{"report_id":"1dc34564-1cd9-4348-8006-10e360268757","version":0,"status":"done","tags":[],"date":"2026-07-17T09:14:02Z","url":{"schema":"http","addr":"raainbet.de","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":0,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"raainbet.de/","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"title":"Rainbet Casino Online - Krypto Gaming \u0026 Live Spiele","dom":{"size":32979,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2101)","md5":"31a05b935fd465920f2b6e0985a0044f","sha1":"31621f941aa326b281944d9b23877b6bc4b33068","sha256":"90a2490273df76338b1c48e044139b4955abb08e4e64e2ed66b592a42e20352f","sha512":"e2acb6f436521b9d622bd268939c811209fff4e64dd59ee239c5e5ee662eb9b387643e966a111887f41027b54c845a011d9e933ead8fca8f865b985b28ee2f36","ssdeep":"384:OCFXe3HT+LOtAtgKo+cF9HWwNb1VftyE5d/IhuSmwYO4ZOoXYbxcuhmP6LG:5e3HTNtAtK+c7Wwp4EImuhmYG","tlshash":"3ae2c43690c2533b485373a83b62a7163191e92bd71b3415f1bdc39a9fc7deac86854c","dom_hash":"domhash55cb9257d1206950701e5bd7c4274d09","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"raainbet.de","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":0,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:14:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"raainbet.de","ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-16T11:09:10.637423Z","last_seen":"2026-07-16T11:09:10.637424Z","alert_count":24,"request_count":8,"received_data":408191,"sent_data":3895,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"raainbet.de/","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"84bb50d40c03ef56cef87e5bdbfb1b41","sha1":"f9cdc305610897ae2fbb32fd83498ecb8b207a86","sha256":"829ac9124050753cff340c45bd3726a49024f216c3c04ebbdf1ba5c649062153","sha512":"d385bf3c588580f63153b9155a658521f9fdc342c6cc12692859e0bf6d32dfdd4e23cc51391dc37bf137fb68c91de65f9467648930d396b98bb48ba127297cd0","ssdeep":"","tlshash":"ffd0a766b595143081bfb12e42dda38c317040e73448e8317c4c0507cfa0fb440b97c4","size":235,"data":"","first_seen":"2026-06-09T08:32:06.637058Z","last_seen":"2026-07-17T09:14:03.68126Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raainbet.de/","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b62c2ee591d704466662c21342e7ecde","sha1":"5b8d993234a753dfa860ccb9d51b0c375817e7e7","sha256":"05e6a59bf391664e84324015d0a543fbb96a4be278ab49ba7639a7b3cc1751dd","sha512":"8910869ed3da4faa8c283fd5bc3418cd607f65458974e0a7a42ea7934a8b380d88e78403ebcc2f20cfa01bd596e8e16e1d764c4a14e0188f97859f3b6842e352","ssdeep":"","tlshash":"57d0a72a7081197245af32a66e1f7bc4351170132006dc443e4c87946f18e76e462545","size":266,"data":"","first_seen":"2026-06-09T08:32:06.650373Z","last_seen":"2026-07-17T09:14:03.681966Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raainbet.de/js/index.js?v=c1s4d05","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"64efedba53d8a8c4909f77e713d71ec6","sha1":"2385200c8875d014759bd306bd3c9f7636287413","sha256":"d66ae70679b82ce085e166950bc56ebd128df7090cfefce590479fdeaffc9b61","sha512":"d6bcb5705d601bb1d453e526dbb77763bedee7e35db9787555dbfe5b4f1dbef7b41e8428a677e884d82d8045856ad0c5838151244521405709b25a44d5eccc5c","ssdeep":"96:kq1MD5MkguI2QLHoQ2ei02jrfTWx3pXBbIJGmOplCkzho:kq2D5MAI2wV23jrylpXBbIJGmWl/zS","tlshash":"a5f122ad5015253284b763bd8b93d56cfa1930637106de1bba0f8b401ff276059f6eca","size":7936,"data":"","first_seen":"2026-07-16T11:09:14.873894Z","last_seen":"2026-07-17T09:14:03.678847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"raainbet.de/img/general-banners/banner_main4.webp","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raainbet.de/","date":"2026-07-17T09:13:34.765Z","timestamp":1784279614765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raainbet.