Fy%2BMY8gCEA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e7c2b2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8162,"size_decoded":9181,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"51a5c1b780fa948e01acd31f04cdfbe0","sha1":"960659adb7f39fc93899bd4982aacad4a83d6aee","sha256":"f18217d4176490187884991e7783345633b259808debadc5360e3f36d9c2821f","sha512":"fe352c0be2e7525a6e2b315063ed01cf57745dc1aadd6bcd823c4b56ab7cde1a7c72ac11a8a4ff41e6b0df89755f5ab47727be34eaffa5018413921d7c7ffd7a","ssdeep":"192:aEZMjalqeQLS7t2vr5QcAmUpc6ArLchLMQjE0qZ/pjGHncj3KD:axeQkxmUpxFLrjEDZ/pyH7D","tlshash":"2cf1af324f7c142ce4af2db9113d1f38867a6432c9a1629928133f8b9376cc546f45de","first_seen":"2026-05-02T07:27:26.361349Z","last_seen":"2026-07-08T11:58:04.238795Z","times_seen":3,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-16.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.868Z","timestamp":1783511853868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-16.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-16.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhqkcga18e-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KnTWcc2WutQLBuIorctyj6fw%2FN3SL7B3XZeo6cmT7AcU5ZeNeZIgS92HY9DYGjrRvgdsNLcBo%2BGRP%2FGO6fywBCncP8JnRnHyKvrExVI0ao70DcAenv9j%2Ft9FS%2FrciisXBSkWoQ%3D%3D\"}]}\r\ncf-ray: a17ee97eac4d2efa-OSL\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1598,"size_decoded":1783,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df765364cd8bf39b6551de1f34acc58f","sha1":"580a6d7a223af6f4339d2bfd40e5ef6bacd8eb3a","sha256":"9b389fd3b6c0a3d8bdd75fd84ac3375056828c4d5dce5e48756c2d9341b04697","sha512":"022d00cb40252b3c5a1df11f03d81183e599b5e892bd0749b800672c6d708e531e5306133c1ce84168965a4361db142f9061a11e30fcfab12f86386c99078fe7","ssdeep":"","tlshash":"fa311fc9f2cde7c5c747fbb0d9336464294638ba9e16e21943dba2a496080ecd17c988","first_seen":"2025-09-23T10:56:20.390008Z","last_seen":"2026-07-16T11:19:42.006336Z","times_seen":59,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/arrow_left_icon_v2.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.806Z","timestamp":1783511853806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/arrow_left_icon_v2.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/arrow_left_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6o92myj%2Fhk92msgWuLWvdiJNxnU5ApqZ%2BZU47W1CsicIQRX8SoEKrzskpkcH5Nq8m61CsZDMdlVPXp1wSc4vC5%2FFBPC6ZbphgKVqjT%2B%2FnK2kxoT2YOruFhD5zC7DRX%2FbnPK6w%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kkhh1et89y\"\r\ncf-ray: a17ee97e4c072efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":1193,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d43950a1d8af3589210fa71aa5acd465","sha1":"29a98044aeae858e3c7c4621dbb0718360eb02f5","sha256":"bb897b7645e3d2de927772e4153777864daa5a85e584a6b8e05d0a90182aace5","sha512":"1e06cea8611ea8a204bde96441c6647395e6690052673bcaa32c5201cf0fdc8d3f32d02743e32b34f7d70a6fb5f3a11993809e007a7fd54c68c3f10796c2f853","ssdeep":"","tlshash":"04e026a5230c8c3cba224b28f71873768465129346d82198c9321a32694856e6d3f9d9","first_seen":"2025-09-23T10:56:20.446845Z","last_seen":"2026-07-16T11:27:37.545573Z","times_seen":44,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/fortune-panda.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.820Z","timestamp":1783511853820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/fortune-panda.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/fortune-panda.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kipi50bcmol\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pen1rVT8PjnFas8pBKdAOmGjk%2F0FQ4L2jsEoLzW6DLRxuOxmylGOTwghXD1eImK%2BOd7zWVkySe%2Bw1kSUT4IofuxTUCXejAokJSlbDjl6uJfNcjGgzOOG3ugDZzHpkLlZ5Y9ng%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e6c1a2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29397,"size_decoded":30415,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"953a6accb53700f2984269668df7bdeb","sha1":"6b799365dc49d71356df6f3ca9846fd2161e331e","sha256":"06d1450b1343352b25a207770b77e11e72afff60adedd918cd6247ed9bb159b3","sha512":"fec6a8c0d6ebf37dc9d82b0a84fbb196901ef826d633fbaef58e0f37fffbc0f9f9eb05074429d861684a4a345afa4ec79c13bd982389a0f9ddf8e91b74aaa3ad","ssdeep":"768:KLlpCtbtCzSUkwD5dtn/WSP0m3lPPCbsqwbV49c:olohtrVwV2elSb8SO","tlshash":"70d2e1bc13b5277fd85f4b349344b4c5e390cb1c4b0e5a973982e9799b29a88c51afb0","first_seen":"2025-10-09T01:23:42.701103Z","last_seen":"2026-07-08T11:58:04.242429Z","times_seen":3,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-4.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.856Z","timestamp":1783511853856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-4.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-4.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhvbt9s19b-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRcngRyJSrqGHQtY7Lrzfdw3T0SzCIDgLOsnoY0ZQ3aiat9AwYZdBt2szA3dNfCexN%2FKmpLIzz6Cp3ows9Z88SRJQCush8%2FVV7MRuGhUXbRKFJrFqy1x2VKybsFL0XV%2Fvtw7qw%3D%3D\"}]}\r\ncf-ray: a17ee97e9c3f2efa-OSL\r\ncontent-length: 760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1631,"size_decoded":1789,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c0d00c1a0b62e6e96a22de2fff89967","sha1":"753515c4ffd89eaf7ff41f11248f995bae2a5591","sha256":"d648926634c01101e834df3c9a37578267bfcf3baec1596b26bbf26f80d3947e","sha512":"5a6fe9b7f97f5e60971bba64e89763906658b881f4d83193463d763707754f60857ade205f0e47da391c84b4055fe987248a1b18e2d53235148308828b1e521e","ssdeep":"","tlshash":"593114f563cc71f0cb47e771d82f10a37f7220ba234deb5a63d81dc2662616d8189980","first_seen":"2025-09-23T10:56:20.432683Z","last_seen":"2026-07-16T11:19:41.986298Z","times_seen":59,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-15.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.867Z","timestamp":1783511853867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-15.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-15.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhqkcga16j-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCECiJ23%2BC8WVJEIAmHny1rVy1mI7r%2Bf%2FWHuivll40CY9YKuX4VVoc%2BixM92aMGRuoQiX8txkQheEAZXL8nLTx%2BM9yopsD4LaFChO6zLigO4Gu2jbjMp7tazbCZQX7dU57UlBQ%3D%3D\"}]}\r\ncf-ray: a17ee97eac4c2efa-OSL\r\ncontent-length: 764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1531,"size_decoded":1798,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b5069c2e7041940a7e01910ade8c30d","sha1":"5765b729a0b250a82c050f4360ba1c9319b53eba","sha256":"81a7e9e0fa50af39a89f5c457c405559a4564822b7668378caa4e84422ecfa96","sha512":"2252ae727da9f4c3789c5cf3936af343c3a59f79f3f0150195a9c0145546e2e0585ac4d2fca574c9baf41ccca2bbaed03d27ff478131dd500d286f25e31ccf10","ssdeep":"","tlshash":"cc3179f82bc595d0d901c770891690b4195e38ffbdb5dbc8c29148e0ee500bd0d1d880","first_seen":"2025-09-23T10:56:20.391686Z","last_seen":"2026-07-16T11:19:41.973948Z","times_seen":59,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-17.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.869Z","timestamp":1783511853869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-17.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-17.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhvbt9s2dl-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xTbU54nqREiLbIevqbcsjm4FtWI2eaphLJE6MGraX%2FGRqi3LMHC3kqchm9W5feklBjeV4f7nxXiJub8U8lFlPlezL37X0LamooYOUqKUC%2BeG0ldOKj7AM0q6Sfrhvou7HXpQg%3D%3D\"}]}\r\ncf-ray: a17ee97eac4e2efa-OSL\r\ncontent-length: 1356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3081,"size_decoded":2385,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95a2291bc6bfb22a5f5c638257eb08e3","sha1":"6c615add4351ebda719a8921502723751431c469","sha256":"e29394ad1cf34b556b6de5c10afd62964807d19e0494cb8137dadc003f333911","sha512":"72fc5b010c871b0b68bd640ffca2f92bf6d1bbad3d77b772bf661c4d94413c703f060f43eed2b288e18dffaa22bf198196846dba9dd880f975d4d42461aa957c","ssdeep":"","tlshash":"e95166f263da62d1a90feb81a4169833be5e3cbb3b5ad74dc1b0e744b652154c44ccd0","first_seen":"2025-09-23T10:56:20.373094Z","last_seen":"2026-07-16T11:19:41.974526Z","times_seen":59,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/18plus.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.878Z","timestamp":1783511853878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/18plus.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/18plus.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhenoeh1ar-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=irMmB9Hla%2B8toYWoV3bC0K5Z9FlkZdJ%2BOq3XyHNcRS1cKNaXQ3wPcHpk%2B%2BETpWwQgsKJk%2BU6CkeP%2Bi1rxhEdxAprcFYRxMiblqOKfbv7FFlLkdUEC0dzs9Ih6hm0DUaG3UlUfg%3D%3D\"}]}\r\ncf-ray: a17ee97ebc552efa-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1683,"size_decoded":1705,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b42465519420fe87bade4adff902f4de","sha1":"064e45920531b0b5ae8902f43ab5a6fd82053de1","sha256":"346dccf80cec2eac96a6102fa7a1043465537c0bd8a044c10bf5974ca3392739","sha512":"46131fd6a08de31eafdd955bf3b696e98766c31bed4e10c889ec1befbfe1b3552c98539a6e588299c9151c17872ec803cdf8cec5ee527ed7e97c69a1909263ae","ssdeep":"","tlshash":"d731ccf7abc872e4d64657e6a07a7518f67530fbbb5acf05818826687a0117fc0ccc44","first_seen":"2025-10-14T14:51:49.128463Z","last_seen":"2026-07-16T11:19:41.955135Z","times_seen":30,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/build/frontend/images/close_icon_alternative.30d11eeb.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:40.352Z","timestamp":1783511860352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /build/frontend/images/close_icon_alternative.30d11eeb.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/build/frontend/images/close_icon_alternative.30d11eeb.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLPDV423NX9X%2BmXA9qz0lYSstelMLjtL59z5Jz%2BGlfjPS3jYEDD%2BdWyaAbzvINY8chR27gQMVF6a09BaKdRhOcoy3Dt9iss9ZdDngkpcPteXNjHT6j1V%2BLOWXV19G9yM0Ii6iw%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:54:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52n2hhzj555z\"\r\ncf-ray: a17ee9a73ae22efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215,"size_decoded":1178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f9483da40b704e14271539a745abb95","sha1":"66fbac8132e78db3073210c24d70368931194f0f","sha256":"674f051b16abc0fc18ecb639d06d5ad9d3c8cbb7fba4dbc01b86d52a110037a1","sha512":"85ebba8a7956f2cfc4e8ecb92f07f4d8352e96cec0d520b10dfc3073b11056fd59a5c80f464d3b2416622c66583491d02f0508d9176835a04ed8b57040370cf0","ssdeep":"","tlshash":"bcd0223e32084d2eb0208620e7a83135506a61435a89205ced3228332201a6f7c3b6fc","first_seen":"2025-09-23T10:56:20.51039Z","last_seen":"2026-07-16T11:27:37.618755Z","times_seen":106,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/previous-arrow.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.833Z","timestamp":1783511853833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/previous-arrow.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/previous-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=koNJ10EnFG7YXiTY%2FpdPnaQyr87fDevoclxAHLLIFMg4FzWXLgtMZviCNwiYaC3%2BAs6hPrrBqjjtX1OLPzC5nScC%2Bq3K0o0NZpvsjsxzVcv7bKj%2Bm8lAep6buxT6GryzSGYAXA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kki78hbl6n\"\r\ncf-ray: a17ee97e7c282efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":1163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c984c402c33c19defa622a555ab1ca13","sha1":"0806b39e6f47d810a71a7284887ba8dcbe29551b","sha256":"a2cb3406d6dc745a6f438ae2b5c381141da3dbe56e664949bea2dfbcadbde1e2","sha512":"e3b4bf714c1b071b3d531ffbf3f2331765cc7409e1ac764a2d958457ea315415a5050b17fd2612b3f9b8555242b9329882d79554bce4f0638b0855fb6b9c794e","ssdeep":"","tlshash":"6fd0a7a953088e3cb2218b11fb29323570ad61a359881194da611a31a65456e7d7f6dc","first_seen":"2025-09-23T10:56:20.491613Z","last_seen":"2026-07-16T11:19:41.980818Z","times_seen":80,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-13.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.864Z","timestamp":1783511853864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-13.