{"report_id":"20ad3884-1b3b-40af-a40e-b8315d0ac427","version":0,"status":"done","tags":[],"date":"2026-08-13T18:58:51Z","url":{"schema":"http","addr":"rainbet-casinos-netherlands.com/","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"172.67.185.200","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"title":"Ontdek de Spanning bij RainBet Casino: Jouw Nieuwe Online Casino","dom":{"size":46200,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4549)","md5":"d9164f70c80c0c4908ce2baffe1a44ca","sha1":"3b061358be7ca8f4a276e6b567807a8368bb0cd2","sha256":"9502709a91948712ed32a9a58d121f822ed22986b9768db9a6471a300e1cd5de","sha512":"1c248491fbdde0ad042572855f0e72aac17f28d4ba5df81190e7409428c58fbf053ca5550ad5edfeea282e800c7758711b7f8b6ae912e9c2f64c26c721280f43","ssdeep":"768:XbACzVov4T7UZ4ccZwPLEVDX9/j+B1WScLmJY6LHWy+bHS57xhxN5j6O+/o4NOpX:snIDQTAzu7shVNiDb+zm7j","tlshash":"2623e60794f8033f05a39bdab9611b267f18505aca4d95747eacd3a62fc1d6800bf6cc","dom_hash":"domhash7cbc55775084599bec7de76d884f6997","first_seen":"2026-08-13T18:03:36.041494Z","last_seen":"2026-08-13T18:58:52.873692Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-casinos-netherlands.com/","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"172.67.185.200","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T18:58:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-casinos-netherlands.com","ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-08-13T18:03:28.224839Z","last_seen":"2026-08-13T18:03:28.224839Z","alert_count":28,"request_count":14,"received_data":1497127,"sent_data":7708,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":6,"received_data":243582,"sent_data":3526,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":14656,"sent_data":585,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d28cb97f49f1ff3c8b528e5cfe6c144f","sha1":"d5c0da607af68f37a1d5eef09813e91e462b0aa0","sha256":"bef683d6f287649607aa19d3d29cc1a80d80802bc28018bc2a3b492c67375cf3","sha512":"073720dbf530c7c7f7f64330acc6ac0fdb8ab00c9c188f993b968c58461b7a86680cd93517fbe74674db628a2a9a62c8aad4a0827378e4f19e55b3a0680402d0","ssdeep":"96:uopx2QYRaLMnl3WkdpLKci1FWvh2sIUYGMyeM+HytF:u8DlMnUQLKcigkrdGMyeM+HytF","tlshash":"0da1652ef5e31877287362be97df52a4712810538889c4063d8cdb840fd09a26bf6ef5","size":5014,"data":"","first_seen":"2026-08-13T18:03:36.08459Z","last_seen":"2026-08-13T18:58:52.895593Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/styles.css?v=dab24848","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.449Z","timestamp":1786647504449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/styles.css?v=dab24848 HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Apr 2026 08:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69df49c6-634d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 3326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTab14sGnbbcwjcC0XWKvNMo60NP13jNdUvqCbtfDMei2mixOX2o84wNHEWZC50Tgr5dRWY8tdl2Mfrq3AwfcUOGtl961W5E9%2B4e5j4VsMFHlPjgtjWlwg9fcSSiMhieVairjbPq8nmdePIUHG4IsTfE\"}]}\r\ncf-ray: a2a9f376ce07b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25421,"size_decoded":6089,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"1832b0dafdc50688d7f2eb369bf1492e","sha1":"961c7770d93ca9efe58976ca24f2d527b4e1f6c8","sha256":"acfac1a70b251aca101b221349eead2fc7e6133af6d7625a18e48ada25cb5b8a","sha512":"8b031c6ae11a1d352ad8904b273c208cdb5a981dee0b25ab4e35f98b3448f5eff36082d38331098a32110f8710e3c2bcfefa960e27f4939359eaa89d78fbf35e","ssdeep":"192:qX1eEIFjjWqBfLKKxo9b9y9J929NKUWZKWvGhy5rvnTDta5W2vNa23kPcQ4/OqTC:qX1eC9Ypvag8j3ACaCdRiUp8D70UfL","tlshash":"f5b242496622a19599379b68bbe7835cf2a450179f0242ecbede51408ff63fc41d2f8c","first_seen":"2026-08-13T18:03:36.076921Z","last_seen":"2026-08-13T18:58:52.874861Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/rainbet-casino-logo.