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 12:12:12 GMT","end":"Tue, 04 Aug 2026 12:12:11 GMT"},"fingerprint":{"sha1":"7D:00:A0:2F:AF:D8:A8:5F:9E:E0:75:E9:98:98:D6:A1:28:40:1D:CE","sha256":"44:04:55:48:42:F8:EB:90:70:25:F2:3E:9F:36:0A:E4:94:0E:BE:A0:AA:36:5E:F0:95:3B:E0:8B:9B:93:CE:7E"}}},"request":{"raw":"GET /img/general-banners/banner_main4.webp HTTP/1.1\r\nHost: raainbet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raainbet.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:14:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 208962\r\nlast-modified: Sat, 02 May 2026 15:07:46 GMT\r\ncache-control: max-age=31536000\r\nexpires: Sat, 17 Jul 2027 09:14:03 GMT\r\netag: \"69f61342-33042\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208962,"size_decoded":209264,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"afc96a5a90ed1af426d7ccefcbcecc77","sha1":"2f882bb0e0cdcbd9676845b40bb987ab2c1cb54f","sha256":"5142351b133aa2ec646e6730c6588eb2ada3cb3ec44218b791298872b1d44419","sha512":"e9acc9741e51f488b7e92f2b5dfee609419a2ae324760749b63bea0dcdb62c1f0b186ab6c8f486a974d30e149e42227019035df6e0f4f6739a20212207fca87a","ssdeep":"3072:JXUCAOn6K5HDx+h50hiO7tS+1toAdJnAgGw+oUGcjPVE28FVhOy/A2JSaovdegNR:JECAO6K5u50h3tZm6bjVRvJ+YiR","tlshash":"aa142340a74bccc6eb1435b52e070dbad598149ba9d40284f61323bfe8a5ffb19161eb","first_seen":"2026-07-16T11:09:14.876062Z","last_seen":"2026-07-17T09:14:03.654537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raainbet.de/img/favicons/favicon.png","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raainbet.de/","date":"2026-07-17T09:13:34.982Z","timestamp":1784279614982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raainbet.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 12:12:12 GMT","end":"Tue, 04 Aug 2026 12:12:11 GMT"},"fingerprint":{"sha1":"7D:00:A0:2F:AF:D8:A8:5F:9E:E0:75:E9:98:98:D6:A1:28:40:1D:CE","sha256":"44:04:55:48:42:F8:EB:90:70:25:F2:3E:9F:36:0A:E4:94:0E:BE:A0:AA:36:5E:F0:95:3B:E0:8B:9B:93:CE:7E"}}},"request":{"raw":"GET /img/favicons/favicon.png HTTP/1.1\r\nHost: raainbet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raainbet.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:14:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 2052\r\nlast-modified: Thu, 07 May 2026 18:21:01 GMT\r\ncache-control: max-age=31536000\r\nexpires: Sat, 17 Jul 2027 09:14:03 GMT\r\netag: \"69fcd80d-804\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2052,"size_decoded":2349,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"80d4d2c418a7620e8981d2d53f61debb","sha1":"e277e432d1132b431acc7ce27f5134f501a18e02","sha256":"ee22b8c569e053bcc2726abafd8c4ef680593a4e78b3475cee8cab670694c8b6","sha512":"4e1bf0fe57ae5611cd2dbb36ea06334de5e2efabfcaf2cf2b650d1fccfde897c3869d0cae2158447a9b35d21a18569e8d78cd9650ed0c156ca4367aecdbd4ea7","ssdeep":"","tlshash":"2a411aa6b87ab63ecd17c8d3810f66e25bb0059408afc9473506a5a75d8ea4908e6c06","first_seen":"2026-07-16T11:09:14.877517Z","last_seen":"2026-07-17T09:14:03.671604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raainbet.de/img/favicons/favicon.png","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raainbet.de/","date":"2026-07-17T09:13:34.984Z","timestamp":1784279614984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raainbet.