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-13.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhqkcgaf1-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gioOKLhWOq2s6H57otpZmJfPvpTD%2FS4RtTgItbi0DUVwPzsmLMkPbsDolgUGaN35ylObIAWq0ryUCO8q%2FmbCvrqfyTkCrUK1cJ7AdyYLrpt%2FvS2U12T2AVCWtwXq1CTlQ3cJvQ%3D%3D\"}]}\r\ncf-ray: a17ee97eac4a2efa-OSL\r\ncontent-length: 314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":541,"size_decoded":1343,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c03da396c4a54d198a2aea69262fc761","sha1":"91f908651645b656a6975c115bb6e74b367c67e6","sha256":"aeea11511c54fc4e4d8b68b7ba799d2540a4aadf919ede1733d0634cbbd5dbb1","sha512":"0f6c0c61fc73f4e07a276f8413c82b061ac07096e4b92cd2293fd3cd6b4e387cf213bcf713d0b6302817408d13f5cab1e956e66c2b77e41e81552517aadd19df","ssdeep":"","tlshash":"34f005e5f6ccb0524605c712f52ba533b87f74d72abdd54a90a12750f5444cec81d9d8","first_seen":"2025-09-23T10:56:20.452417Z","last_seen":"2026-07-16T11:19:42.032989Z","times_seen":59,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/2026/03/banner-square-69b94e978761d8.03876646.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:34.248Z","timestamp":1783511854248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-square-69b94e978761d8.03876646.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/2026/03/banner-square-69b94e978761d8.03876646.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklc1qpv\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7peDr4yv4i9Q1LFXyccsEMOlq5vwVBrtCNcfFfQYlD%2B4S%2FcwYuNBUNVbZnJ0PURCWQKwEX9lolA6frau%2FeN8d2geNF0kbDsc30uGOGPGGBZbMDgVumutHCjwA0T3EgCTuA4sg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee9810c9e2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81283,"size_decoded":82333,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 360x334, components 3","md5":"c939c63eda37e4b206f4f1e6c281ec0d","sha1":"e6f4b0d2c1b95f475e541112f564c67dc5de7051","sha256":"a48d0e7c7fb1f8f7dbba18584aea2a06dc386b529b0ae2f80670c338faefdf9a","sha512":"263f45ff576e781ae6dc9587f92dfcf53bd4e2eec000589ce0ca90b10c3d8d2080ec865a28214fec652e4e6efac072f934ba48f11fca2a12a984457c8a792863","ssdeep":"1536:v1GyLK0iVsYxRHGzzrmSFPbQLPhfz5aFByoC6kLPFqiHDpb4Czip:c6NurArmSpbUPZEBxkxqK4CzC","tlshash":"608302beb0e67aa29f5f9768e0df5349450c7500aa0acd845f467cb9c21cbcd245293f","first_seen":"2026-07-08T11:58:04.257891Z","last_seen":"2026-07-08T11:58:04.257891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.797Z","timestamp":1783511853797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 10 Jul 2026 11:57:33 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BaP47AcmIEIp6KlG33a0IW0kVwGyEv9JYJ3aXdmEes4RQIDmCsubG2cJpdo1l8r1o%2BnwepJZ3cl%2FrkTityWA7JCd9Db2tKzPkUqCPwPq0NKvOa0XpNHCY1Znm%2Bnu215uw6sfgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 08 Jul 2026 11:57:33 GMT\r\nserver: cloudflare\r\ncf-ray: a17ee97e3c022efa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-16T20:39:59.108583Z","times_seen":397946,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/montezuma.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.826Z","timestamp":1783511853826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/montezuma.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/montezuma.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kishb0rmrrg\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SaHkzXdjZ0C6ZFIBaGEztIfJjmiPAwLV0WNrZyjfcFaIbmbIvmuIWraMbFMF5g9%2FNDLMNDbo9685i8m5sSRGCq%2FUgyJwb%2BPxSpxQYYmVaqVLZWQJwNhtMyxFlIgURXIO0J8g8w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e6c212efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35980,"size_decoded":36994,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"cc1fa99e039a9f110ec515880f958168","sha1":"557307fb0936e677257159c18018381ed0a2d463","sha256":"5db2f6ddba05ef1936e47afa5b338bce7367cea4b3ced80dc7dc449b29e1ba83","sha512":"100c17835dd180ad81c8a8894bcab93b9c7c5f9a2288c26dfd9e72b2ee8d8f6e65b3aeb903533d0ef8070466af844b27a9b799d9c1056c0ab1381f55389ae83e","ssdeep":"768:ZSRjlPQtg/1q6N07e4zdjqpDA1UvVpwotyIM8okC:cRjUgK0cSHhsIM8FC","tlshash":"55f2f189d5044927e96d8167ca35b3336766acb3e1400acbd57fb51c3f44b74a88690e","first_seen":"2025-10-08T14:20:42.541726Z","last_seen":"2026-07-08T11:58:04.259959Z","times_seen":3,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-5.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.856Z","timestamp":1783511853856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-5.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-5.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BIgstigszWCks26HKAICT%2FZuOV1Uc7lJ384W2%2FN3AjmRI%2FkrB1vpuh0eN1P8xNZLKXpl3OhKoIV5wQqdTF%2Fpy%2FGqr9lq4J1gyvynSQJmFMOHCCGDfRLKTio1Du%2Fw1i%2FSZsog8A%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kkhvbt9sdb\"\r\ncf-ray: a17ee97e9c402efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":1290,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44437bc074c7c0946c518a802a0250db","sha1":"1b42f0ef63627752dc0d0b2d0f835e062484ba3d","sha256":"eeeca5b3e5758a03382583ffd0130b9640c4d4538dcdc7da1f6af5a943b522c0","sha512":"fa0416cb6707155a511635b8e2289f0e3ffe04a23b8ed026ff81cad154aaf0f8f6e1912d3ff48996644eb27a4139ab062a4ff6c671e22d5b2bf756e5bd192183","ssdeep":"","tlshash":"d4f05979b34820405a2cc73099dc7cfe316f322623845088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.362497Z","last_seen":"2026-07-16T11:19:41.962677Z","times_seen":59,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-8.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.860Z","timestamp":1783511853860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-8.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-8.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhxpjok16h-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=An1fMYu552URUe2j4LEFIXUebduIhhJBxJFaw6odgzM%2Bp9iORKS8v8XGp7NaBqVA5AXdN2qUvn2fxMh6BpEp6xVX2iAqiS18TnM0Nd%2BYOC9hJPVK6omYFSAP8HWBhpOsLoAK0w%3D%3D\"}]}\r\ncf-ray: a17ee97eac442efa-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1529,"size_decoded":1709,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"763cf41016fb36fd4e6ecb70afec92ca","sha1":"4457569ad0393c21813aaac73f12511d5b9e6964","sha256":"547e02336706c25450ce64cadfeea78c83d84162eede33a1c2d95c30984fc3cf","sha512":"bc4ccd2b40e5770cff41c0cb5b615c9a60f69ea413eb2fd5e48ea35f1c161e86ccc9316469c84e69a9d399ae55fe8eb5df0ea4ff51c9dd20b60cca6688f27623","ssdeep":"","tlshash":"033113fb934cb9d0df0ab7f0a66651a5651228ff7ab7c9dd82e12d168d5002ecc4c911","first_seen":"2025-09-23T10:56:20.417198Z","last_seen":"2026-07-16T11:19:42.018585Z","times_seen":59,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/build/frontend/images/hero3.8abd0bc0.webp","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:34.232Z","timestamp":1783511854232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /build/frontend/images/hero3.8abd0bc0.webp HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/build/frontend/images/hero3.8abd0bc0.webp\r\ncontent-encoding: gzip\r\ncontent-type: image/webp\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n2hhzj5557q\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5GDa%2BS%2FcdrHcraGdz5HB95vyH2gPRhW3Oy6edfEvJHJhy9Db9k9h0csfPFHi06bpmlegS8pUi6elpoXQao%2F1PFcH0V2mmWy%2FTHBoGfd%2FzIk6x1%2FjruFIJHu1t8uvdy5hpcsGBg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee980fc9b2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6758,"size_decoded":5272,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x760, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d28aa48798158135b67e00bdc0edf88d","sha1":"16848b8de4af6ca3390673b1b1ff65341336e97a","sha256":"17a792b9f42c5190867fa7396ac526a4ff678805a0fba43389af1a466312033f","sha512":"4ccf446b7b74bc80ebd809dfccfe4e9fc8443de9003bcc795b5db2a03fbaaa2ef08c5ddd9ed53b2624f7bededb13792df0e2a673e27ab11187cd873cc3c6539a","ssdeep":"192:Xd3sRlGEDhtPxCVGkTIiIApCFRq0Kn1/eOHK56/:N8/GENtPxCQ0IiIApCnmgOHKk","tlshash":"d3d195ecf1b18465eb2c1b56094a8af72d5dab2f003647ac7ab8d4b152ed50c1fadc1c","first_seen":"2025-12-01T07:25:15.285226Z","last_seen":"2026-07-08T11:59:44.450671Z","times_seen":14,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/ajax/game/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:43.397Z","timestamp":1783511863397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 132\r\nOrigin: https://rainbet-es.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":132,"data":"{\"exclude\":[\"335\",\"535\",\"1292\",\"2367\",\"646\",\"921\",\"971\",\"2182\",\"1067\",\"2001\",\"2389\",\"563\",\"2410\",\"309\",\"1791\",\"1507\",\"1144\",\"1697\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:43 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iHDS5EPWrv6FTUg%2FzN4QTUUZhPjTYknYSHHFRJV4rqIwFtos3vZ3HUGyp8lSMvCDnvZmKQKbYVksgNQqQRO1ow6WTwZNfi4nA1y2ZPimSv3Sr23Roq05mWhj%2B6eyaGBfWzqEXA%3D%3D\"}]}\r\ncf-ray: a17ee9ba3ddd2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1034,"mime_type":"application/json","magic":"JSON text data","md5":"18df1a60f63998fd391bb38aacf6f354","sha1":"3418a923fc18330ba436bb95e50b0f2e71a7d698","sha256":"fb865f839ab281c38a63deea629b22c0ebfa557637c2e11f1638c147ac4a4982","sha512":"2c06d3466c9787a351ee770d781c72182e2ca8e592618c6e286fd28e9f6f7f17183f71dc46fbc4e4a82dc284e31c99b0a5a571720d168d4ebb191b0f2df64622","ssdeep":"","tlshash":"01a022ee8008cc8ea2f3ae003c8b30eeba200f2300aaa800a3c08ca80f3c2020003c00","first_seen":"2026-05-23T01:28:26.642588Z","last_seen":"2026-07-15T03:08:00.26453Z","times_seen":3,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/spunky-chick.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.841Z","timestamp":1783511853841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/spunky-chick.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/spunky-chick.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kil4yl946iu\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybAVmZNgrJQx0A6OinS2V%2FEjMCk2FIRPW5TrQpy7E2C7GVCje%2BRkgbrlVTrWhSTxA19rj9NHbwyyxIEvQ8kuc8pYjnF5p182LYH62otONG1Rewabbe9PIVzqBEzPBMnkK4hL9A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e8c312efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8454,"size_decoded":9471,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"d1a78c2c1b52f1e0c064a2add098a972","sha1":"ff776728e402f18e060e367fda67ee3b50ac7e92","sha256":"337c2da4064dc8df6e6c11f7377e66314433939eb7f968cc0f4e26f1b86c713c","sha512":"784aae8f397155ac6e92a8d2d6addca597d694e75481039cfabf68932515d36a0df25aa28a1adaff14023a21020030c100c30d1678e5ddf259931338fac29308","ssdeep":"192:nd5UgUrWA4SaayB9g0q5s7yPPcjE5/CBHeu8ke71x+VKtr8xtxg:d5kWA4ZZnxPjE5aB+u8lb+VWS7g","tlshash":"cb02ae62fd285201f13d7233c9f52411d32ce6f0455f9797054628b86fda43aa96a9c3","first_seen":"2025-12-15T02:33:05.898604Z","last_seen":"2026-07-14T13:54:41.548669Z","times_seen":5,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-2.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.853Z","timestamp":1783511853853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-2.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhvbt9s164-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvUK6OPjpvIY%2FHiKqUqhpLUSI3vMNhTO%2Bek2%2BSwt5O1GocmrA51%2B8V3NEadfEebAEHBfFrATk9xjG%2BNaWMiALlJRhzzeHA15hxEsxl0mnFDh7YxWrlZymxWXSZQlxp6Na4fj%2Fw%3D%3D\"}]}\r\ncf-ray: a17ee97e9c3d2efa-OSL\r\ncontent-length: 775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1516,"size_decoded":1810,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53eca9a29b8da20d28484c8d01e514e8","sha1":"1f1d6484552d99f175d7041fcf7976e1efa933d5","sha256":"e17ee8d46394ea794efaba9a0f57838f089e8de8f7a644e88fbd8884c901e1a7","sha512":"f55ab27f3394237f313f627c7f15026fffde59d29090b0efc32fca2bd5d791ecc22c921e1a84edaa24c9556bd3ed13e230c6cc2e5baa85bd515933cc5b0d85a1","ssdeep":"","tlshash":"273167ff03cc72e0f402dfe1d81578667ea638bf6e15d75e8255b920b51126f0588884","first_seen":"2025-09-23T10:56:20.511844Z","last_seen":"2026-07-16T11:19:41.983819Z","times_seen":59,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/phantoms-mirror.