{"report_id":"22b04e9b-9379-4699-aca8-3cc745435f4c","version":0,"status":"done","tags":[],"date":"2026-08-11T11:05:52Z","url":{"schema":"http","addr":"portugalrainbet.com/","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"portugalrainbet.com/","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"title":"Rainbet Casino Portugal | Jogos Online e Criptomoedas na Nossa Plataforma","dom":{"size":82241,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10459)","md5":"37b41a95386103b9354f77ad53527f59","sha1":"b67ee4d5749340e3107db6b355d7ef65ac6a1416","sha256":"f89206767f5e1d0d7466b262c4ee3388446c5dd043ee4969a8b108c591ddd40e","sha512":"b06b0d644fcc17bb17089d478f8322d85389a58d21a02432285593bc59266a3de5f2d17cb11892cdd66bce956d479858422ddac3eb52c3a320f7da98635b1c5c","ssdeep":"768:UJ/96BFUNjfXuc8wdxS19a6W6juuJBIr4ruzDTYXvlfiSdVIgNgf3BvBsM4Axvny:skbUNjfX8qkDuzDTYXZTK/sIpbKNj9z","tlshash":"9583fb2191f51a370173338427a15f2f6ec95907d8aa8585b6aecfa50fd6fc68c33a0c","dom_hash":"domhash29c183420e108158b0bbe73a4a4de945","first_seen":"2026-08-11T11:05:56.26067Z","last_seen":"2026-08-11T11:05:56.26067Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"portugalrainbet.com/","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T11:05:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"portugalrainbet.com","ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-07","domain_rank":0,"first_seen":"2026-08-11T11:05:53.004515Z","last_seen":"2026-08-11T11:05:53.004515Z","alert_count":33,"request_count":33,"received_data":653580,"sent_data":17416,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"portugalrainbet.com/assets/BonusWheelSection.astro_astro_type_script_index_0_lang.BCV-x-s8.js","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86ea96acd6e11a9623a3f8c8f20f7efd","sha1":"08b206f70c5612115e174601bf5352ae46587993","sha256":"7afa432588ba3a8362f858f5dbb685c0d0b4d1d612aa99cd7194008efeb511c2","sha512":"4cbde8b68e9690c6e14493a06b0e7ca04a859442611942a207210906a299a051d527008c07fe51143312ae575e6b82c4a5358b18d181f8aa8f54e47b0b1ba4d7","ssdeep":"96:x+bvqVNvz2YWEtVBIpT5rBUiMGBwXbRx+7/7xsMeaSSyXOHkf3AG+EM86P:x+bvqVNvzCEtVBIpT5rBUiMAKRx8DuY3","tlshash":"8a91a6a9329424b351ef07b7c6eb535574392019bc0a8404722864973ca6ddba3b8eea","size":4211,"data":"","first_seen":"2026-07-22T09:59:51.011905Z","last_seen":"2026-08-12T01:47:39.564134Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"portugalrainbet.com/assets/gabarito-latin-700-normal.BAFSd0WX.woff2","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.441Z","timestamp":1786446325441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/gabarito-latin-700-normal.BAFSd0WX.woff2 HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3fd180d27620932ba10d5a5ed237779e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pWsjug7ccyQhMTffrrkVIKV8SQJGEx3PIOHZib%2B6uaXfKkKbV1Z14IJq3FGZlSbsnlktbORL9uXSUN%2F4Gls3WqAwjHFlpiPpYe8n9DwxgqcS%2BOwLsa3PoRAf5ek0sP9H1gf%2B8An\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a296c3ddfea37130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19940\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19940,"size_decoded":20608,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19940, version 1.0","md5":"03cbea7bfba433e429912bd7631e496b","sha1":"996358f83db50d8611a44cfa6ca884ca0bb2d4a3","sha256":"1efc5d2cf09e94c43d9597559d1c6b9eb0def0ab31732c1e0eec83dfaa648978","sha512":"dca5bd744ca4c115ec56da478e5d3354ab4a3ecf44d9a7794b735091165f905bac7a6c82c3823307ca5c06ed2c1a051676526ab0bc7f662496afdb97a8984f84","ssdeep":"384:nazESoXyOBb4CVsoxXlHWmcPSh3EeE/fMAOhCrAC2y6EgEgb54kg:aOBLVsox12VqhC/0A9V1gEgblg","tlshash":"4c92c003cad238adc6194a74a16913f62eb61a5184ca37346da7d62ac1c23730f2f366","first_seen":"2025-06-27T05:56:18.422185Z","last_seen":"2026-08-12T01:47:39.547611Z","times_seen":23,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/crash-04.BCrdiJTL.