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.455Z","timestamp":1786647504455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/rainbet-casino-logo.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-bed9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYTVCOIlhRTgi3AWemj3DEpvwh65ZvSYHj4Rz3OVcAOW2OIrq28ahhImbGC1q27lH72mo%2F7982Ny6agDE61G4cP1MayIFD0bemRvwj9HZvdRQRR64Dad58pscMJanH2ehcegIYyvJqqIrnmp8NFz6On7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f376de08b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48857\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48857,"size_decoded":49614,"mime_type":"image/png","magic":"PNG image data, 1280 x 436, 8-bit/color RGBA, non-interlaced","md5":"be0fc66d7397397c3586aaad3d80c329","sha1":"26c443fc6a0b35984a9e9463727a52d388c238f3","sha256":"4c07a02bd48784df347c6c99ec3d7c315cd124dde2b3a759558a4bd9a55c8340","sha512":"460bc46323227ea768780f5d40e6ae43e5d26edcb9b89b19fbc0b945ce2bb52acaab29acba38d307b86b61ba9f0b50cd0556e6e027df57e8ab4877502db5806c","ssdeep":"768:ce/SumxQPhHuVges3FJBeC+BbKY7VRwYDajPjG3GUWu8jhwnPDt1JseM:ceKtEuaeWFiZbFVIPyOtxeM","tlshash":"3323f1ce0265c0680e324d228ad034a09d2bd75c7beddedfa918dda1c8493e26675fd7","first_seen":"2026-07-22T10:34:21.360168Z","last_seen":"2026-08-13T18:58:52.876669Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.614Z","timestamp":1786647504614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casinos-netherlands.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 12 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107272\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-20T05:30:31.582299Z","times_seen":262019,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":4,"connect":32,"send":0,"wait":20,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/slots/folsom-prison.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.636Z","timestamp":1786647504636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/slots/folsom-prison.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-e2a3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=viNAIrAMeKDzzvVvAhMuDOqfNVXz9PfOVxhOx98DYn2iWDxwgLCVSfdSukckV2JL0zHdveuinbQv4uVKviYXgaLQ91TUeupyR5J%2BaAO7K1LocJL27hu57YoCOW6j%2FX1R6AECBTA90vZjyX1UD0ahoruL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f377fe1eb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58019\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58019,"size_decoded":58778,"mime_type":"image/png","magic":"PNG image data, 438 x 300, 8-bit colormap, non-interlaced","md5":"e756aef3c7fc00d6650258f513b61b0c","sha1":"4b22ccbb095ddb874c42e1e79e28cc3310ad4d62","sha256":"882e362194c598030c36acd2f5794a3905a4f0456e15235d338d3b0ebbed7f99","sha512":"f8626aa8f0d304a1c9622ed710f80463efa0a47254dd7504a9e9813ad66a5875cd69eff473f213c628c116ab31d25a36870df2ce9fe409cc3ad5f07ff808c71a","ssdeep":"1536:zZUogGTNtG8dTIK16Dni2oLTaMAwbfsbKCQv2:1PgkXcTi2oLHAwbPrv2","tlshash":"46430269593812d734166cb3f28883dc76d96402a5ebc7b5c05322e6bd938972ecd30f","first_seen":"2026-03-24T09:58:35.192526Z","last_seen":"2026-08-13T18:58:52.883496Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.621Z","timestamp":1786647504621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casinos-netherlands.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 12 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107272\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-20T05:30:31.582299Z","times_seen":262019,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":38,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/slots/rotten.