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.846Z","timestamp":1783511861846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/phantoms-mirror.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/phantoms-mirror.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kisxz5mylbi\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErQR00%2Fp60pCBeOv8hDDnUByP4zvju9vyPdr8TtfnD85IXnCF4NBU3akqIfKrcLzpby2R059mOG%2BFQNGMuNiKb8oFpi7imkVVypbGBfJ8tcyNi%2BPPj1r9k%2Fz%2BaAOpN5GynxVng%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b08cb22efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27630,"size_decoded":28654,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"e32ef732ec7ee20db6b76ecf670da596","sha1":"a33d8889f95370dc12f0ec8845bb5e2e5cd3a1ee","sha256":"acea047f244d68a789b967eaef1f012f0e03ef99d3796fd5d78dde90e6f9115e","sha512":"30cafb04d82c85f82938b91daeb647afde2519290f272a51de71b6d8124d80d0fa9eeafc363235cd7afd792aa8741cf38c26fcc8416b372a2aca8464f52a2f78","ssdeep":"768:qhhnVlAqJCpCkR5yaoX86GP+jPylfDbPm/t1smq:q78oCpCmy18nayGsmq","tlshash":"2dc2e16ede34f4e3fd6d661bd2225e771a5298035034c2a7369274033b0a764efd8ba4","first_seen":"2026-03-21T02:18:55.542886Z","last_seen":"2026-07-08T11:58:04.27151Z","times_seen":3,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":354,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/lucky-clover.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.832Z","timestamp":1783511853832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/lucky-clover.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/lucky-clover.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kirr3y98voo\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yz67L42ojPaPvfe0KoLPsCw%2Fxbh2fuXpOrTnRQk3V%2FZ%2BONE2ohoItCgE0HX08e4Wh5thoJ97yWwA3vMSxqqI208EF7y0oWnmKvx3%2FanUfXVVuNR9tpJda4OWfKb4FRMBI7Nmqw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e7c272efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41064,"size_decoded":42083,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"82f5ff953f660008c0776a4ff82bf77e","sha1":"c4c6b4d8170e68d190338f013e0b9375ca9176fb","sha256":"c23a7067b59cd81157eb6fdb15a0be98f52c94e1d209f3e62c638f3f91e4a6e6","sha512":"937290bf37722f09fb244a1066d5e8244a6f52ba2c6a2fed076a4df35e4eebc600fe8fe53fb9d7987cb2e7a83c4ff579dab44adf46e6bacd196370b09ab98016","ssdeep":"768:45GJp2BsLJbux2RZDRQ6FmwjGeJlTeXL9J2Txlqu/YewmSuJN:KGJpYGJyxIZFQIrj/o2Vlqum8JN","tlshash":"830301b28f75f4a85bae9e2e9080d363fd352f7ed70ab4b203aa53564359700c99c1d0","first_seen":"2025-10-09T01:23:42.771606Z","last_seen":"2026-07-16T04:01:52.304686Z","times_seen":6,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/apple-touch-icon.png","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:34.772Z","timestamp":1783511854772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/apple-touch-icon.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:57:35 GMT\r\netag: \"depnh2ew9bswmao\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M68mqc0PlRUQwL1NttJ%2BloLK2osBcKZfCAqTfiDrqhLImLuJ247Gh0QcgJkog5S1xUfjJ07agarVWkb646RhAMr5Su%2BF36kfbInMp356FmQV4Okhw81nwEU98hXPbitkbffvwg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17ee9845d622efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28896,"size_decoded":29897,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5d07718e180fccb06278e168924ca478","sha1":"6e15a0cd43c05b3344f420c9c3cefae27df3745f","sha256":"fd0ca4e9284c27250808008a4543aa282bc1b9c32d0ef36c3f6fafbbc7a7bbea","sha512":"a8e95221e0be0728c8a17f9f889e90b3fe7e4413668c750192fe3b2ea2839bab9a858aa89982d8884638438f485f61020204aa40c58b96c542a1049e8739204a","ssdeep":"768:mLgFKbhP9iyRMUH0jU9Vvttv7FbDPLN4LQt9a1ToeU6wfBUAAalu:bKV9iyj0w31zNV9USdAalu","tlshash":"73d2d07899c28bbd606f456d0dca110eaa9eaaa564104acf3da87e647cc39cc1c0f5b1","first_seen":"2026-03-29T06:05:12.862655Z","last_seen":"2026-07-16T11:27:37.607951Z","times_seen":9,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/ajax/game/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:37.397Z","timestamp":1783511857397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 132\r\nOrigin: https://rainbet-es.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":132,"data":"{\"exclude\":[\"335\",\"535\",\"1292\",\"2367\",\"646\",\"921\",\"971\",\"2182\",\"1067\",\"2001\",\"2389\",\"563\",\"2410\",\"309\",\"1791\",\"1507\",\"1144\",\"1697\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:37 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:37 GMT\r\nserver: cloudflare\r\nset-cookie: geo_country=us; expires=Sat, 08 Aug 2026 11:57:37 GMT; Max-Age=2678400; path=/; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ha4QOYQjqtcVJh18ifU3CQsCV6N2Qc2lFNUjIvu9gf%2FWt97ep3T0GzdNJZD2jcw2GFSSIbs%2B1SQd%2B4fIqNavWb5AxUAdtQ5mYzdfeSDXd9SEqgGvKDPxoin%2B9wyQMR%2BU8KWhmQ%3D%3D\"}]}\r\ncf-ray: a17ee994bfcf2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":86,"size_decoded":1146,"mime_type":"application/json","magic":"JSON text data","md5":"e615dcd2440ad7ff10a922cf6e47896c","sha1":"4929fb9ae2dcf8734beb1ac7669796753fc9d0b9","sha256":"5eadd5d263fad44e3459aad93f6f948484681cce7eb0e27b88b103d07a35417b","sha512":"180a58ec97322c536f697eb3f5e93a3afd39a8368316a95ce288848a6fd634ea751fdc593e01b4715a7dfba2a793c7d4fbe629984d6a4f86a7af806cc4c0c542","ssdeep":"","tlshash":"39a01295c030152b11a3040c541635c950508b4320604d2012c84880155130e0023c00","first_seen":"2026-07-08T11:58:04.276914Z","last_seen":"2026-07-08T11:58:04.276914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/great-queen-bee.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.871Z","timestamp":1783511861871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/great-queen-bee.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/great-queen-bee.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kiqd3jn9ssx\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1Yep1CB0m5fWFHNbJrAOz%2BqH6fxt0cjs3c63joJ4WcE2TyJqyXJhuAPKUV2atrWLOm3BZJHlA8t5GAtSSSfOfQ4qADxCfyOdSDqPsQlsuqw6p7Cl2AFUe2E2nJQPzs0%2Bd31Lw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b0bcbe2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37329,"size_decoded":38347,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"354cf3f48720caf5f2e581065fbb795a","sha1":"8fe085a6f61e8c2c26b0cefa42d0ee388334b21d","sha256":"c81d0028fcfe0e6feb17cd57544de88e66c967c36564c3d2be733ec75af62c2d","sha512":"9c14e7bd153093151d0495471b06afea10a1d7ec5ed74a146410abdfe46f26339b4d51883b86afdad655d772736b9662c6c69536f1b72dc2effbcaf0c2fa5bcd","ssdeep":"768:BTWDr4mgGJcs6++M20AY+5fKaXW8QuLbPU9xBn5KVsL0cB/N+SvwBOCODVjOT:ZErYHs6++v0tkHXdQunGxBn5KaES44Lm","tlshash":"6df20250e7e6c02883f65f7483f27b24a2df96d95c92d2983f8961d6f3204850d63d88","first_seen":"2026-05-18T23:51:30.682393Z","last_seen":"2026-07-16T04:01:52.241389Z","times_seen":4,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/gambling-therapy.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.879Z","timestamp":1783511853879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/gambling-therapy.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/gambling-therapy.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhlsvmr8qi-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2BpbvwCJAh%2BPjq%2BL03%2F4SBq60P0E5WfMFc5crmaseRDWy6MGhtG21bMrHccAikZjMgMOKCqXVX0CkyqdcAW%2Fv3e236uBEj4BLovXFz6mwMNmki812VG%2FDRMCDu%2Ff9sY12zr6YA%3D%3D\"}]}\r\ncf-ray: a17ee97ecc592efa-OSL\r\ncontent-length: 4642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11322,"size_decoded":5678,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"227ba6cc3a63172a4dcd11dd41e25a32","sha1":"4f4a04e5710e15f2b25a88cd803a1fe26fcb4bde","sha256":"56f3544eca45e25b4679c142aced2a4d5619b19892f836edaed193e264415af3","sha512":"bb6b03b36ec8739824c325b1005aadbaf52000f0c0ae77a1aaee73a3ae87ed6c4ec935726a59b22ed5ae10d9210671e124c9471a696c381f78fb3b478a85735b","ssdeep":"192:SqDNRz+fDeLzFYUVqaqQ8mce1HLMajzj3ea+novICc+Q1+sl:SON5+E/VumjLMAzj3wl","tlshash":"c832b6eab3e4f2e4f102e7f0d52194307bab38bfbb66d618c3956dd0aa1100c5a95cd5","first_seen":"2025-10-14T14:51:49.035077Z","last_seen":"2026-07-16T11:19:41.954509Z","times_seen":32,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/be-gamble.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.880Z","timestamp":1783511853880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/be-gamble.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/be-gamble.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhh1et820ob-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9yo9TsFijv9q%2B4Xno0%2FE4z99ELFHmYSJFlkAYKxCL%2Bry%2FESxTCfShyOBG5FEY9MsJNY9TzLsGCI9R8%2FHJgtPDu942HwKPsy8j5EmFSkgYPM%2FP5Dh%2BCW9VLkGjhpnrJOh27%2FTw%3D%3D\"}]}\r\ncf-ray: a17ee97ecc5a2efa-OSL\r\ncontent-length: 43518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94187,"size_decoded":44551,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2630e6331e38bb73b65c6f268ba880a","sha1":"c5eb4f402cd9a654c44f45232b9be73794df31dd","sha256":"c80089bf96fca7f674c0e8815f64b93db18a0cbb887a289545ff53bd1defe1dc","sha512":"e36f67c91873e96ba79af52959383a722312d5f0f683b9b6f5819f4f2d2ba7fd3fa731889effc3392533db1bac0aa5413062e6cab6e98c887e2a499564c9da50","ssdeep":"1536:sPN4zqNHCmLcT4rw1iXHu+H5+8omU0JeJcshTj/D:8N3NimLcMcEO+H5+8ogJ8BTj/D","tlshash":"6893202a1c5c6b4e33760daecb43243e6e8235eca29d85df389f75ecc2635509271da4","first_seen":"2025-10-14T14:51:49.415953Z","last_seen":"2026-07-16T11:19:42.01977Z","times_seen":32,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/ajax/game/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:46.399Z","timestamp":1783511866399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 132\r\nOrigin: https://rainbet-es.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":132,"data":"{\"exclude\":[\"335\",\"535\",\"1292\",\"2367\",\"646\",\"921\",\"971\",\"2182\",\"1067\",\"2001\",\"2389\",\"563\",\"2410\",\"309\",\"1791\",\"1507\",\"1144\",\"1697\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:46 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDjj0EGfqHZ8OxD7E932%2BlqLZaQ34KQ6Hq7m0DxAeZTIY4Ucu54xiJ5VY15cjcgvdBrnpqCklnp5lNbgZalRYoja8UxVQ5IHAYPVBnLMoRiDfiOCCTsqVLBg4oAIkYChzE4Wlg%3D%3D\"}]}\r\ncf-ray: a17ee9cd08332efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":1031,"mime_type":"application/json","magic":"JSON text data","md5":"23a80910e49cf9e0ae9fd08dcf12905f","sha1":"a0eb7a62fce9c86493f95d236355c0caf997d18c","sha256":"b9c3a0bc3349b3b1956ea37172632afa1131410fc62dd17faf9261a5e054e352","sha512":"5fa8da70766796217bd8046fd51b3fb1118c305ca8a367b890618c9a0a35999c9d0b64b22d8c5cb164a85108c7d7406fe994846711459f11038067da23f93627","ssdeep":"","tlshash":"d4a022cee88cac0b0ab302088bcb33c028380e0300ac8c202b888cb008bc00200c3ebb","first_seen":"2026-07-08T11:58:04.28509Z","last_seen":"2026-07-08T11:58:04.28509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-6.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.857Z","timestamp":1783511853857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-6.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-6.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhvbt9s15o-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uA%2BgAkHC8t1ASB%2Fuo3U%2B8xeiHSXX%2B5fK7y8WgjYkC5wNo%2B3eN%2FRvUe3eeaBxsOhENZdyJn7U16b7c3zqIvifedn%2FGsulMEwUWNaPTjUpMr%2BOejq3iiPRZAZ06ImfpkT%2FAwwxYw%3D%3D\"}]}\r\ncf-ray: a17ee97e9c412efa-OSL\r\ncontent-length: 673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1500,"size_decoded":1714,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e7c6b9226162c6d224ba11f90b5749","sha1":"e72249560379454a0dc30e52889ff7ed088bd46d","sha256":"967dff8aecee4221a3f0a65e2d5e8a47a2a08c872506bb4dec1afe2a023453dc","sha512":"a81406975f8973c57ea41cf56a867c2ee5eb438530c93389338c2999b36c71e370a27f8cc9fcb5d8a5469bde2e8d260479df05b0de24e84658430ba4614bc6fa","ssdeep":"","tlshash":"9b3199efa1d1a6e0b4838fd898147354399f2cbe3f0cca598181f6e1bd68b5c4488ce0","first_seen":"2025-09-23T10:56:20.508848Z","last_seen":"2026-07-16T11:19:41.964682Z","times_seen":59,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/dmca.