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.508Z","timestamp":1786446325508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/crash-04.BCrdiJTL.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"63bf27fa5478c8a98eba926e8c2ac718\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ninZV7EC4nW%2FH7M9etCR8as7fiBqwCxuOyd41aitRWN1QXngaHRYW9Fly2MmD1qQwqJ7LCDf5BMo2RP%2F%2F1x5EBRPsUl8lkfKeadx14fUH2dWteb68CXFl7UWHBry8VlSMRAOzKEl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de6eb07130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13834,"size_decoded":14497,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"437bc1601ff5acfb2a22d840ca4cc920","sha1":"bec6cad8e299f53d9d5aa19c2c045d7ba5e18a97","sha256":"2e767ac73764ba3d8310137647e7112107d8b2f2b8d8374365d1308282dc8ce0","sha512":"9c8ef03c2dc73ad4b725e0e62021836f7965ba6662ced69b1e5ec0d9ce94ce9d182f432f40ece1582f47a86793ac933ad35cfceb17b0160345c9263a36a97ebf","ssdeep":"384:OZ7sAx+zXMJqsYb2ciNdj2KA4/YeYCKmCWMqrs8:OZ50zMAsYbnWAn49YCKmCWDD","tlshash":"7152e037435aeadf8d1f8b32a7750ec9c87534bdaa3b1e21e6bf40e7253841c6214681","first_seen":"2026-08-11T11:05:56.265769Z","last_seen":"2026-08-12T01:47:39.566081Z","times_seen":5,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/jackpot-06.B-i8pvrh.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.522Z","timestamp":1786446325522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/jackpot-06.B-i8pvrh.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3b9258e2ba1babac05ae2a6a5fa127cf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVBkcMN1fPKinUWCeThu27ZdZ48AkWuzh%2BR0ajCTIlv6zdVoHYZhvvUwxko9NteUX6XTUeNDCFal8mITQHzdldmhPTpk3oAVBf0ww5V9kxO9%2BXUa220%2B0ykeI7%2FfFVvGGAXm%2FeYR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de7ebc7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16880,"size_decoded":17547,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d006bbead822759ed36e4df8661d52f9","sha1":"8aa8b57182d83fc3a5957d7e32ccdadb78ed3814","sha256":"dc1e34aaadd239dd164fbeb60384b07c74da298b2e9a7efa415b8f6c324061c0","sha512":"a5030d0bddcc9ab6c73e1edf3a6fdee9259f5cde7221085c6da71214fd866180dbb50944e339d2c905f8d1e1d7dbe77639024ac347b2b5cee3bd32e88eae0900","ssdeep":"384:O1UzXgUdVUY1wCSHzx9HiHMC8NjCaMGDOlaT0JdOMeoxMQLBuQor:D0MVUjTx9CHMCECaMGDOlaIT9zEQG","tlshash":"0072d01449251793fffde4eea6e04e59a3148ad73345cf6c29ca921622b9c11c0c6f76","first_seen":"2026-08-11T11:05:56.268726Z","last_seen":"2026-08-12T01:47:39.542242Z","times_seen":5,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/jackpot-07.CHGAOl7E.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.523Z","timestamp":1786446325523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/jackpot-07.CHGAOl7E.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b8889e6d569665b19731a24d719ed9da\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=StKlXYlaesnub8Y9w5joFSFvK%2FxiKwIgAuA9fKRMLLYgp%2FcT0juUMmLGyduwmrIBRWB3pMDuoG5ggCJrNNb84GLcEeCp%2FarpXhEij4KXqv%2BSEruBBsFCSMKY5Uck4tDs6bbgmzOV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de8ebd7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26264,"size_decoded":26929,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c27757f26828712720cc966d2b56618","sha1":"3d23f38a7c5865c94c3834c26a5b4c16ff5d17b9","sha256":"63460e97f4cd29600366576544ceaf638d9e8073ce808aa387f8d84bf0e0e210","sha512":"3a440736d0c663e8c2b599dd2a28483dd2eb121395c81d1dd323591a730f9ea1ac81983d9eb31ddfa867b13a137ea67243a2e20ef2ccc273661a020348f04a00","ssdeep":"768:s/lx9Jn1lqLplkzCwOeD863mC0z9PG7qHgoOfDBa/:s/7Xnq+C724B9O6pOLBa/","tlshash":"75c2e1f182d465e3fd2cd55587237c866b1fb8c861d2f4bb061dc3d9e9518a3c5c8528","first_seen":"2026-07-22T09:59:50.976118Z","last_seen":"2026-08-12T01:47:39.538844Z","times_seen":7,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/img/arrow-spin.