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.629Z","timestamp":1786647504629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/slots/rotten.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-9bda\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3V%2FIRXO8%2BZLy75MwCTHRR6U0lSMLyPF0fV9MuoGSAVdp%2FByTOqE1ji1BlKHObwKAWkJhIc9kopfb4MzY5T26mu%2B8Xf5%2Fw%2FY%2FfiTL%2FUGdS568jOKSpKS7AHGrZmHtKxVZADTPJ4LeJ9X2i%2F9%2Fr0qCE6%2Bg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f377ee17b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39898\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39898,"size_decoded":40675,"mime_type":"image/png","magic":"PNG image data, 438 x 300, 8-bit colormap, non-interlaced","md5":"40e3e38435e5bcf7e2ef0c0982157918","sha1":"b3f84843a8a0d19c3e5941a47b0c9e8b60afb78d","sha256":"bc35aa7a44d1931f1d60ab8c8517b4756a044e97fea604bf667e69b746719f3f","sha512":"241d2dedaca08db48b73a60a886fbe505b464ac04d0c9bdb34c414ead42e38f0bb868f3b22812af4fa811515df326ed6b43667faa9ead069e78f31bdf049eefb","ssdeep":"768:NqAyOIAB6MTPYRyTSkd9nwZTzpFZSIBsRMgc8ABvwocViAtTOjS10aBRSKbhB4Xe:YdOByytsFgIqMg+vwKWTOjS1EWhB4yEI","tlshash":"fc03f19eb114890643ff52fef9a7174b0a23b420ba7137589cc17f14eae00b67a15a92","first_seen":"2026-03-24T10:00:33.468778Z","last_seen":"2026-08-13T18:58:52.884216Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/slots/jumanji.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.635Z","timestamp":1786647504635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/slots/jumanji.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-6035\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=25BEdRoJXu%2F6uHeDKyTC2sK99DnlQUDmiagb9A9h%2FjSeGBEqlgAykgrCzem%2BWuyE7DTKfe%2FgdfpKoM8acY6ABmN24p2SrM7zAsRQjb7ZRyTixNyzHpyOpFF4%2F%2Frp5nBQ8K4fKyZyogw6iqy98KXGVEhX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f377fe1db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24629\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24629,"size_decoded":25396,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"3bb8ff2be3cdd8c8f32bc97ab137a621","sha1":"66f837879c97d9a37d4991366308b408e3c36f2b","sha256":"d6249c59801200e608bbfd6800f66b557b95aa72392bf679249a61ca71f8e6f7","sha512":"d618ca2297a7f6ebdcab44cc003eca0055f899e10c455955abc6f555c6894aab9cc61595827a15a17795e634279ef21e25b679e84718085744852c2c3126bd9a","ssdeep":"384:HL1gWWMeqrGgUdQalyadPXPq89Gfo2ZbAG+ZGicqwb6Uz7CJb+nhAw9V:5AMeqUdQakWPfqDA2JndbVz7Ob+hAw7","tlshash":"8db2e012b64adf19c1ca8c392e4ac69d0b4bfe26c74498bacec509bdf8a74c47c4611c","first_seen":"2026-08-13T18:03:36.070937Z","last_seen":"2026-08-13T18:58:52.884929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/favicon.ico","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.754Z","timestamp":1786647504754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69df49c5-5ea\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UE9b%2FyjCoDv8uZRkpHDkwfpZvtjm0mx05ndqvM7%2FFKTXEw69DHyCHBfHL2ujbykKtEcAjqdJTLqKHi1dY4ZMWroeA5h8OFC4o6XjQwjQ2HXF%2F3eNGJ9nvE6d5QjemgzPOrS7MGqUT2XrS6CNJ9wtfsk\"}]}\r\ncf-ray: a2a9f378be28b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1514,"size_decoded":2147,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"4d49376c6495c2840f7914868a0b1187","sha1":"e4a38125e7272765e15b0bed0acc5fa3260063d6","sha256":"dabfcbd2866d066c135dbec5fbf5719e42d01a57d33b83ee70d0001a6478f9ed","sha512":"13f7c0200ceab1e621a7ff31536a83094c96cf1e935e188914e97becb91d36725b62cabc89be83e49467711d13a636deeae24f728e5f6468e802f112c4ed1e81","ssdeep":"","tlshash":"1731a9dee49065d0c68921111ce43215ad5795cf73a34584f4eacd030d507847f576cb","first_seen":"2026-07-22T10:34:21.353428Z","last_seen":"2026-08-13T18:58:52.886199Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T18:58:24.145Z","timestamp":1786647504145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1oPLPU1wI%2BDU1pECTO0KgsMMz0syhay08SVcHjcTh4KrMt92QmJkhMIaqsr57iDVuCurJOoO8ABjfVPnGM4t3m%2Fuq%2BWY%2B%2FMrYLrOY3y%2Bmhyrd%2BMmyAt62Qab8pURZMFHyN8Btb%2BvFQb5SWpmRGAmV0s\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2a9f3752df5b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42240,"size_decoded":11936,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (811), with CRLF, LF line terminators","md5":"8b9874ca93c44264a26e7b16a98caaa1","sha1":"773520e3ba974ef5ac4f2c869c996586f5ca926b","sha256":"fa1b96e3bd1a54c6e794bf37eb5cc8c745ca3d67e613e4e773aaa1aaf25c1524","sha512":"facaf837f3130ca5eb4ae7af6f8e84108c7ba75c8f0ae3a39304876aeaf998713d9f66d9ae743f34a7ab0e63187b6bed5db8e035613d44829c5db44634ef615d","ssdeep":"768:kY25zVtv4TOUZ4/FZwPLEbA/uRB1WScLpJT6lHYyVHDcxhxRJj6E+/o4NOpGrHCK:SOMTfw8b2K","tlshash":"de13c603a4d4132b05b387d6e8651b66ff24401bca4d95787eacd3a63fa6d5900bfacc","first_seen":"2026-08-13T18:03:36.058025Z","last_seen":"2026-08-13T18:58:52.887636Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":10,"connect":28,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.615Z","timestamp":1786647504615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casinos-netherlands.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:11:42 GMT\r\nexpires: Thu, 12 Aug 2027 13:11:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107202\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-20T05:31:25.332913Z","times_seen":27876,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":45,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.618Z","timestamp":1786647504618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casinos-netherlands.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 12 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107272\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-20T05:30:31.582299Z","times_seen":262019,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":23,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.620Z","timestamp":1786647504620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casinos-netherlands.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:11:42 GMT\r\nexpires: Thu, 12 Aug 2027 13:11:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107202\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-20T05:31:25.332913Z","times_seen":27876,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":51,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/slots/big-bass-splash.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.633Z","timestamp":1786647504633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/slots/big-bass-splash.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-6366f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbqDSk%2F9xJwVOE3vBv%2F8Fsf%2FUc5d4jVrUjMZ0QJDED6NwGJ3gziBab2zbGNCH2XfigmmFOxfrsXdc%2F1C1JjLpi1tCADeza0i9Z3YCPMiTTNctOsJ6oUtaWA6WDcOiVA4eeOF4Pzbkn2poikRLk7%2FnbxD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f377ee1bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 