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 12:12:12 GMT","end":"Tue, 04 Aug 2026 12:12:11 GMT"},"fingerprint":{"sha1":"7D:00:A0:2F:AF:D8:A8:5F:9E:E0:75:E9:98:98:D6:A1:28:40:1D:CE","sha256":"44:04:55:48:42:F8:EB:90:70:25:F2:3E:9F:36:0A:E4:94:0E:BE:A0:AA:36:5E:F0:95:3B:E0:8B:9B:93:CE:7E"}}},"request":{"raw":"GET /img/favicons/favicon.png HTTP/1.1\r\nHost: raainbet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raainbet.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:14:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 2052\r\nlast-modified: Thu, 07 May 2026 18:21:01 GMT\r\ncache-control: max-age=31536000\r\nexpires: Sat, 17 Jul 2027 09:14:03 GMT\r\netag: \"69fcd80d-804\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2052,"size_decoded":2349,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"80d4d2c418a7620e8981d2d53f61debb","sha1":"e277e432d1132b431acc7ce27f5134f501a18e02","sha256":"ee22b8c569e053bcc2726abafd8c4ef680593a4e78b3475cee8cab670694c8b6","sha512":"4e1bf0fe57ae5611cd2dbb36ea06334de5e2efabfcaf2cf2b650d1fccfde897c3869d0cae2158447a9b35d21a18569e8d78cd9650ed0c156ca4367aecdbd4ea7","ssdeep":"","tlshash":"2a411aa6b87ab63ecd17c8d3810f66e25bb0059408afc9473506a5a75d8ea4908e6c06","first_seen":"2026-07-16T11:09:14.877517Z","last_seen":"2026-07-17T09:14:03.671604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raainbet.de/","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:13:34.360Z","timestamp":1784279614360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raainbet.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 12:12:12 GMT","end":"Tue, 04 Aug 2026 12:12:11 GMT"},"fingerprint":{"sha1":"7D:00:A0:2F:AF:D8:A8:5F:9E:E0:75:E9:98:98:D6:A1:28:40:1D:CE","sha256":"44:04:55:48:42:F8:EB:90:70:25:F2:3E:9F:36:0A:E4:94:0E:BE:A0:AA:36:5E:F0:95:3B:E0:8B:9B:93:CE:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: raainbet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:14:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlast-modified: Tue, 23 Jun 2026 07:41:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3a38c0-810b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33035,"size_decoded":10334,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2101)","md5":"1a8434ec564f4f9ac5f1d00d02d509ee","sha1":"e43e09bb952b8c101d4a35bfed4701200d841d0e","sha256":"273ffad667d26316970d1d392e6afeea4e3604e518161543915b61acc787640f","sha512":"4505680b6fde52e9a5279c3a124e1082274bc6f91a6ac390e82dd8c16be149f366668757a025c288907f4d0ff83c7416b92df34ab864c91b4f97e31bdde0f254","ssdeep":"384:B1dM/scKPgOtbtg6o+cd9HWBNb1S0q7tWdURhnSm5YHhZ0XYbxcXMtO+re:u/scKRtbtu+cDWBLIDImXMtte","tlshash":"94e2d637a0c2533b485373a83a62a7163191e92bd75b3415f1bdc39a9fc3de6c86854c","first_seen":"2026-07-16T11:09:14.878548Z","last_seen":"2026-07-17T09:14:03.672647Z","times_seen":2,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":6,"connect":33,"send":0,"wait":65,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raainbet.de/css/color.css?v=c1s4d05","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raainbet.de/","date":"2026-07-17T09:13:34.756Z","timestamp":1784279614756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raainbet.