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.373Z","timestamp":1786446325373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /img/arrow-spin.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"21c175329b9df5344f259cebdbce8707\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NoSFKEkVOkN7VrcSIWI7KToIEM2f1OMhlxOLHJQtIKPU%2FEti4752E9WafBp%2BRFsI22JidhsB%2BW26WGqY2X%2Fbe%2BUQ9Tcj6%2BfhyHJs5HTVOHZ028mY1OynEj7vBR2D0MfIgHJhwzGX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296c3dd9e9c7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9448\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9448,"size_decoded":10116,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26c03dd7a573a837b72689cddef153fd","sha1":"776c8244687560c3ebc09f44c89843dcfca91804","sha256":"c0d4fdd0b4f52f0592d1382f41d8195ea88edf5cf4c58d3c601b14c05ff1ce79","sha512":"4a1d06eac5385c7c8a505738b69f04099df29bfa7b8c15f0bcacbe8042a89d1db128b1bba16449acc79c5f2a68bd74ca5d8bbe4c8c3e8b5947e17625d3a40819","ssdeep":"192:UdXYqVz8Vbl0XLb25KvneIJcqzIKFtA9wFKHm3t2hQN6KNfeQZ1:UJYqVz8VhC6Q7bFOrHm38KNfV1","tlshash":"0b12cfbc30e9f14e4629f932719a7fe54dfc022de0e46d020b01658fee9566a8dda245","first_seen":"2026-07-22T09:59:51.023599Z","last_seen":"2026-08-12T01:47:39.560017Z","times_seen":7,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/crash-06.DgP5nkFm.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.510Z","timestamp":1786446325510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/crash-06.DgP5nkFm.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"11fb4c130e04b99de00681fab12abe7e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11Zyro4t7H5kv6on4Fhv%2BI%2FU%2FNfFBLhtr8iKrwePOrK3bqK2tSOZc8wCzwLtSDiA8CJ4opIsVl1uUgcvaotpzepWYgpux2PV5Ok8ZlyKUvtytHtVXn8L5LeEADfn8t3b%2B%2Bfa%2F5KU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de6eb27130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13234,"size_decoded":13903,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"398108e32e37f01f56e2b0fe8233f7d1","sha1":"4230332a198f2b21aeee46ab8626c50844c39ea2","sha256":"0914a76fee159bb0ec35356c0494afd1e3cddd24a63cb71c6228618b98dbc6b0","sha512":"8c7d5ac25cc99e315843e040e71d86562d7e0305fe9c552b4c280e549d6d4beaac3def0fd98373e9682f0baa0259e9fd07a388894e9e9c7649fded143137b3f8","ssdeep":"384:kstEvuFz6zsGNKq10Jp1DsfAJ5BUZfVTHOQp:kstj8Haf10AJ+VTt","tlshash":"d652bfb71a99d343f3c09f5088b1ceedf52460bd89adac464c5e20f9c144b3fa45817a","first_seen":"2026-08-11T11:05:56.273751Z","last_seen":"2026-08-12T01:47:39.544741Z","times_seen":5,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/live-02.CVjVe3GU.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.526Z","timestamp":1786446325526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/live-02.CVjVe3GU.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"19a1d01bbfd267dde3328834d361f4ac\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMDjE72H%2F95SU5kjje8P%2BkSHoDy33%2Bay4ZL5Yl8tSiZY41dULGMWIjkMrNqFBThLKyh8z88VO9E0B3GcX%2F%2FQpEglfpmfBu9OGfWqWCaqXbG%2Fx2ZXFdFOIIp0iNvN8w41scJNJYD6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de8ebf7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22990,"size_decoded":23659,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"65f23a3f4a80087126af355c9e92551b","sha1":"c6e7e6863c14cfd867bd97e73885bd4911099396","sha256":"8e55dd7030b062156c210e983dee29da04eb912a631116d6f27d255f9a98f742","sha512":"4ef5e52c311880280018befc3eb5f56c80c7a8c71e3fed60ad4bf20f6b51528240392e1368afefe6708caff654b22e55851c14df6912f5338f96c7cb0bfac722","ssdeep":"384:7B+JvesrTdpPgaspr8fpr+yENIT7dwI2sSPJciPpPzTpKfOXxNnt:9gveSTdCaspr8fpCyFRkxcihki/t","tlshash":"45a2d0c68312ede67b8edcc6d6854d6614d19088d2d3cd8daa6b0894f3f68c0a33ac70","first_seen":"2026-08-11T11:05:56.275346Z","last_seen":"2026-08-12T01:47:39.536963Z","times_seen":5,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T11:05:24.636Z","timestamp":1786446324636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\npriority: u=0,i\r\ncontent-type: text/html\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NVkeMVp4SR2wVQYfjo6DEqXxZciou6HaiWbiCdTmQe9QKFq0eaQgd9cR1IDd1NWzRVl%2FDYvBJG86LVPDWFpV3HhK2AXvFhmsvWSDt4Cjc60VysYtt3XAJHZjvatii4uzCxXzkCEl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296c3d92e5c7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":82120,"size_decoded":16901,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10459)","md5":"e0f75ed8b91ab176f5ed8fef48610b94","sha1":"57ad173cc17f6c309e87fccc2270ae26130ba217","sha256":"67407658ac481c086614cdeb71f6519e59678b15ecd2e3ffa083c01c8e442fac","sha512":"a21a5257be90736362e087f0e63e0591286993d750fef16a82b9db7293a56bdfe56946591ab05ea5819c4bbfa5d2df1ab961095c00a6dd31d762c5cb7ba30a5d","ssdeep":"768:4Jl96BFUNjfuuc8wdxS19a6F+T0GYXfJBIr4ruzDTYXvlfiSdVIgNgf3BvBsM4Az:gubUNjfujERDuzDTYXZTK/sIKbKNj9z","tlshash":"0283fa2151f51a370173338527a16f2f6ec95907e86a8545b6aecfa50fe6fc68c33a0c","first_seen":"2026-08-11T11:05:56.277024Z","last_seen":"2026-08-11T11:05:56.277024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":8,"connect":17,"send":0,"wait":475,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/apple-touch-icon.png","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.621Z","timestamp":1786446325621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Wn6tE7nht4YsptouU0AqP1q07TuJukxblm42Fm6cbm8l6pkKWPepO%2BxnD51M44ot54ItBh5Kn4jgJq8AuaQAC83PtgG9Mu%2B1IQM7uotJXOitYIErE2GYG2eEP85HNghufY8Dirn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a296c3df1ec77130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":568,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-14T10:28:38.382898Z","times_seen":89091,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/favicon.svg","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.624Z","timestamp":1786446325624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\netag: W/\"07e64632dda0e0faaa6b806723b4f1f9\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FQg5E0QjACZnS%2Bf3u3tma7totyWexEQRmaAeGFjt9EPYs2dQARToeL5GB7dITt6%2FvJbdjeWOeHDZ7Drf6j%2F66XuU8zTfmoi6Q8lvPv0mD1urO1mbLD9DWjryVmq8GtEe3NHLw46\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296c3df2ec87130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":965,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fc4bd733af6c7b8105ec3888f2dff3b","sha1":"9449de48a2c253c377b0216086c2238a0a43eef9","sha256":"5bdcfe87f54ce0bd1590616ab5484eb032d470afb36bc48ce2fe2833e42c40ee","sha512":"4c979e4dae5ceb338302038e4bb54e8c2dc486de4a8ebb8ca566388d48adec1ee37d7b3597eb76d3819f14de74137fe58b7afced713c714143817c30f22a59ec","ssdeep":"","tlshash":"e9f0249ae65c8837c299c2acccb4c0b1236d22e3d5c5c279e5e1af3e15380c71d09bb8","first_seen":"2026-08-11T11:05:56.279623Z","last_seen":"2026-08-11T11:05:56.279623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/crash-03.bvr-qurs.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.507Z","timestamp":1786446325507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/crash-03.bvr-qurs.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e767f29329c8274af85de0ef6c41b964\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cega5XQw2lgT0FzenjGtPAWiTEfSGLJ%2FUwvBlaXp68nT0lRtvGdIUkRokRMbcUvLeqB4%2F2KSlvIHVlukcN1Ro7v%2B2w%2BqtwHnw%2FKqjvCc4vnJ%2BQUNUJUH56yjH%2B2CvKoUYQH7Fyjd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de6eaf7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11982\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11982,"size_decoded":12653,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cdfaeb94fc8edf935e34c83657cdca3b","sha1":"b46944c843ce3e547471cdb119e70169db