407151\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407151,"size_decoded":407918,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced","md5":"11a5feb2145aae8b1a16f60178d7848d","sha1":"7f213fc52b2a6647999cea6235dcbf8c83f3757e","sha256":"91f83a8782b602349e320de2f72d1cc0bf0765e3dddd4a4907faf05dfd91d79a","sha512":"e86dc63da0807769d627f3e072e696f2ad5cf93cc0ec269db3008aaae8f03db4c06f1027e21427944031a82af15b657094da19dca5eb553b04db7e18a14b3a6a","ssdeep":"12288:FZi+PG/io2BBDxEczGRcBFEX9rwFenrdwX3BWgHjXiN8dW:F8+Peio2BBDccBidrdwX3NpdW","tlshash":"948423cffafa183ca6ed9505067f3dc043b9224271e582c69a8d2b3f71115c26a2e755","first_seen":"2026-03-24T09:58:34.130995Z","last_seen":"2026-08-13T18:58:52.889188Z","times_seen":6,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@500;600;700\u0026family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.466Z","timestamp":1786647504466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@500;600;700\u0026family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 13 Aug 2026 18:58:24 GMT\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13972,"size_decoded":1563,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a17342b5a6474631b51dc4c553ecc520","sha1":"635eacf2ca351b0fd93d96a532fbde23daf3f5a9","sha256":"7b64aaf1034a37e3ac4bbe3fb711d25767dfc0570a27eee81d3d1bab3fee36a6","sha512":"a8475a221b7311d55c947aa5c04857441e87fc2ee11172fab27d54bc9579de290f6f4b33424dc67188af8fe19607dcf85de3d901c3e11a6f33b868858ba4bb8e","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGqC4GRZfRG4ZYiG/W:vXuM0p2+/gRt","tlshash":"9652cb92002ba500ab971dc233cf7e3abe8e50896085d5796ffd0cc99cded62436476d","first_seen":"2025-12-06T09:33:49.054639Z","last_seen":"2026-08-19T04:47:40.29674Z","times_seen":286,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.616Z","timestamp":1786647504616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casinos-netherlands.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 12 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107272\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-20T05:30:31.582299Z","times_seen":262019,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":30,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/slots/jammin-jars.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.627Z","timestamp":1786647504627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/slots/jammin-jars.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-74b4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kP1D5D2pi5n3XUsmvdZqd1Si32RPt0Nhap3BjJ2Yv0qJUMJc3skbtc6Yd4OTdyTb2T7ZMFPVOnZIUwchQpsn84TM0ijitREnUj%2B0hftu8s2kw5YLeDjS6FrSAj60wpefyC5baP7dqP3j84OlkW%2BsAJaX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f377ee16b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29876\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29876,"size_decoded":30635,"mime_type":"image/png","magic":"PNG image data, 300 x 216, 8-bit colormap, non-interlaced","md5":"79c3bb50dd845f7628c5ac033d386eac","sha1":"9629034defbdeee72a22727afc14deb86189df75","sha256":"0631a9e76c11b18fd82bc688d3ce4a31313963b68c8f5538e16c53a82c050429","sha512":"1f6bc99e28e383ad642e625519427eeeabd19eca90b8209a615c6b40fdb5955baccb7bfb5eb7839af8d8b12f49a0d921ba7e5ab712989885b1d9791236a7c412","ssdeep":"768:5tNUr6bGtMw7CaSG6qePIIBWhoUat0WEBB24hD7wrxG:8o0X7vakotjSBDt04","tlshash":"d1d2f1df5172c12d2f62f939f9299092e622c0a641e4d53fa12cb47b5b4ad0427f9271","first_seen":"2026-03-24T10:00:20.877048Z","last_seen":"2026-08-13T18:58:52.890908Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/slots/starlight-princess.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.630Z","timestamp":1786647504630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/slots/starlight-princess.