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.882Z","timestamp":1783511853882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/dmca.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/dmca.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhlsvmr6v2-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPDK2zdH%2BFNuMKoWeyDftQGHA1MUo7VrQivBSm0hLYJ6j9JgRnEUCdNS9Z68JGpPYMqbRBr7xSJYjZZfO0kQd5PYYVJdL%2B0zNx3p%2FjGlH5dxV1tI%2FowSE0pEMQSzIJt7pCDumg%3D%3D\"}]}\r\ncf-ray: a17ee97ecc5d2efa-OSL\r\ncontent-length: 3556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8894,"size_decoded":4574,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd080d755657ddba0a3f04a4e8f08f9","sha1":"15e0daa5d81ea5d512082de011bc8f4cf7673262","sha256":"fa7d304ee7b5398417be1ac03f89d39cc0598a48ed145581afd6a5180e58ad7a","sha512":"3084640dbcaddcb49f23460b930352043d762ec17cf27f34039a4e3e2e7044396de30026d06ecd96667c66d47ccab14b93ec7169b3facd8a4dde4e94dd58b26a","ssdeep":"192:a6m66FkmYlYoDVfveKNA2L0wV+kENRWp8h4zOpjyhRaF02v+:a68G1lYkVnzL0w4kuEp8h4z4jyhZ2m","tlshash":"c002ba99637693fcf402a3f9c6166c367daf2de57681d258c3a10d52e0d206d1da8ccb","first_seen":"2025-09-23T10:56:20.3528Z","last_seen":"2026-07-16T11:19:41.995334Z","times_seen":67,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/build/frontend/images/search.5e828e81.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:34.338Z","timestamp":1783511854338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /build/frontend/images/search.5e828e81.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/build/frontend/images/search.5e828e81.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n2hkd9lmhf-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFzAGel5K034TNGqRJzxY95e9hj1C9EjD7hrJ%2B8xwlXaflm6ThKFE92HAzbfyGX4QYiDPcoyRRHWcJIl4Pqx6vRLdJgwXo6jYnvpmp9XhT7zV1kugyebXmwpoA44U6pKxN3KYg%3D%3D\"}]}\r\ncf-ray: a17ee981acb32efa-OSL\r\ncontent-length: 296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":1335,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb40655e1c46dc85e1c6f5ff10ab4f1b","sha1":"4bc19332f42634d2f4a221db82e53c4f40fbfdfa","sha256":"02faa5971a2df82ce9308007cce207a3aad95919f160ba43986bba6e3266cb9b","sha512":"1c354b5eaf1ddb09092960cdb4d564abf7cf5d1051a9546ecf6c1e170c2d79e9e659cef8f23454549dc5d1ac0a733fd86af7f95d1d5d9d86985aa0214f80df55","ssdeep":"","tlshash":"a9f02de91344491cf0069f36ff057e7d8057787e7f8a1450c050907aad621de8922ad8","first_seen":"2025-09-23T10:56:20.272697Z","last_seen":"2026-07-16T11:19:42.061462Z","times_seen":86,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-7.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.858Z","timestamp":1783511853858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-7.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhxpjok1f9-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbbOvt2XW8hzhpuAklX13biHaUIcCRmlRxZLG0ctvVKW5XvhXiCMaABk2o2BpK8Eb%2B3Et5Mi3Yu1zghn29CMigd3LqRrpAruW8u4YXRMIwrVs2PAD8uvooB5RMqTfBg1%2FEWLBw%3D%3D\"}]}\r\ncf-ray: a17ee97e9c432efa-OSL\r\ncontent-length: 865\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1845,"size_decoded":1892,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8b3615d2aedb57b2a8a05743dc19942","sha1":"de888fa42355b9981c9ef7aeacba110777869dda","sha256":"591f7158f493bc901823bfcb261ebc92a07cf2efcf01f4ff8989cd38c8bef8de","sha512":"d2ddafe3922b927381b35d0c4ef55d62d183a475432567d3d8be4acfc293319a92b3678da38c39970279ae6a455f1ddf8f19d2ede4b6d5e33ff7efbb86f7343b","ssdeep":"","tlshash":"113100da7798e3e0c947d3f4d83fe86a36513c762f06c988d2e43a68d6016dd988c852","first_seen":"2025-09-23T10:56:20.336269Z","last_seen":"2026-07-16T11:19:41.934132Z","times_seen":59,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-11.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.862Z","timestamp":1783511853862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-11.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-11.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhqkcgai6-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KHzSJkKfZJ5JI5nGDCLCht4HenSlz%2BxDdCeTxpu7UzvkSKid77LU%2BWKJWG1AX2HXkJ68U9VkytB%2Bt3BjjhcKwdunbF4TM43z90G1Qdmex4aZzxiKU88i0svGnElpidyIavASmg%3D%3D\"}]}\r\ncf-ray: a17ee97eac472efa-OSL\r\ncontent-length: 345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":1374,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4327c132d11b1333209b3374fa394f0f","sha1":"3801506e26c63c9927b3d9c51c342c6c3c21ddfa","sha256":"6001367bab33ec48507ae4dae10ad400329cfd0573a810ca4ec152139b49079d","sha512":"07bff970dfe38ebec44266f3903c23d82550da0777e8a774a852af6e87b0763ca43efa19f04fff5abe1fbd88a5c4862b6dda2c8296ff0a967722520d71520e7d","ssdeep":"","tlshash":"56f099da76f4a40a8a1443819117b2412373e1bc06acc898f294f3f8ba0ce8a5e806cc","first_seen":"2025-09-23T10:56:20.387521Z","last_seen":"2026-07-16T11:19:41.98732Z","times_seen":59,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/jungle-boogie.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:47.698Z","timestamp":1783511867698,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/media/games/jungle-boogie.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T20:40:23.423558Z","times_seen":17297509,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/build/frontend/app.js","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.803Z","timestamp":1783511853803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /build/frontend/app.js HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/build/frontend/app.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n2hhzj55zqo-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HwXnlumvjWI4aidpO%2FKjeqJp%2BVoq1GCDeJjRkKEQnxVM6TztaS71TuK%2Fgrd5barsAxdx7ZDuzPRnC%2BeROpfUwpDKLT6vLjRwd0dz1CPZ%2B0Wk1ol2ykgeFCLZxJ754qxRSeRTVA%3D%3D\"}]}\r\ncf-ray: a17ee97e4c052efa-OSL\r\ncontent-length: 7744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46320,"size_decoded":8793,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46259)","md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-16T11:19:41.924976Z","times_seen":14,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/2026/03/baner-1-69b94e9790da22.73234206.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.809Z","timestamp":1783511853809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-1-69b94e9790da22.73234206.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/2026/03/baner-1-69b94e9790da22.73234206.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklce6op\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iEDQ92t9JI4IUmK7XLcErL98n31AvVEW2Vkla0lnUxec0tprfIaVBFkjtPzoYtrqZZQ9mQapEjgJGXuoUYA4j2IaXU%2BH83%2BgQn040GHRT3SlQrBhCciMHoS7%2F9oEecFXMOLtvQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e4c0d2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":661849,"size_decoded":661721,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"c038d5a4518ac380420aec865e1356e8","sha1":"40a2a88683b3844d56ccfdb7e6b26d8b3ee02cbc","sha256":"6279f32ea68a9c620ff4e1b5ae0d5840d8ec14180a2c66d5d2bc541f93c91ee9","sha512":"5f7c7118acba482ebc6342ba23a3c7bf0de759d309879d6c591a2af00c94d886ac413bbd27a76634e44392d0770dcfecec1828e15ef01b79549ccaa3fd78fe17","ssdeep":"12288:QzkQvdJVGZ3nCpa6kv7gprigVCup2+wBZhwtJGyGV7Y608Fwms2Sj:mPUZXma6k+VXChyGhY6ex2Sj","tlshash":"6be423aec37a047b6b3e90bcfccf15b71700229f6e46bbc9915472fe96a8d615141c28","first_seen":"2026-07-08T11:58:04.296224Z","last_seen":"2026-07-08T11:58:04.296224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/gnome.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.831Z","timestamp":1783511853831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/gnome.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/gnome.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiq16vlgj2s\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ISRlr6dTkEW1b0jp092R6ZOQv6I6S9yp1Dea7zNOSHnTjPKZI%2FNJ%2FsIdBhqq7kpcTXLIe5hX1%2BBwVuik04aXo5UPU3Ai39yjR4ZxOtxlP3Fr6OKATS0ehzkZo1PYHvyzgAyOmg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e7c262efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24724,"size_decoded":25734,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"7693e748be4e4e881f203d9109b9917e","sha1":"1808c7fe241ff51975525539a7ef231ad12731e5","sha256":"1b14fe077e5c95cbdc495a22cb6d26541305ec286e47ee2dd7d227488cc0127f","sha512":"2280448bba171f877656cee7d607475dd7867b3de61a7587528bc8ad213a1413e8b1aaefbab959c3fffa7c9ee666960e8dae0ec00dccaecbc6cbf97860c5981d","ssdeep":"768:wd5CsRDNV7OsZm9kreMkrUxEnGTRXwh3d:YosRDbOom9aeVM4d","tlshash":"17b2e1c1abd39a9fd97d805f228973a3b2a86143d13446427cbed0dedfe224510312da","first_seen":"2025-10-26T01:21:03.25006Z","last_seen":"2026-07-08T11:58:04.298628Z","times_seen":3,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:57:29.050Z","timestamp":1783511849050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:57:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nage: 594\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=3600, must-revalidate, public\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-digest: en21565bb7f26833cd3444cf23d8bad901\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8nGYqk1AsVwlRfDhgkDWeFST6VbufMZwLJr8ft0WXvrNkwfyo0qQyBdWNLcZMuBVCcr%2BefKWo39zYrG2co2Yf6syt%2Be9XavBcdx7Uy2U99gE45GRaHhqvCRnM2rrkxLLbAGgw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a17ee979bf02b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147586,"size_decoded":32096,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1881)","md5":"ace77553ff8cd12cbe509f03f76004ca","sha1":"c37d7295f2f05dc08939d4771404e455b38001a9","sha256":"b704fac400222aaefa5a912932a0ea57489817ec0024a18b7e70876c071c79df","sha512":"61d0211c9698b6f555a280237b076795532f5231de3bd4ba7d82c09c9fb13382725f5c9420a207f8d80df4a550b2c1d4d841ca867f0105500383a9a6f041e38c","ssdeep":"1536:cabHv6/g+7OpujZzFvnPB/nGo4RLAI8qDipEK6c/qEm0tU7tUJLByYMbHv1/g+q:qgZpAjNDNm1URIRgd","tlshash":"5ee3d6e926f046b304a382c26f52af2b3dd1d653d5098640f2fd4ba41fc6d5cec67a89","first_seen":"2026-07-08T11:58:04.299964Z","last_seen":"2026-07-08T11:58:04.299964Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4508,"timings":{"blocked":-1,"dns":4004,"connect":2,"send":0,"wait":485,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/arrow_right_icon_v2.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.808Z","timestamp":1783511853808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/arrow_right_icon_v2.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/arrow_right_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PiCYgqvIX2ASU1roLirffW07PsDYpKzqn4kjEIXQVibjnZLlMPBh1UDSouOcHfsm03H5CAy7IX%2BaDlyr5sDDbS0QBh3nRqR9Q9leasmojwl0YwoI4r3Tu348GV3Ydk4HA7GXSw%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kkhh1et89v\"\r\ncf-ray: a17ee97e4c092efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355,"size_decoded":1177,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8716201a632adef0156bf6d3f2fbe369","sha1":"4b88b95b91c6597908d5da128283ac4c99544cb2","sha256":"6fe8a1b7dfa91db87484fe8b87176374df446f3c337ddee4ab6418fc9ccbb69b","sha512":"077a28d2180d098fecebed83e2437b28f7ceebf4bb302f0d1765c979b53c314e2e6d3364080fc249c61b9d1c2eac86bed248d14597c8c2b91facd5e49e5338d8","ssdeep":"","tlshash":"d2e0209513084c3db1320710f7587338356a518345483544d9311d31350495e7d3f5d9","first_seen":"2025-09-23T10:56:20.268091Z","last_seen":"2026-07-16T11:27:37.715191Z","times_seen":44,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/2026/03/baner-2-69b94e97bf5174.56252309.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.810Z","timestamp":1783511853810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-2-69b94e97bf5174.56252309.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/2026/03/baner-2-69b94e97bf5174.56252309.