67e04d","sha256":"52789d02a0d3b566940c693a814c9e3a0aac6b9a02cfe86c72853653ce98289d","sha512":"ef8b80990114194e3f6fde54ccdf3482bb856e133285e3580baa11079372cf55935d2b89adc411d8a7e31dd8c15b4a285b8404d4bb2c1bc5791a68f88f413dab","ssdeep":"192:jtL/1yEhnODt/RMx0arBLjIo+32oegBb0z/XUcou1II6Fc+aP4KTM3K3dVV+st9e:JhdhGRRW0IBj1+Begb0gcokII6Fc+aPe","tlshash":"f332d1468d26f6b9782e6dc8e94adb9d06971c24c11c0e61c44eb0db77c62f22839e5c","first_seen":"2026-08-11T11:05:56.281164Z","last_seen":"2026-08-12T01:47:39.550247Z","times_seen":5,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/crash-05.Bo4cy-31.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.509Z","timestamp":1786446325509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/crash-05.Bo4cy-31.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"90f751b0cce972bd2d2bbc18d5a55e66\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2u%2FFy2%2B4IeEk%2FWKY3Ah%2FusneaC2NHJVFljHm6l8GW%2Fxw9fAPCQBUPqqPRDzwhdbdryjotItHV1zkk1W5XLXfEQz9abhEODTPDsqbShetdxjzRtPsNwu6BVu1%2FZNxlqbPs3PcX7CY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de6eb17130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12496\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12496,"size_decoded":13165,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c21369852307f1dff5ca452bc2b4a59","sha1":"8320a97111b2de5300a85dd323531539eaa0ea83","sha256":"61e0667559e7fc1e58ac59145ff7fa8a3af1e52c92241d7526f37a3d650664e3","sha512":"a74153e0993487e232e3457ccd2ea5bb386b19c145065cb1b8b19626fee650bee7f928744bdc82faa544c35a2506ff828d2ebb249b9338a1829e1cb0ae3429fd","ssdeep":"192:lQoDNAjZqMC7TpQxPEQ4DNpw/CFEGeM/+CtHbFBamnUfdMVcpRw3ld9XDIl90kLm:fNAtMT+P0vVEGeMrH2mY+qmld9zzkBw","tlshash":"4942bf85d2fc350cae5b1b8c8171d01dc0ceded1ab92582c94ecf6c4dca2676a5b1ed8","first_seen":"2026-08-11T11:05:56.282823Z","last_seen":"2026-08-12T01:47:39.550869Z","times_seen":5,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/live-01.BUJIJcpO.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.525Z","timestamp":1786446325525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/live-01.BUJIJcpO.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d2c2ded89a9ac6bb9595a091391393b9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6cbepilt7uaMAc22t2BNDfwU%2BMqQgHg6LCRLqcRpwgVF6tFCpsuWmZOpW9HZCuPGiVy0ylp2D0sk69%2BPV%2Bqk5EsGDxagh4fxH3iHIwYEOsAtECxsx1P7lGytApsz6N8vOPX5iWq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de8ebe7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20916\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20916,"size_decoded":21579,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0dfe7776c6d7b20d359fe9e260b1f795","sha1":"a626090db0316195de3c95a3fc30b192731f9e3e","sha256":"0f48bef96ec9d724ed7744ba80d5d5fdba59a7a8b8e0ab75a0805866798f02f0","sha512":"e06fc562eb099e1a94518b916f2dd6b2de2e3f91d3f9cf40783ba28adc0b1d6d87be91c5b25d5fef4b08e2d663eaa098e0413f856ad0b78b5fd957a3d369955f","ssdeep":"384:GlGdAbF9c78n/CtWMADWEQmcDwabx6hnKJJQsBT2y3fCxd:qb7cw/91Qdfx8KdT2Ufm","tlshash":"7292d0fd8a6ef5e03cfc7e26578300963f230b0c5a562de68b0293a5257d5a19d4ea48","first_seen":"2026-08-11T11:05:56.284589Z","last_seen":"2026-08-12T01:47:39.553044Z","times_seen":5,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/img/wheel-spin.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.369Z","timestamp":1786446325369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /img/wheel-spin.