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 12:12:12 GMT","end":"Tue, 04 Aug 2026 12:12:11 GMT"},"fingerprint":{"sha1":"7D:00:A0:2F:AF:D8:A8:5F:9E:E0:75:E9:98:98:D6:A1:28:40:1D:CE","sha256":"44:04:55:48:42:F8:EB:90:70:25:F2:3E:9F:36:0A:E4:94:0E:BE:A0:AA:36:5E:F0:95:3B:E0:8B:9B:93:CE:7E"}}},"request":{"raw":"GET /css/color.css?v=c1s4d05 HTTP/1.1\r\nHost: raainbet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raainbet.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:14:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 207\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 03 May 2026 22:30:30 GMT\r\netag: \"1ed-650f15c87ad80-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 16 Aug 2026 09:14:03 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":493,"size_decoded":732,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9eb22fe806d80d212a9936972c4de8a9","sha1":"45de5d5fc24393ad34e0626b9e4625826c1c3278","sha256":"7a030ca87165970d6a752350d9c6e537123c669ddf8e875f54f686d86e356693","sha512":"9dcc50e2d543aa628376babc82660ca35dbf78a274b6339b0e66676dd5d7bc91c894798644073e500f4465a1ccb275c382724ec8349b3eb338fc0b69f9029312","ssdeep":"","tlshash":"36f0304ae909152a153687ff7324c927a27436597019aef0bec71540e30d39518fcd80","first_seen":"2026-07-16T11:09:14.879389Z","last_seen":"2026-07-17T09:14:03.673953Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raainbet.de/css/main2.css?v=c1s4d05","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raainbet.de/","date":"2026-07-17T09:13:34.757Z","timestamp":1784279614757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raainbet.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 12:12:12 GMT","end":"Tue, 04 Aug 2026 12:12:11 GMT"},"fingerprint":{"sha1":"7D:00:A0:2F:AF:D8:A8:5F:9E:E0:75:E9:98:98:D6:A1:28:40:1D:CE","sha256":"44:04:55:48:42:F8:EB:90:70:25:F2:3E:9F:36:0A:E4:94:0E:BE:A0:AA:36:5E:F0:95:3B:E0:8B:9B:93:CE:7E"}}},"request":{"raw":"GET /css/main2.css?v=c1s4d05 HTTP/1.1\r\nHost: raainbet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raainbet.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:14:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 11:27:50 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000\r\nexpires: Sun, 16 Aug 2026 09:14:03 GMT\r\netag: W/\"69fc7736-17506\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95494,"size_decoded":19693,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f2971b28f67827993fdbc74fb4ccc9bb","sha1":"bfc6580cca3ff46356d43c87077b356a22c7cd6e","sha256":"dfecf6bfd65dc6e7376362b9e1bb4fc631c9bb4fc94996302cf1df366ce3d080","sha512":"d03b3858426346632fbc1cca78f08d17f91ce0cabae2efa72200aecde513346790149093eb91bd8f44689bed08dc5f935c56faa82b195b4bc6c97c6c056c43eb","ssdeep":"384:odzFOghn/Ruk39OBXo8A6k/Kb3AW5hUl8wN8X7PCF9B9t969k9+9IhmgOZOE6GFz:exj8DqOZOxeypFDUj3v6dvvgr","tlshash":"d593945d660121191137d739bb975b1dfbb8a022db0312b8fee260198be63f84562fcd","first_seen":"2026-07-16T11:09:14.87251Z","last_seen":"2026-07-17T09:14:03.676609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raainbet.de/js/index.js?v=c1s4d05","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raainbet.de/","date":"2026-07-17T09:13:34.759Z","timestamp":1784279614759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raainbet.