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklccyxy\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ycsd7YulXfdsHqzGZ7RwEka%2FbJPSN%2BTU%2FlewJ2eMjTSeEm%2FcPm3qWh5NDfv4WvHbnbJ3tigb4F4594G6%2FL6Wn0bOO9bjZGKEOkLRow8E%2FS0Ef4bpBi%2B6vSboymnPd6yUzEibrA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e5c0f2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605158,"size_decoded":605118,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"b3d09fab78d3864c8073f5832d69e579","sha1":"041ac76c0e160521c9cf5aa12c7c660f48746320","sha256":"cb06c6095abe83aa5489d25a99d75f3cd5d1389afb1fe09ee6643d0e8ea69dee","sha512":"73b597add92d22e9d90687ae5d40ad6028299c4b0a8455b0360975a766720d75197e6421ef08589d707f3e07076314cf07bde7f4dc630c9ddb1d42ca2c2ce727","ssdeep":"12288:5nvQw4P6PDC4mTVe8y7MXXpKuOxeEcD5bQlnC:5n4fP6G4maMXDBEcFbQU","tlshash":"fad42348f9b197fc8672b1e275960d1d33ec81b406c9184d1920ebcb96fea694812fb7","first_seen":"2026-07-08T11:58:04.3025Z","last_seen":"2026-07-08T11:58:04.3025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":304,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/wolverine.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.839Z","timestamp":1783511853839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/wolverine.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/wolverine.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kilehiw54ii\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84iVujTNkaHhUJiahsWlRfyJ6MzJQwzia102G5T83qKx5tFzb%2BN8PRQW9kAj%2BD64BbfA6claVZdSTmVpE4Og0jtAKKINt%2F0EZEXS1wCxAcJbGaDj8%2B6rj6s4Fgr4UR%2F6iqoTKw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e8c2f2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5850,"size_decoded":6870,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"1d4522e90922d44df63fa58cd59ed182","sha1":"98a9f16e75ed2a65907e9dcbc73d1582606a1121","sha256":"6525eb6ed957ccdd07d281370044d430e3c92dc33d55a5074ce82ea6b94c052c","sha512":"3610efb1a3a11e096ca11d24b97394629cba708bb44d2cd30ec7f491c8ffebc428571a8c0316fe8596b611f2f64fb874a9621805049a5d88f7b483dd0dc42699","ssdeep":"96:T97o9Du5NN80nlPQdEjuoF5nLq5srHr8AmHALLemsrL0EzJwy:TpodsNy0n5GEKqOmjC4LGXJn","tlshash":"01c16e4d231d4f80f42e2e33c11c22a3d9046f6447b98b723d470a6c6376566a8195f4","first_seen":"2026-07-08T11:58:04.304573Z","last_seen":"2026-07-08T11:58:04.304573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/build/frontend/images/text-block-3-bg.e02f2b7e.png","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:34.234Z","timestamp":1783511854234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /build/frontend/images/text-block-3-bg.e02f2b7e.png HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/build/frontend/images/text-block-3-bg.e02f2b7e.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n2hkd9lmawz\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPe6IZtsTgxYURcyqWhEBfb9NEv6WcObEcdMBNlX0NP81egXp5jbdCAtqlt%2F2yseS6c7nelt8vg4nbFrTc4RRyKU%2FAZy2HhC0NEqtkaVwPql0KWdiy1Z3w3wOwCWzsnnWAIzqg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee980fc9c2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14147,"size_decoded":11462,"mime_type":"image/png","magic":"PNG image data, 1440 x 492, 8-bit/color RGBA, non-interlaced","md5":"6f62c24117634af99f35f88d11894678","sha1":"7be13bbe2def230f608d04c09780005f615668d9","sha256":"317ec0aa5769282689cb6903eb44f35fc1444d96a0badf4f9ecfdd60bbd85747","sha512":"9ed9ce17423524f7b248cb2e82aa80aa163940244ee293d3ecbbd38be262ab21f2fe522bbcb58b3acce7c18858363e0a52b4e17253636f71cec8b0c7f967ccb9","ssdeep":"384:xJ9ZPllqnlGsJvKPn5k7ETlp7TjL6ey4uMaDdE8/2DoG242IchkTU6AibQ3o5TX4:Tl6XQDHA/JP2L4/YAcr4","tlshash":"6f524b249b0c4ab3cd7f4ff83667a7306b350b98d42441475235dba2ddd3b98a4a27ac","first_seen":"2026-05-18T23:51:30.759583Z","last_seen":"2026-07-16T11:19:42.03537Z","times_seen":4,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/build/frontend/runtime.js","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.802Z","timestamp":1783511853802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /build/frontend/runtime.js HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/build/frontend/runtime.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n2hhzj551jl-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFkwlAEbXdxpZGAwxiLQBnRlJAiyFFPYFXfcQ%2FIE1PwRilUi11qHgIWJyfjR3RuKfRpETkBqNRI2S8ZnSTqXTgsNWXKfjys1IlQal9UQVd%2Bo1xYGHpUpddMzwecYO%2BgoOrwJPA%3D%3D\"}]}\r\ncf-ray: a17ee97e4c042efa-OSL\r\ncontent-length: 1016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":2065,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2001), with no line terminators","md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-16T11:27:37.638486Z","times_seen":105,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/redmouth.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.844Z","timestamp":1783511853844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/redmouth.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/redmouth.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kikvfnm27bx\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZtqGYxrA8qNX1voyba3sagulmXhjHVrm%2BSBUcTkJbOrQ%2F6%2BXTGSBThM7FGmKaiKIh8tm3UtbWV2Flts7ALZCrNlNvHKF6Ql42ubz3%2F%2FxNR%2FZgVAVnFMAFRP2FbgLm0veIEr1A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e8c342efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9501,"size_decoded":10522,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"bcfe6622a5eb6d51eb40bfa87bd6192c","sha1":"d1c2599f3f6e78a2eee78219b28427a90ac4582c","sha256":"1709b4b98e2a2cb9872e1fdeab30e5123527fb66052c787bfd608ca7d71edbb6","sha512":"9e09af55ed6010a9afa4f73f222d15b0681bc8ca368b255f31529868e6df15a2266679c4bc3ed5a12f772bb0e6fd70d8839b995ee0f7e7e0540b367b6aa9ba8f","ssdeep":"192:U/AmJLklDQM/adiPKfO/VMn9Z+CM3oMqu+dBHckQwH:MYlDT/ad26Z+5YMqt/SwH","tlshash":"8a12af85ef0385ddf24c46b39a1d56519ff61e67787d232bb3048e6893ef0855908362","first_seen":"2025-11-17T14:13:19.32933Z","last_seen":"2026-07-08T11:58:04.3073Z","times_seen":2,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/favicon.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:34.774Z","timestamp":1783511854774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/favicon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:35 GMT\r\netag: \"depnh2ew9bswo4-br\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TezOx%2BJC0zk%2BM8YSM7U%2BLaPpbEbbQNAQsd9tSbtf66MRHbgbhmuF1l7uIN1%2F1y0%2FIeKTaw8dJa63qmNO6rPypukgrzWmSU3jVi0Nl81Xig0nfL4ZAHTVC98ow0z7rwnuTApuiQ%3D%3D\"}]}\r\ncf-ray: a17ee9845d632efa-OSL\r\ncontent-length: 591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":1611,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-07-16T11:27:37.608485Z","times_seen":9,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/chibeasties-2.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:39.007Z","timestamp":1783511859007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/chibeasties-2.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/chibeasties-2.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:39 GMT\r\netag: \"dh52kinip00ieab\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c5moMmD8Q%2FsT9FEA2xl0uMIVcVoo5D0uupDqsalxtvm63trA30vkcky8%2BiObLyxApUN%2FnU5h9dsjGB7afyXJkZzkOmk7jCuzC3rbTEtgrMOmu8xPXbLH6IVRK1MWh5y3hFoI9Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee99ec9592efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18515,"size_decoded":19533,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"443df548504bc504bbef3a52c9c3a612","sha1":"4474d1ed110742cc24cb78970ae0456f87a7eeed","sha256":"ff6f74d2bf535416b968b8bbebc2f39e723be1f5fccfb39721fab02aa9491245","sha512":"fd206ebc85e63cd21a41a072cd79991aa11d963d25c41d8af0169961010f77929a93ba8da6fac67322c1feff02af92a5048ab02c7d22d1a37eea5282d595b963","ssdeep":"384:dRR4TRUrRZJykJOIi7HpkCAz6yKiETolqQyeODkw4k1lPiWVxp0anbVI6nMCw:dwIvJy6wpAraIkOWVz0at7w","tlshash":"de82c03f3ba6bc4df8dfa7784d271a444111191a609613ff9c3f99a0871161b8dcb593","first_seen":"2025-10-14T14:51:49.081231Z","last_seen":"2026-07-08T11:58:04.308791Z","times_seen":3,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":418,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/diamond-cats.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.857Z","timestamp":1783511861857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/diamond-cats.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/diamond-cats.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kio44lpdlyh\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0bHOqXvJXQpZfa6wn35BU0cI%2FHXUnZGNid4OohcJ5UgxC%2BcTIxnsLM8OH62DYrDpQ8v9htcmrw5D0zMKpQP3e9qyjK1OWHyjCJbasbtXHKc4bYy25OxDFqenaJ4pT%2FVVXt1X2A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b09cb52efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28457,"size_decoded":29474,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"55a45a0d60896d89467ef093c6a47061","sha1":"83c23c2953a9ee7e345700af5f95d3f3e3ab5b3c","sha256":"4bc21c1146b53282abeb2fdfa7b8c4a02b3b80fd4311c3e6d87ab73f7fb852ab","sha512":"793683bacfb51d85970c4d3ba823f35becb24d3444d13d8da2d6260912568751b82643e9b921a714784086933a12306b4de7af85fc9470579e1ca754eb2cb5d4","ssdeep":"384:xMjRYlGREnmwc8Po4zCzkD8XxvCEjdJNRassYyOYpKDRZhXGCppamlUd24/75iO:IrIy4zCBXosL1sYlkKDRPXNpPS25O","tlshash":"fed2f1623e10c71bce2fe72ad75ed18603f80945f5248f1266cebf86e3f59688650a19","first_seen":"2026-05-27T18:32:05.420896Z","last_seen":"2026-07-08T11:58:04.310401Z","times_seen":3,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/all-ways-fruits.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.827Z","timestamp":1783511853827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/all-ways-fruits.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/all-ways-fruits.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kilzx4l0cv4\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6dUexrvfUeVnjEA1c13bnKZ4RowadEoRlcO9GtoauIS0s%2FrdEDooIMmD7axL8x%2Brfv%2FPXow8O41JYFUQxdM98HDiTbDQBXSyQj5JvirWHCSYurQDJYZ1Cg2%2FwUzEnGq2d3jXA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e6c222efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16672,"size_decoded":17694,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"2e5b556c63e47bfebb8244e52601141f","sha1":"7e959e5cad08bdbd9b48f4bd4469b13833b3a37f","sha256":"d5a03bdfda5449d061e6d28c36bc1aacdb068b73194705c5b1feb7b7713f84bb","sha512":"54b35f2489423cd00d24e0d3e1eee658c27be93f598940de0e68429e65de9b498c4b79ce572406de8e8ff6671d6dbfa5b735819fc3d6cac28b849ed8e931a85c","ssdeep":"384:ricrIwPDhN9XsjNwgYPZCjxhOO8EgrhhDmUIVLjgK:rbrPl8NwgYQxh6Egrhah8K","tlshash":"8c72c060ea389d17e54d53374e18601a5df1ad836e08c8d70549c26f9bbe9cd23b41e3","first_seen":"2025-12-01T07:25:15.247231Z","last_seen":"2026-07-08T11:58:04.310929Z","times_seen":3,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/next-arrow.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.834Z","timestamp":1783511853834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/next-arrow.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/next-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aeiAxky9gBXeT4C4h7LN4tnL8j99kRiPtxj%2FKPIgMcQGr57pGrWC9HHmIlRePlbJ%2FSxwHniljEWX3E7AmI2dtn%2BSJdI3muCUV5R2D0E1u6duo36TsszK7g5yLC55BQSOf71A6A%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kki78hbl6t\"\r\ncf-ray: a17ee97e7c292efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245,"size_decoded":1163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059a19b3bd2964e622f6bcd07e993043","sha1":"03dea1a108357993beefdc6629ad794ff696360f","sha256":"6df08c0f113a37486ca85fb1e08414f69a42c3f1aa89089f0fca4d9d6a065065","sha512":"3e0ef09639d2f763e561b0614f6b7029bef7bd711e0ce9633234a903db292e1d5d5a98ad77dc5d7c7e89e763459935dc0e5699ac6f0289814966909798e2b82a","ssdeep":"","tlshash":"13d0a76653084e2cf2228a20f729733520e65193994c1454d5261e31695499f6c7f5dd","first_seen":"2025-09-23T10:56:20.418245Z","last_seen":"2026-07-16T11:19:41.960823Z","times_seen":80,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/dolphin-quest.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.819Z","timestamp":1783511853819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/dolphin-quest.