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-3115f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aWi3NZ75y5o%2Fs0SPA2YuFRF1hsx1ILZk1MCQP8CwUj642lxyS8s2wq2zChY65NZBlpW6iwcgUJmtj1UCUauW7YOuyk40hU%2BUhobzBa3DWFRfd%2F%2FaE11TtDhH1C70pG6SglMkafC1dAicxv58DPzuYKk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f377ee18b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 201055\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201055,"size_decoded":201820,"mime_type":"image/png","magic":"PNG image data, 320 x 247, 8-bit/color RGBA, non-interlaced","md5":"12692c0c4b465a6a873630f74d0ca935","sha1":"3e726533f92dbd780dafd04501e5ac26fa7eacb6","sha256":"fa60d934fb5d6f4708966cd4ce3a8f7e4e95e147748c10c4fa88277a1985c5d4","sha512":"e372e17631ca2a8e0fe8508f250681d8e61196526e52c5538ab702e7ee80456d33e93a6a8273d49dd7d8a2126b22aca03b25861e01477488d0993fbbc8c21107","ssdeep":"3072:vtMsAkKMnG7hJGyhZ9QAF5V1f8qQfCNKOu0EV0cCm3psso/3Vsmgter4Ue8YqEko:zfcx9R5ZNXuqopgVsmtr4cdh4","tlshash":"6614237047bec5117c19d8a9b87dee81073ada0024d6ab8c8b60ac644d3f27dd2db57b","first_seen":"2023-08-08T05:43:57Z","last_seen":"2026-08-13T18:58:52.891494Z","times_seen":5,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/slots/jurassic-park.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.631Z","timestamp":1786647504631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/slots/jurassic-park.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-6e59a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tkg1chLweMp%2FeZJEI9STBdcuUdMzpRvy%2F4X%2B92a2VTrcAWIhUDtXPr7CPRAERYLHD6Woi%2FtBT%2BbXlXTZHFnriiGzegizzzlMeO1wo3IAQwxQkil9nC%2BRAYtVA8EkTW85DcAbmbbPwobNHJmEZwDcJArz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f377ee19b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 451994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":451994,"size_decoded":452763,"mime_type":"image/png","magic":"PNG image data, 1024 x 890, 8-bit colormap, non-interlaced","md5":"4c04e19253b63e0ce3ffaf136c36c6c7","sha1":"96e31e46762af8876ad4c697780a8f15302f9e32","sha256":"d3f3ccd3bab0d7379116d6e8beb534550eb994ddb9123c8e577c041b825f4274","sha512":"4de3c25a468028a961a7c04a4399e08db48fdaab1c7f61a14de2f611ed738b72f11f6b390d838596043072c60d91eef7a79a3fa921ee59cd50a3e0d0f1a717b7","ssdeep":"12288:ruikKtrSOLkM7O1BESkSMiocNpGb2qCM/AkCT:ruPcuOLkb4wphVkCT","tlshash":"6da42324e9110834c79f7899d4be87b2c0adf85d927cd12f54a660f7ddfc89a6488e2c","first_seen":"2026-05-31T00:42:52.002413Z","last_seen":"2026-08-13T18:58:52.892144Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/slots/san-quentin.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.632Z","timestamp":1786647504632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/slots/san-quentin.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-141a5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MpQrslI4F5LC0farODkc08nBt9tMlBWuqpIe6kZaFaGs1VxeFFy67A25YWIGzn6Xx8JaromzzL%2Fao2rAu252TP0q%2FghICIitiZ7YVy3AeyRFRt%2FtMGDH2%2F5jaELzjmx2LYD9gg69I1i8K4Xv7WfV1868\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f377ee1ab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 82341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82341,"size_decoded":83105,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"3d9ab6b400f1a0e0a51e6a9f79c037c1","sha1":"4a02c4cd23b2814652b1208cf6ac2847ca793aac","sha256":"6eabf4725704343a08cd9290228ff6525275a4288920f100e2ac2fa81815d556","sha512":"d8594df68bc38a6326376330565d76a4cb97bd0d0230dd07edb7e5c0a62a21cd533007b5bd6119b4dba139d91895585f346fed6b216af98e87c74ac55291d0c6","ssdeep":"1536:PhGNwrYxg1SgSCpTJk5IFBFND+l2XmHUsDzWSu4SY6ZKjRlVogk:4N0Yx4nzvLFNKwWWSVSTKPI","tlshash":"94830250116de5a88cee30b3d1d8bc66904071fee335a5bf74f35c825950a68b37a2f9","first_seen":"2026-03-24T10:00:20.849133Z","last_seen":"2026-08-13T18:58:52.892879Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/slots/holmes-and-the-stolen-stones.