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 12:12:12 GMT","end":"Tue, 04 Aug 2026 12:12:11 GMT"},"fingerprint":{"sha1":"7D:00:A0:2F:AF:D8:A8:5F:9E:E0:75:E9:98:98:D6:A1:28:40:1D:CE","sha256":"44:04:55:48:42:F8:EB:90:70:25:F2:3E:9F:36:0A:E4:94:0E:BE:A0:AA:36:5E:F0:95:3B:E0:8B:9B:93:CE:7E"}}},"request":{"raw":"GET /js/index.js?v=c1s4d05 HTTP/1.1\r\nHost: raainbet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raainbet.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:14:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 11:27:50 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000\r\nexpires: Sun, 16 Aug 2026 09:14:03 GMT\r\netag: W/\"69fc7736-1f00\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7936,"size_decoded":2789,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"64efedba53d8a8c4909f77e713d71ec6","sha1":"2385200c8875d014759bd306bd3c9f7636287413","sha256":"d66ae70679b82ce085e166950bc56ebd128df7090cfefce590479fdeaffc9b61","sha512":"d6bcb5705d601bb1d453e526dbb77763bedee7e35db9787555dbfe5b4f1dbef7b41e8428a677e884d82d8045856ad0c5838151244521405709b25a44d5eccc5c","ssdeep":"96:kq1MD5MkguI2QLHoQ2ei02jrfTWx3pXBbIJGmOplCkzho:kq2D5MAI2wV23jrylpXBbIJGmWl/zS","tlshash":"a5f122ad5015253284b763bd8b93d56cfa1930637106de1bba0f8b401ff276059f6eca","first_seen":"2026-07-16T11:09:14.873894Z","last_seen":"2026-07-17T09:14:03.678847Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raainbet.de/img/general-category/logo.webp","fqdn":"raainbet.de","domain":"raainbet.de","tld":"de"},"ip":{"addr":"209.99.186.25","port":443,"asn":203999,"as":"Geekyworks IT Solutions Pvt Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raainbet.de/","date":"2026-07-17T09:13:34.763Z","timestamp":1784279614763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raainbet.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 12:12:12 GMT","end":"Tue, 04 Aug 2026 12:12:11 GMT"},"fingerprint":{"sha1":"7D:00:A0:2F:AF:D8:A8:5F:9E:E0:75:E9:98:98:D6:A1:28:40:1D:CE","sha256":"44:04:55:48:42:F8:EB:90:70:25:F2:3E:9F:36:0A:E4:94:0E:BE:A0:AA:36:5E:F0:95:3B:E0:8B:9B:93:CE:7E"}}},"request":{"raw":"GET /img/general-category/logo.webp HTTP/1.1\r\nHost: raainbet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raainbet.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:14:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 55584\r\nlast-modified: Thu, 07 May 2026 09:42:07 GMT\r\ncache-control: max-age=31536000\r\nexpires: Sat, 17 Jul 2027 09:14:03 GMT\r\netag: \"69fc5e6f-d920\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55584,"size_decoded":55884,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4bd3ab3bf2baa5fb19ea5cc2460c825f","sha1":"855549d25dd58ca2cb6339969dabe62cd3d26edd","sha256":"27c4ef0697518a4dc5702c421c2a974c44ad21761a76208dc0589720afba22fd","sha512":"466be2cd66970e7b9222d58f2e5acdbfe08c8d72e346b8b770450d6d79ad24b7db56d150eeffb98a9f9122f3f2d0bbf914adecb9e1c48e3a5feac31caa2af702","ssdeep":"1536:ZJ7EkA1Bg8WaSJsFf1Uo6nbF6n/JwP2/dN0xEAXw:f7szpFScJFN0CAXw","tlshash":"db43f2ceeee1456ae70275f744089ebdad54503dca23fb9cc0d6a680afc4ce159a84f1","first_seen":"2026-07-16T11:09:14.875091Z","last_seen":"2026-07-17T09:14:03.679986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"raainbet.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}