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/dolphin-quest.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kio8w2ivmy8\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bVfajGJ5tQaO1eWWFHSkVWKBXHrGfQipgFTAZ2nnNVyFHL4Bx5%2BcLvmYfRVw%2FXOD47llAA7teY%2Bev4Sw9TayGs5M7hEGUd%2FV9VMHwzBWOge%2FvMjIjgt3yc25gbNNyMhEGwV6%2Fg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e5c192efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29744,"size_decoded":30768,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d43d78ba18da006d998b79d3a9f3f10d","sha1":"c8f2fe01c7c184ad86bbe8802cc3f042c2170a75","sha256":"f4c7129223fc4dd9280e9b6245f972660a69514bfef913004a3fc5ef0348c50a","sha512":"4c76a049fdb93a6e61a5fee8e42449920e8c8e08cb1a48c6e67afbdf3499234c87ce7df56593d939b94230695bc34c094d3e01d45bce9263a023422271b3dddc","ssdeep":"768:OlhQqD0Q5wHnEOoybjx1pZfW2ACkQzZ0z:KKO5yntMIkgy","tlshash":"79d2e16703bb0d2ea8baa02c0a193ffec135dcb45d8415165cf2462e5f58d9f928f127","first_seen":"2026-06-02T00:44:56.63326Z","last_seen":"2026-07-08T11:58:04.312941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/throne-of-egypt.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.829Z","timestamp":1783511853829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/throne-of-egypt.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/throne-of-egypt.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiuzswcjoih\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQAbrUY%2FD48eUmvnHDDJcoNUlmto4ox1%2F3BnWZa6SIDLjcxqKVKiuupct9s%2BdeH%2Br87GbhtSINJHCkQZVuqDdZwV9JHJxB6dZ2i470gZooPfXIFTbPX9kLZvHKxPnYXDpwcm3g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e6c242efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31769,"size_decoded":32791,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"06da8714372ab176b518718573e57889","sha1":"ad1eda3a92a311e27306c8318b5b5c71193fa19b","sha256":"fe129283ab45cea751706d8675018c1ced043c64e917063d5165505e2f5835f8","sha512":"8cb9fbd56420572ecdaba202249a157f70fbb1b2c591f357edc1aa694e21f59f7e920303bd3dfa8dee4bf3fae632705c4b4e757798a4a34bd56d33a2f933b6ae","ssdeep":"768:i8xFd9PScm0Y3uflYBX8jGoOczUxz4HUEuq:i8xxPSLz3Wl4E39Yx7q","tlshash":"f8e2f1c81f0304be9e7e1b74467f2392eac204e82467f676d50568492b6f8063f5ebd8","first_seen":"2025-11-09T11:22:30.347688Z","last_seen":"2026-07-08T11:58:04.315522Z","times_seen":3,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-3.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.854Z","timestamp":1783511853854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-3.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhvbt9s11j-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcximeROP%2FZZHu30CZEuK0BeKxspOHF80NTUOJ3tP%2B1ZkzJtX12Spy9KjYlKbPfEMqlneqeUgbdl7bFMD0%2Fxk6DY8qJblgV9L0ayKndPGFz96gac6mdQ6VtzuuhBpeZPa2bRPw%3D%3D\"}]}\r\ncf-ray: a17ee97e9c3e2efa-OSL\r\ncontent-length: 694\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1351,"size_decoded":1723,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33b94027ae50b91d2a3a44ec8e039a69","sha1":"f9e407e96eb2aa87d114990348504be1862fe020","sha256":"1073180f688f90b2de978352e506c3281fd5c14197d771dc45bd8d0db2f269c5","sha512":"53b4a8fe61fba98872373276fefc13d7bdb072558673878d9a219ac88993b870b892208bd7185ff1d527158cfbac38986d6865b37dc86208c5d1fd43907f6a1e","ssdeep":"","tlshash":"fe2123e692dc95c8da02d7f4c52ab0d2316f25fe2b5ec76da3e4ae643c1402c850e997","first_seen":"2025-09-23T10:56:20.416179Z","last_seen":"2026-07-16T11:19:41.994136Z","times_seen":59,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-9.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.860Z","timestamp":1783511853860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-9.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-9.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhxpjok16g-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=adKgV6NzMlB7%2BXvNYdinGamqWNZvVRL6K3RFGkVmmP8mPDNfmEmxjW3CE7PeRZtiYQZ2DFTwC%2B5XYsEdEsoImS1InN0UUrjLZBRVf%2Bu7fCmD4U9NP88Pjf9BySYxrZoPlX4ivg%3D%3D\"}]}\r\ncf-ray: a17ee97eac452efa-OSL\r\ncontent-length: 534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1528,"size_decoded":1563,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b102749c281526507c5490e83fdd185","sha1":"a454c193891fa7a94fb760360ebc1fa01dec3cbf","sha256":"3e2a708374909f4afed3afc345369af514c01e6fa6c9e8db3a40660971a82e92","sha512":"4178d3b1d6077876db67c432cef840fe113f0784fcc6df57b067dd71389307306a807ae0262e958fa5a8c625d1ddbbadec7d54a045faae16236deca33cdaade1","ssdeep":"","tlshash":"133166e582d5b2c19059bbe8ce39feb239463c375e73d726c1a62a717a00058cc0e8a1","first_seen":"2025-09-23T10:56:20.486839Z","last_seen":"2026-07-16T11:19:41.95384Z","times_seen":59,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/ajax/winning/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.409Z","timestamp":1783511861409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 108\r\nOrigin: https://rainbet-es.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":108,"data":"{\"exclude\":[\"335\",\"535\",\"1292\",\"2367\",\"646\",\"921\",\"971\",\"2182\",\"1067\",\"2001\",\"2389\",\"563\"],\"locale\":\"es-ES\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nkxjcLSHG7%2Fom613vpoBX6OMbjHCqiSrFI5KEycSTxVQw5rjOU1Q0T%2BFiNzVCyuUV%2BPnI85YToCDQ105dItW2AAw8WJ0oY3Q71etpqgtmYGoKaEHOjAfPaf4naidzxS5BB6vQ%3D%3D\"}]}\r\ncf-ray: a17ee9addc062efa-OSL\r\ncontent-length: 620\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":8693,"size_decoded":1607,"mime_type":"application/json","magic":"JSON text data","md5":"28fd929ce66f005a47f353b0e905f909","sha1":"9edbea60b23f6ae74f0c6f35b7049d90868cbe38","sha256":"2786ccadd92284398c80be6c87388b82ecdc4f6cb5e23930d170fd75483ea226","sha512":"de812d2c7d6e446d951ad7e613da15efba524ae1e4a6b3711ed2862804e8af5e52fd07fc33f8d03e622df7358904e9bd97f4467706e3a992b3c2c8f459016bfd","ssdeep":"96:bfwfHJf3fDRfMRf/BfYfQ4fLfh1fMBf7ffwfCgKf7f5xf8fvz0QfxfGqufb3fZ+1:rS","tlshash":"c7028166a962d73f72e360e0ccb7ffdd10149da5a42c8874bcbf18a2c7264146e9875c","first_seen":"2026-07-08T11:58:04.318698Z","last_seen":"2026-07-08T11:58:04.318698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/vespa.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.799Z","timestamp":1783511861799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/vespa.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/vespa.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\netag: \"dh52kilc3she5uj\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B0GgbWkfIfEJtEvC6d7WODu42ySgRy55EvSAcQhUL7vLuiUwsncVUvOj9ZbliPExO6V%2Fj1HvcWlOYOIgdPVntmx4ufxRr7A%2F3%2BvatQE%2BJ6bjNnvwGP0yJRwq2urpRWMPrZZi%2BQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b04c982efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7579,"size_decoded":8597,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"9c248b0ab0b5f48360cbac3f5bfefb76","sha1":"f4af87444ea40b3e01410f0340432892c5ea1895","sha256":"99acc45962e470b7afd961372681261235e037f823d35c4866108203b27b56fc","sha512":"0c28e39fd5a9425e4984f381c1f1de7f6099929a8164e4e8f2944a0082b124e285f72a9cfe19e48ccf842e43fbee344a038487e3655fab5e9e55624d3a9ac286","ssdeep":"192:q0DUet1j+D1xYpFtyyzapVqT3iE57gReAeWRStGSqR+mdRxhP7+v:/DUUyD1xYqpVqjSc8SzQfy","tlshash":"c0f19f677e14480aec6f997af1558e4e43509adb272a330f7d51dd0f03bf605072a725","first_seen":"2025-11-09T11:22:30.334396Z","last_seen":"2026-07-08T11:58:04.319907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/ajax/game/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:49.502Z","timestamp":1783511869502,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 132\r\nOrigin: https://rainbet-es.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":132,"data":"{\"exclude\":[\"335\",\"535\",\"1292\",\"2367\",\"646\",\"921\",\"971\",\"2182\",\"1067\",\"2001\",\"2389\",\"563\",\"2410\",\"309\",\"1791\",\"1507\",\"1144\",\"1697\"]}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T20:40:23.423558Z","times_seen":17297509,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/grouin.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.837Z","timestamp":1783511853837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/grouin.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/grouin.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kijokg8d2lk\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZsZO9ojAbX2xdqXhfyFfLhCo%2F9lkpUeNs8lMQd8iiH9MYto7KPREQCce%2Ba6V%2BGPscMo9Y2VvLjtGpcZSBKF4bBg%2Bd3dce9YzOM0YXU1XIj4Vk%2BdYGiRwhGflLobQ8rPbxnrjw%3D%3D\"}]}\r\ncf-ray: a17ee97e7c2c2efa-OSL\r\ncontent-length: 3254\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3368,"size_decoded":4290,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"9cb5310f004fdb7857c47b0d09ee4c51","sha1":"da8e2afb9d0000bf8faedb30be1510d284a6a707","sha256":"7665c19140abb7886626d56dafd5edbb0c901b938ed1a04e5f1963673d6ffc30","sha512":"480a7660746ceba76c773371b79a0dc0bb7089d8dd4409b69478cf96641b166a61cadfa3976100769e0ac60913d4840386705143bf9137b25bff4a474d2200c8","ssdeep":"","tlshash":"30613ab26775911bf2bd4b34e864832d9614ba74ac0a2a1f95c6a95f2f2f6c45c38310","first_seen":"2026-04-10T09:54:21.446096Z","last_seen":"2026-07-08T11:58:04.321418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/tall-sally.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.843Z","timestamp":1783511853843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/tall-sally.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/tall-sally.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kil7cbnv5lj\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tirBDvmAypjdHRcZQTfYEy%2Bf7Jco3DeW73pqeOFE%2Bztl1BdtNx4fsDz81ymfea7vOMiSwZDSQ3R9LWaIZRVgQZbXwgxWU1YToCMC6tGyFLby1C1zdiELA8uOon%2BtvFNRkEY%2BLA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e8c332efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7255,"size_decoded":8274,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"a918cdc61c631ac8678362c1eccc6d09","sha1":"8f25e8dc021ee176fc81e388e43c72b58238012a","sha256":"8f76c6c23fd7a260ffaaa47334834b5ea545699728ff9e25a9fbc1b566403f10","sha512":"b05d5fd8423f40271f9b29564bdbc4615497569a9d239bf6f7caa8822a48226f83025497e6a51a073d479db3564c793ff8bf250efcee5f222fc90c6506dfe8a9","ssdeep":"192:PdiYUy+GbyfByEfztC3FoA75N+ogXO7Qfm2s:ItJ3EEfW75NNgX5e2s","tlshash":"76e18ddf228b5461e57f05382b7247411ba1db62b6540ab36a943c1d6b709c4a2f2a24","first_seen":"2026-07-08T11:58:04.323041Z","last_seen":"2026-07-08T11:58:04.323041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/in-the-forest.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.830Z","timestamp":1783511853830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/in-the-forest.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/in-the-forest.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiqw5excjby\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubh6FSHDUkBssHHLMrTCpZvNZgKtkSu6Ew6TVzU2QOnY6djvUlPNIyV3ZS6JqdTuLg8S78czqaW6ffWZAZPgSEQE5wgp8njhulVHDfcXpGyPHLT0m1GGs8uPEkZQ9euNiTdd%2FA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e7c252efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25054,"size_decoded":26068,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"10182d5fc77c36837d4744159726ab35","sha1":"08d265f5738cb8aeb952c52810995b27bcd3709c","sha256":"7f04c48b801581f619b6d0c8d4371ebe377c2ce7175aaf7a126b042e8ee8b89e","sha512":"63e40e48add9947083473e441f17eee8bc2c0d6ef4865abdb0e6f7a58c96496b34fcbf1b621410584098ab9d47cd605fddd927951593b546eea8269859d0b3f5","ssdeep":"384:xPsov3+4Riwy48PeiuFWCNdpb3BMPnYwmO2I8v3kQLmzzcW+0GkSPTh:xkhwy48PuWmnePYFO2lv3kQCHahLh","tlshash":"e8b2e133da1bc877b89eabf38e9a828917c5790f0403e23834b641053b594d47ef46b5","first_seen":"2026-05-13T21:36:15.981424Z","last_seen":"2026-07-08T11:58:04.32408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/2026/03/banner-popup-69b94e97738570.31179917.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:40.351Z","timestamp":1783511860351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-popup-69b94e97738570.31179917.