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.634Z","timestamp":1786647504634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/slots/holmes-and-the-stolen-stones.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-ba5d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUwue5lbBxnpUzAlfanBEGMKuZS45C4v0QJpdTz7IZnckASylzserpxfqCMGEcwvZIFXNN%2FZPmNU%2Bang%2F%2BUrmIdVsYN92ncBk2WF%2BDZVbCPLuukWCGru2flpa3HjSMn2jBjA6WMAcAkRsolmmbpPXkl7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f377fe1cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47709\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47709,"size_decoded":48474,"mime_type":"image/png","magic":"PNG image data, 750 x 540, 8-bit colormap, non-interlaced","md5":"58e8f9fc323579606bff682db4b9b5c3","sha1":"42caa097e0fe4c78d68548eaef28cb7491f6a2ac","sha256":"c6f81556a2294b2705d67c128f3d7d8191767c1fe69c787bfca95b02357740ae","sha512":"9b6d2a0a3625ac18152841af2735531abbd1b01815a358e984ecbe230d1ac9a92b1171af6fc11321501161a3a0ce761e2d8e23e6db9d74cc3c6d5ab62414175d","ssdeep":"768:kN6g7scbLJJ5wNDPJoY9bOkYFCOCGwfCE6yGgV6mFrK9vNYbRLvqBZnKGvqDD:RksqgPpKkWoGZXg2YVDqBZnKGvqDD","tlshash":"6723027c8c89e843ed639a31242651794c6c855a007f32d91d373f3ae83e5bac90f789","first_seen":"2026-08-13T18:03:36.063877Z","last_seen":"2026-08-13T18:58:52.893728Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casinos-netherlands.com/assets/slots/9-pots-of-gold.png","fqdn":"rainbet-casinos-netherlands.com","domain":"rainbet-casinos-netherlands.com","tld":"com"},"ip":{"addr":"104.21.88.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casinos-netherlands.com/","date":"2026-08-13T18:58:24.637Z","timestamp":1786647504637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casinos-netherlands.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 16:48:53 GMT","end":"Sat, 24 Oct 2026 16:48:52 GMT"},"fingerprint":{"sha1":"EA:0A:7F:6B:F7:B2:CE:84:98:B4:09:70:AE:38:26:3A:70:80:5E:05","sha256":"6F:5A:4E:E4:82:C2:43:6E:6A:97:9D:34:04:B2:21:E3:E6:B3:CD:C4:22:79:74:38:40:33:EE:F9:CA:1B:42:97"}}},"request":{"raw":"GET /assets/slots/9-pots-of-gold.png HTTP/1.1\r\nHost: rainbet-casinos-netherlands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casinos-netherlands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:58:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 15 Apr 2026 08:18:13 GMT\r\npriority: u=5,i\r\netag: \"69df49c5-64ec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDJb392PLSVf%2BMszIkzcBiBltatNkyVwP%2FBaL%2FDXnENCZbZb3VML1cI0v80YAa6ILXMuXSgkzOCf11e%2FdxH9cN2E%2FNBJ2ehVcsRqeTSmDTRYkLBl%2FOybZPLo3Vcqeq7ANumHfOTAUopMQUTKXJJFTQGw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9f377fe1fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25836,"size_decoded":26603,"mime_type":"image/png","magic":"PNG image data, 438 x 300, 8-bit colormap, non-interlaced","md5":"b6c6c0ca8c830c787c065257923f9a50","sha1":"7de246452d2dd138a48d4f40610ab5482db37b19","sha256":"3e49cab0f88fd7b0d90f9449214e927c51d25b2742f8d1d96254744127d633dd","sha512":"6f2cac5abee354a741ae7cd9c2f38822cee2a325b29955ce3680a2b3bb443415f751c7bdc149d38e7292210ed57d21fb7d29b4faa3c23016e25c164f04e210c0","ssdeep":"768:Tbs4DJE+80d3uTMHjjjiO7sZwa36d3d/1Z0:Tbs4DyOdeTm2IsL81+","tlshash":"7fc2e10d39738aa7e65eb26ffa3251e04fbde55c5c1eac89c03916c6051933684f505b","first_seen":"2026-08-13T18:03:36.072834Z","last_seen":"2026-08-13T18:58:52.894449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-casinos-netherlands.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}