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/2026/03/banner-popup-69b94e97738570.31179917.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:40 GMT\r\netag: \"dh54x8f4nklc1nro\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8f0fFki%2BZB8eIeTVBLbfV%2FW9m%2Brr1f9SS0v2MhuVJlI2o7zwJ8CISiM72%2BJwOD5cMjzQMoIY3C3ebb6ebcUV%2FlsPuByChMTMyf6DLdIYQ%2BtlxCMwkk5y%2FsNHK8ohT4gLqxJIw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee9a73ae12efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77460,"size_decoded":78517,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x345, components 3","md5":"969208ecbeb79d955c4534d20816434b","sha1":"9cdde6fb221d4e97bd39645b13ddc7692974c2b8","sha256":"b5dd569c967f08cf01486d031c7ea643accab8f36174cfc4537906956c610afe","sha512":"a5d2bdc967bdb1d8658f2636e06e4cf7340516804bcbe2e7ef6ea2c072dab39e74410dd306c954d2c6a5d93dac9a5c229aeedeed1837609a65a8331304baf525","ssdeep":"1536:+oUbrjio+aJgSvEuX7xFKhWB1pd0IaXpR87tphxbkghpckuNZ20o141OVI7JGqK:PUXjhJVihWB1/a47thRh2DS0HOscqK","tlshash":"dc73122bcf2dac53784e668bb568c1ef4906839622847df74c1d6c7ae7510e08223dbd","first_seen":"2026-07-08T11:58:04.325793Z","last_seen":"2026-07-08T11:58:04.325793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/mythic-maiden.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.864Z","timestamp":1783511861864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/mythic-maiden.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/mythic-maiden.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kism2hl5mgj\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbC4KZO%2FA%2FH0jugkEiSIMKRpP9RGIaowEGsido08ecv%2FjHxMEtigthoyxKDF6%2BKDzJAYbl%2BBu9beOhI5KZ3W5UsBWmGt9xz8IzGpoDTfSdNfXHM1rtfz46u9vHCtxYVMKTtRfw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b0acb92efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29107,"size_decoded":30129,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"4acf4871788b0237f495a3ae84de69be","sha1":"d28b9f122e4b8f77f449a9c9a9b87742c8b396ec","sha256":"ca50b6ea65c287314bb9a16be3f30ba97544d75475589cf948852efe0bfa00ee","sha512":"b6a8bf038cfd605c7580ba509483a04ca3c99d074719870bd4de42221102c76464b836028c4a8d07361ed7322feff2f88c4db1aa586ca08447b47d15334c6bb5","ssdeep":"768:5e1fFCFc42wzD3we72cDtMienqiW7B0EMak2bh:5fFcczDPMikOtl","tlshash":"66d2e1e81b829731e45e3ffb12dc735022fd7d6e1441f89e7c1e7a91bb02010ae665a5","first_seen":"2025-11-17T13:48:13.50544Z","last_seen":"2026-07-08T11:58:04.327104Z","times_seen":3,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/ivan-and-the-immortal-king.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.815Z","timestamp":1783511853815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/ivan-and-the-immortal-king.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/ivan-and-the-immortal-king.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiqyj5c3iqc\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4AMasy29J16O9De8ruHK0c2S%2Blp9HrllwDj59lePB42PAUbbwRNBmZk0OhblEfDEcn2NHEADEp0Lc0lo3nsd%2F98H%2BzPww1WYLX%2BUDG8JRP7ZvHktDxG68TARpBds39E5JA4QzQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e5c172efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24276,"size_decoded":25309,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"0c25377d9a4b44f9b93504e25f8c7ac9","sha1":"7328bfbf6938843aef3d044f64499e1a80de6c95","sha256":"e2a8d3e476d0a3ede84ca0bde3120a2ba3a928b7e3ec3931e14699ff3a0408fb","sha512":"83d1b81407754627771414276a655f592db77ebf8ffb71d9f2c4c344e7f43284f0bb787e2bba1f3314f6cb492a3b5448dba5fd21f8b9b3d2c2ba225292b77101","ssdeep":"384:XEbPsKlHr+cVf1ZqKrIExQ6jsmnd2TnX8mgMr5LCPzMO3qrlgnsG8hmpE:XEbdRakfqUj32DXbR1WMO2enfM","tlshash":"0bb2e013e8b71082ec5e25648cb4331053578967482d87131709f29b976ef8bfb95e6a","first_seen":"2026-07-08T11:58:04.330876Z","last_seen":"2026-07-15T08:05:07.1388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/2.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.875Z","timestamp":1783511853875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/2.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhlsvmr17d-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrsi3Rx%2B%2F4v26jlXWcEpOCTBgu3ywZvHDCOW9j1fGH2aIKPm4y8wZd3UXd70bNACSh9P5%2F0vLxDZz44IFOiRGhEIqzwFr0muJYrewX4OYwFOe0nkBkpMTogRnkktc%2Ff6POuXtg%3D%3D\"}]}\r\ncf-ray: a17ee97ebc502efa-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1561,"size_decoded":1639,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e41e20e700892cc6d4b8e82d54ac6dd","sha1":"c5b8d3a924398604fcbf0794b80132523bb88e2d","sha256":"1c83779a48702993568c1ec0f6c793828ae6fed8406550dcc1cc775b64b61c4c","sha512":"f95428239ba76e9b3cd3646b2bf65c0c90bb4454b173e53e45847d32dc824de686d41780e9a1ad12ed2fa045ee36ee1000c8fb8eea4d0c93b1b802f198675d1c","ssdeep":"","tlshash":"7831a4eec0d1e2c064b973fc8c3076e4658b3cba6eb7d3764447d2a27e240988c0d999","first_seen":"2025-09-23T10:56:20.454005Z","last_seen":"2026-07-16T11:27:37.501224Z","times_seen":69,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/live_icon.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.875Z","timestamp":1783511853875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/live_icon.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/live_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kki2h0i21y5-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DFbR%2B0jQ0L8TcILVlBULtXmeR1BlYNrI6RJ%2Bho3haqiBq67%2FFsHcgFHsdR0PemW0pyeX9AwOo%2FIJSoofJqWgYU44aSifolDNWTZQrBH8qBODZ2EVIzpSSdkSYeMpLZLn%2FSqUNg%3D%3D\"}]}\r\ncf-ray: a17ee97ebc512efa-OSL\r\ncontent-length: 925\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2525,"size_decoded":1949,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9a0c05ebadf4fda67faa8b90d5424c5","sha1":"f81ff1ed17b5ffba223d3a06d1a3628fb198cec2","sha256":"f8dc8454be75f1a4ce991b485bbb1f1650428409c820b3d9b8540fe5a538dd45","sha512":"ff6e2ddf5f392b184b7d49f702e314ff8cf3af53e7eefc4150dd84a863a30eb627a9dc6f0174ed3710e72ce7ae9831f52bac374779670d653e3d78914bb63616","ssdeep":"","tlshash":"4d510ef3e2cca2d19003d7e4cc079831b59b6cf767daa3cb8272ed44ab30165598d865","first_seen":"2025-09-23T10:56:20.264777Z","last_seen":"2026-07-16T11:19:42.041802Z","times_seen":30,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/2026/03/banner-rectangle-69b94e977d14e5.43931211.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:34.275Z","timestamp":1783511854275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-rectangle-69b94e977d14e5.43931211.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/2026/03/banner-rectangle-69b94e977d14e5.43931211.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklc1sl1\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oxhCODXuAr40oIr%2B1VOdmoJXQ7pQrvo483O65xSPyKZo4Q0VSlscCpwmrvOhiQ8hKLRgsoy60Kbx4PY5NbeKFFYcNj0RFDDvI%2FnNYWejkfPmeHMiSPXzqqRIPWiCpXUBdaVTmA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee9813ca42efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83701,"size_decoded":84752,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 636x340, components 3","md5":"5e2b3dcbb1adfd13b321b24c4ea99906","sha1":"81f7b65ea2b76d5856f5780bae0f4a28b6e59a74","sha256":"3526ac0a270975176bec11645489d0b599ef2dff39f22d56579d17dfe83dcca7","sha512":"ecafb36ea1e5ac7a151d02ea90e20cb2fd629986f135ca0bddc30d4fe840c4d21ab89bb45b9cb5cb66a56de9efbfeea2137b085717d1d6239d8041abb3003cff","ssdeep":"1536:kMRyh6L0z0DUDgy716+UXUQAw6Yz3y4hQvNfifrjhbqsX:3Ah6Az0Ds++XLw9y3v1iXxqi","tlshash":"1f830223bb568ff64adffe3c9c2958da1806bb8118daa52c6515dec8e4f4500e5f143c","first_seen":"2026-07-08T11:58:04.33388Z","last_seen":"2026-07-08T11:58:04.33388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/build/frontend/images/plus.43e37ac7.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:34.341Z","timestamp":1783511854341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /build/frontend/images/plus.43e37ac7.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/build/frontend/images/plus.43e37ac7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n2hkd9lmeb-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0nSpDV58%2BI048ueDj%2BCLKHXVV0WhlXtAwnZm%2BdhAIvV6DyVn7PzOcNuzWVq3G4VAy5Jd80mivJdUeR%2FQwUCptV5Dchb4EMBu4DvuuAqk3EvVcbWCqxwmq3Ky2Hhxfth%2BE6l2VQ%3D%3D\"}]}\r\ncf-ray: a17ee981acb52efa-OSL\r\ncontent-length: 249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":515,"size_decoded":1294,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"646a796cadd2dbdcf35566f787a5e050","sha1":"bc94144a89319dbe46b004b00c68d7975c21dd5c","sha256":"68aa0abea8559a323e42fea3fd266226bf8d331b54e68e8ef8af1ec1c46ee98a","sha512":"06f6083b4644559ecd1113212054f7853919d0f4261bea6827ba3eda6aa4cbc884a6311aa9e3a8feda46f6425b2a31edf5973f588ae13bf29e9b24c5ab2c0539","ssdeep":"","tlshash":"edf0599563cc4e3cfb254a10e3497234402a66a296ad4108f67123712a282ae693f7cc","first_seen":"2025-09-23T10:56:20.515431Z","last_seen":"2026-07-16T11:19:42.04247Z","times_seen":64,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/jungle-rumble.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.859Z","timestamp":1783511861859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/jungle-rumble.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/jungle-rumble.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kiraftdwv8i\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JavMkxg%2B1Ial6TUeR%2F%2Fnb%2F6Z2nNmrD4p%2FvNmKANFLymwLK22pEQ7QxcMVr%2Ffgdt7%2BZocsOZ6BV6%2Foq%2BaoEzXZM07atg0Bs7LJgtS3zjcwsI%2FTQAI6%2BHYSOR%2Bm3zLaPsE2oujXw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b0acb62efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40482,"size_decoded":41518,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"1b77079b116d6925eae36885f8c17833","sha1":"f9c5649e4892e7d7a80d425dbd9d5d5c8008f7aa","sha256":"33371d5fd8247f821f5e93d72f8c1eb81a27e7fb6efe24c8c6b5e2071c4dc83e","sha512":"058a9fb4feb224ab578451b0c795bd1b88ce774e17e1ef67a49e6bda4248149de884d6b0788c958bb8155c95ce2a9dc0eb564077dd67308337b1259f4f328dfb","ssdeep":"768:kN5nAvWs2azPO8lmDvvqkysdOv5if5079AYwlrKj21y56A:kN5AvTD/6vikI8f5k9gn1s3","tlshash":"900301894ce65927e43e3579eb48d936eb00eb51f9d906bc23486d9eb73c0d245cf188","first_seen":"2026-02-01T16:54:16.015422Z","last_seen":"2026-07-15T08:05:07.140789Z","times_seen":6,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/metal-lady.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.842Z","timestamp":1783511853842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/metal-lady.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/metal-lady.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kikjizk95a2\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=clmPIQiCQbejboEDTZj13Dc%2FTzyuzydSER0dLxmRLuZmv%2BwdOy7xNz8zHxaJWQRnUocxBIB7R8IdOVhScdqRi4MlSshzV75Bxsbn8UmSXGY3oDb0pRx2IPHq%2FSBeuPU3AP4%2Fww%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e8c322efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6842,"size_decoded":7861,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"3af9d4974eae27f2b1aa9778e2f5ecbb","sha1":"6bdb0f8713e1ea8f4236bee6bfaa3e04756a3ea2","sha256":"23ac71d2ed9d9b27ee5e1d8939489d4402d65c6813bcb28504e58547dd181b09","sha512":"28c72d02d343a5058c842593b3aee7d43d71069171f45d964b6e79791778d6a38b0d32a6bd5edb2e48e33f08e81832d99c79a7fe7858c88aeeb8d08e6bbab68d","ssdeep":"192:4PDEoRwuUa4/OhGzunfoe+7AR03zGrbXy9O7Kpo:WDRxx4uGzGj+7iQUXy9Oio","tlshash":"51e16e13762fc537f75c8a3000750f680b97ac8ee949469e58466b3c0b7b0d9d9f16b6","first_seen":"2026-04-29T22:47:38.13038Z","last_seen":"2026-07-08T11:58:04.340643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/games/table-icon-0.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.851Z","timestamp":1783511853851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/games/table-icon-0.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/games/table-icon-0.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkho6m1i1bg-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkqzXMtMO2dTOAcySkBTiuVPC6dQh7Rl3IU2TGHeNPk%2BEArqD1L0w0RGQR7sDFX%2FCYv1pBsJWRxHAzdsl47abPsNphwuYgTLwk2PotuJG3DiL671nbBLYQctQUh0OMx%2FKCg7sQ%3D%3D\"}]}\r\ncf-ray: a17ee97e9c392efa-OSL\r\ncontent-length: 713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1708,"size_decoded":1742,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa320b6007f49925b128402df3ed2b3e","sha1":"d4905d93611121b3de96c8974fc6f723f5c53a12","sha256":"28e7fa0d8ddf5a3d49cf6766a8fe272dd4a382c3d3e35c0ff0fc88ae1d889a69","sha512":"d4b5a64ce4f96a76ccf7076574431ff4650e79bac7c22d53406000e83ff9b61820386084ec2bfea29b59d850f3e27e99b7f83d166c1ef5464b684ac498d449d1","ssdeep":"","tlshash":"6e3152fc33dcc5d4550be3d0d335180a797b38f96f9ae65d80e50914eb141ac4ad8884","first_seen":"2025-09-23T10:56:20.277213Z","last_seen":"2026-07-16T11:19:41.920147Z","times_seen":59,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/play-green.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.812Z","timestamp":1783511853812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/play-green.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/play-green.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kki78hbljz-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0VweN1VifJLIcaJeSMuJGVlhQFJtJkeZR4YTi1lSNJLmHoSm%2BvzaUUCmG2Q8mTo%2BMxIaFbDR4UXPsrp20ti8p1mvplM20ePzDcumxuZcFuRqpGHFV%2FkLP9%2FQvHQyyC%2Fo%2FsZaw%3D%3D\"}]}\r\ncf-ray: a17ee97e5c142efa-OSL\r\ncontent-length: 344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":719,"size_decoded":1370,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef71ce3378289fb255db406156262678","sha1":"bbfa96c0f5732006f3ddb4868b606374c71d1b57","sha256":"e7f7ac71134aa0dfdf47990ad3f2e0b4de0f5efc4aa9cca528ad0019747e5e85","sha512":"42561dffa655ba2fa5903839adeb82365c2918f05d6e4441c54894cae46cdfa0685ee369adc6f989b36825925ecceee3a30bbe457f0fb8b64f89732f15b23624","ssdeep":"","tlshash":"1e01f4fb27859134e1543f45dcb49264600170d6bc65c275d1f71e1dd270c4e44946f3","first_seen":"2025-10-14T14:51:48.927534Z","last_seen":"2026-07-16T11:19:41.944332Z","times_seen":27,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/commando.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.835Z","timestamp":1783511853835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/commando.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/commando.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiiak1me3qc\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6zLqQSl8pFw3gcWVVzS%2BoM9ofQQRZVAmQ7Qt8wEOh9Xzl4v74Iw3Dr9sXIXqUjlZ9Yj8%2BJzi%2FdVuJ8fNgCje7xpCUhkuiHIaPFtH0PzyI6gQFrXa2t0Ujrnms%2Bhjl2pJacGQg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e7c2a2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4836,"size_decoded":5853,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"c7d91d0924889796c28decf7764e80f0","sha1":"85811f0033e7701beb5922eba8df469b2d26a036","sha256":"6b265bc43c8907e9d702354c546266dc2f646fd4f375474229ed1d760245bd8d","sha512":"af29ceb8451044f441efea6e951af3ae517465d634384a7b869d24bc5e2e1a771dc503ed77e8c624581ef0917809c43049769e2e09bd3a368dfa5eded073137d","ssdeep":"96:0YSYEaeevw4M6f71L8eGiEZyBoAE4xgu8CjQWhWxFz4xrFil4TADZUZIslomCj:0MteeYViG9MBzEtBBRMusEj","tlshash":"c1a18d0e77afd327e64ec132172d635ac8723fd266460c12545fe7a4976b0a18970bb2","first_seen":"2026-06-02T03:08:17.667123Z","last_seen":"2026-07-08T11:59:44.369698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/ajax/winner/","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:41.413Z","timestamp":1783511861413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: es-ES\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-es.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"150\",\"591\",\"633\",\"341\",\"117\",\"289\",\"743\",\"903\",\"931\",\"323\",\"390\",\"243\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NwwwYP4IGMWaxkc5j7sW0StWNuLId5AMah9OFbU8%2BdSBgwhyGM1O3Big06wTyirwjbEW72l285et4ue4rzTgdXNzi0gFuo4r%2FCr9i1cN7Sc7%2F7c8070haTbNq%2BNt%2BhL%2BTPUX9g%3D%3D\"}]}\r\ncf-ray: a17ee9addc072efa-OSL\r\ncontent-length: 208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":1201,"mime_type":"application/json","magic":"JSON text data","md5":"4260ce0462eb5758ea857a1e848c842f","sha1":"bfca4470f6d47d979df69c9840f765a60ed86420","sha256":"c45364dec9531867617d91e8c1f736c7aabcc569192061b0c42b41967ed24e45","sha512":"f7f4a8772bc3c7f3d8d5f572b14467cbe3d5446156551669acac5027656c5ee3a6101f671d994985ca6f390141bf25809fe56ee2e1e5d512f03480a7eaab98a7","ssdeep":"","tlshash":"e7f03052ba51b73fa59310d0dc7bafce6004e812556e8474bd7f19a1d3325202fd960d","first_seen":"2026-07-08T11:58:04.347551Z","last_seen":"2026-07-08T11:58:04.347551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/dwarf-mine.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:44.699Z","timestamp":1783511864699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/dwarf-mine.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-es.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/dwarf-mine.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:44 GMT\r\netag: \"dh52kion6gzhkmi\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErK1XxJvjVHUXKbf8L0onXT42Nk0YwudV%2FkDd4RM8l2jBVMI%2Fx134dp4gjW7P%2BxZyp1OLjzUivdo%2FcC7VzlrstDjVriLuER8CDxNijiVv%2BcsctAM0cdxWRW2SfuBfkEqXkFQIw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9c26f092efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26730,"size_decoded":27749,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"752023609ac077d3b03c3f9ef8809c33","sha1":"759061a82a639823c4969ca2ef094129e6daf2c2","sha256":"194a31d397bdf5cb0d83b0782954371010955b8069a8f4c3e879505f6fed1f04","sha512":"e586b8147bad4371c5651fa9a0676347b7774be641702d887c77b82695ba671774259095effd48c9080e105baec252bb8b9ff9844c9e939632230532ce0b03e8","ssdeep":"768:GwkDwPDQ9AGkdIq2ieeSaLZwFOp7hUkS6jN:kDcDRGk+fiDSaysUjs","tlshash":"b2c2d12e3b0d698b743f4ebbcb1699633b491fc5f0920d1de1e48b2483b42d84a9dd52","first_seen":"2026-07-08T10:52:35.117103Z","last_seen":"2026-07-15T03:08:00.142868Z","times_seen":3,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/games/wealth-of-monkeys.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.825Z","timestamp":1783511853825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/games/wealth-of-monkeys.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/games/wealth-of-monkeys.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kivx5636fx2\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BvE%2BGKQg5yrhihboHCKZouUHXXLxIZ%2FQwrtkDF%2BwRZkEX03V5wnpMGnn3DVc6%2FOOk8xLmOA1DPeqoEbhlxvNnVmOnDMd48bjwfQ8ErmUyNSZNR1KzqjGB8qfMBQ%2Fn1EFUfRX8g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e6c202efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20630,"size_decoded":21658,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"c9fe38d7bfc943bff185298214c50c91","sha1":"b34c9c6622e8752a10fce9585beb17fb862b6166","sha256":"c969355e59c21c8e4201120cef21e70abef24e071bef72d7a2f924f6726d1cff","sha512":"d726c6a70cc7ec50cf0864dd5db2dd91ca9d6225ee205319909dc96bf65d101e66a2b5702704c74d1f2cbee08c75ef8073eba1d5233b4da8b12f86bea375eb8b","ssdeep":"384:KABApfJ/ycWuVMs6ksNb6OlfYmi5IwF4jXDyJVWMsx0vJhis/F5ts9L0xSNkPgJG:KABAdCs6kSRji574fOVWVx0OeF5ts9xC","tlshash":"4292d0f877dc550fa86c9e7dc9234ff18bc95c09d643912221f909b14739c8ae93e628","first_seen":"2026-07-08T11:58:04.351678Z","last_seen":"2026-07-15T08:05:07.169013Z","times_seen":2,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/uploads/media/avatars/stiletto.jpg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.845Z","timestamp":1783511853845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /uploads/media/avatars/stiletto.jpg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/uploads/media/avatars/stiletto.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kil4yl944yr\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2BrjjjyyA1fq6WtJ%2FiylHx6vnbZltpPcNgMZxUSEUtPNFNUCm2fEHFAkoo71s1%2B4SaAM8zcz0xlXkiykBFeOD38EPabobEX4XzlssxsBK0sk95LPZpV6gk3C%2BZs4BaM0b4QARw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e8c352efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6435,"size_decoded":7452,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"7e20b9fdba8906612e8d2be93672d50c","sha1":"d200673b91cf55a52b5415a2d2a2fd13e1235b9e","sha256":"ed59319399de77c14828741d684d658a4cffd2a4d32082456878ad9e4fdcd80d","sha512":"1baeff1c8c536fdf73f4a5cb37af6f2fca2aa96659ff8a394e5a4a2ada538b99fc0642121e7b8b230a76901734dbcd73f1e715ac339bdabd7e90477beac92bf9","ssdeep":"192:/VJpJFeFao0wua7/88FeILoPxm1OCvcCsg:tJpJFeFp0wZD88rLoEYCkCt","tlshash":"c3d18d039fc58880e66d46721104065208b9be4e2ba176a314206b7cefaf89f47a9717","first_seen":"2025-12-25T23:59:48.604314Z","last_seen":"2026-07-08T11:58:04.352963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/svg/18.svg","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.881Z","timestamp":1783511853881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /svg/18.svg HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/svg/18.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kkhc9xzp2u3-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdmE1jJQwhXxUDo5VNCMprt8GIZdV28CeDI3Y1R9YTxJsTH%2FaFYw3ZH5jo4yLZysv5bWZ%2FE%2BFrxB7khO8NcsEZ4gY6FeKdQsF7LJguMuF29NFo%2Fs1Wq7M%2FRPoVHsxgR4rE8RxQ%3D%3D\"}]}\r\ncf-ray: a17ee97ecc5b2efa-OSL\r\ncontent-length: 1225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3675,"size_decoded":2243,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71ace1fcfb0d140bb221f1bc54968527","sha1":"0bd6be64e7dd38faa2dd1234b76065d6cc80609a","sha256":"c01ba57e02b7ee032930c7756ad3af600b34c6b06bf2edba619f0cb41810c906","sha512":"665c083447e8b2361d2c90e79e9211d9a8ad4b3539c15a7121ca9a17edc48b613feb246c99ca70798ec341c473cad29bd2b2342a982a5de3152a5e7f45f0bd32","ssdeep":"","tlshash":"3471f2f983d4e2d4d514e7f4d536c2e6396324bb3a15cf5c02e55ea8bb1242e954ccc2","first_seen":"2025-09-23T10:56:20.428584Z","last_seen":"2026-07-16T11:19:41.994735Z","times_seen":67,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-es.eu.com/build/frontend/app.css","fqdn":"rainbet-es.eu.com","domain":"rainbet-es.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.173.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-es.eu.com/","date":"2026-07-08T11:57:33.779Z","timestamp":1783511853779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-es.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:32:06 GMT","end":"Mon, 05 Oct 2026 17:32:05 GMT"},"fingerprint":{"sha1":"F7:95:7C:F4:1B:E6:08:C9:34:E6:C7:73:0F:4B:13:84:1F:15:F3:DC","sha256":"E8:4B:BD:5C:CD:DA:34:E6:A4:5F:76:4E:78:C3:79:B1:FC:46:5A:F5:D7:79:A9:CA:9B:33:A6:8B:1E:B1:8E:DE"}}},"request":{"raw":"GET /build/frontend/app.css HTTP/1.1\r\nHost: rainbet-es.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-es.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-es.eu.com-/build/frontend/app.css\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n2hflson1abu-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npxJrLmIm9icbrVSW5AXjP3KkZM%2FGcW4y6Mf1vnmwatzkOkhRgEQe6sU%2FGGMXA6x9HAuC9khMcZBUO4O7wBQa9l4AXUXqDi6iOGUl9ce7kUvlplQGG5nsXXwxBtseMSyzCNSJg%3D%3D\"}]}\r\ncf-ray: a17ee97e2bfc2efa-OSL\r\ncontent-length: 10743\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60042,"size_decoded":11782,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (60041), with no line terminators","md5":"c73c00130abbba0603adb13d71d7a66d","sha1":"2b90791e55605f7467d92cb0fcdfc9acfc8ec4bd","sha256":"604cbb5017d49110d673077558509bfb32d01fcb55e3a6aa2f75f12b2d321862","sha512":"1b1b89521e0e4d8ffa95f3e0ed463993f4a38fbdd40aa33c96ba7595ed9f4489b7e970628bea76703901472f814e022665006ccb611beb73f2e8d9d83573f983","ssdeep":"768:LMVU20VL4Mqi6Fmof5ILbI8WbQ5fwlzVNTAuf:LAEVLqFmof5InI8f5olxxA8","tlshash":"a8436423264e603db03fc465a8d0a69d312dd417eb6b57fdee52a174c9ca2d31732b88","first_seen":"2026-07-08T11:58:04.354799Z","last_seen":"2026-07-08T11:58:04.354799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-es.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}