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"084906e45a75646d820aac480fb011a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jH595Du88eLWP5Jo%2ByqVP4U8KX6CcejY8HQJdYpnanFKo8P3gSaGPOIlrd%2BqHEsAAgwnAavS6%2F60ZAYdyKry8knUc7vZ%2FvJIs%2BqU%2BHsnDPxPeDqZRntV3W1d%2FvJlsU3CVL7b2nd3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296c3dd8e9b7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67574\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67574,"size_decoded":68245,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"daf976fceff89ea38c16d99e70049420","sha1":"7519d2f234b4ac7d92974aa36f59c4800ff1ec66","sha256":"8ef9fc9e5a9ed7dc610408e6eb247dbe36a713e25eeaf76e26bb714d7ee46217","sha512":"3c49551104e869160d49532b76e203cde5e819e1e37572885400757f624b1ac297228acb047e061831a000f358bc03eb51ff8d51b0f87945eba2d90264c73f47","ssdeep":"1536:UT+si3jPtWrZyq3Ei3MXUKoLtmODEjyL8xpci105El1tejnf:UCzztoZyq3E4MkLMSWcieEl1kj","tlshash":"ee630244b0bd12ec8398b93869259b751725bb48b76188d7fe343e40487f9db6b038ad","first_seen":"2026-07-22T09:59:51.021917Z","last_seen":"2026-08-12T01:47:39.548823Z","times_seen":7,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/cta-bottom.Gf-bvOv9.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.375Z","timestamp":1786446325375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/cta-bottom.Gf-bvOv9.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d8f07afebac7266900eeb132dad27c93\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qoSJLp08R5edM9nzMigFJEd4c80qYpFWyel7S04FAtVJmxJllXTXmLz6zWPnoCu3TmTmi3jhn1GB2gOWfvXn9LVeejHO4SpcGCYiXArAsZl1eqm2qVeTDiIwNxIwKZO4Jt%2BOQQfE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296c3dd9e9d7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26744,"size_decoded":27403,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1376x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a3238948330a5638597e7a5d43255271","sha1":"f49ac8de285a5ad8ffd6d92a78f81f349af25bd6","sha256":"7e33b4956968e94ce858d2b2c4f9285d86e984eb4e75a4bc0fa7197f617c0970","sha512":"f942e7414273452b8687814c9291ba7622fc22f2c7955aa64793e72f88cbbf9170e3104f5ebb5434e9a5f548a78010153de6c7ead55024419ec319bf5661fe95","ssdeep":"768:4oQwgvHca3amBqDfnNim3Kr/tkcuzHbHUFRP:4o/EAkqbnNiO8Iz7HeP","tlshash":"6ac2e1e9a9c6b1b1f7e80b38fd8f432b5216c6391c3b69e1cb53a160f613d50c9b4169","first_seen":"2026-07-22T09:59:51.013595Z","last_seen":"2026-08-12T01:47:39.542978Z","times_seen":7,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/icon-support.y1Ke-5J8.svg","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.502Z","timestamp":1786446325502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/icon-support.y1Ke-5J8.svg HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\netag: W/\"dbe43e070da782d2ddd0d438fa9d0f2e\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6IdEDu8Ln41GqW1XM6VuBKolFRwR1gNwahZqEY0BQ9zNMPiDYBhzXcw5V7nneMuRVguTsf94IPyNbvEDfTH1WAwQwxQTFg8EbnECOh9HeScH6mH%2FRC2uATUPiDWBlPLdXCyAlS1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296c3de6eab7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":941,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4524639669dccdc7e965ff7d438a341c","sha1":"02522d3e248b4d4b8d234b4ebd3ce270af2f1ac7","sha256":"4fd71ccd9722e7ec67a2f7f07e1bb70a39639c8a780dc42d11b4c6efc248f590","sha512":"989f9e980c29523f715b2a6f8453b3e5a616a04768976ea94c096ca41a461d430f51ac5c2a5ac33ebfeb7866049e1d1f87fa535909ff76f7160f8561927a7207","ssdeep":"","tlshash":"f2f0f618974c483cea22425cf7187068603ff0da82082125d846e539f0a96ce99371dd","first_seen":"2026-07-22T09:59:50.996089Z","last_seen":"2026-08-12T01:47:39.543432Z","times_seen":7,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/jackpot-04.C7fTUO57.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.519Z","timestamp":1786446325519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/jackpot-04.C7fTUO57.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"96ea495f4d5be4e1d327d2e66999a192\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mlAGgGmm73BdTos%2BpKJdPRmrFGdet%2F15l30oy34KmnBExmed8s%2FuqwMb7ZTTo9zqtTpfdVJ3l%2Bd2%2FajW7vT9r94iHGK3yXbtHPbfgkGK2zfYRQl0kJizGKeh7AlZkY45O1kBBOHw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de7eb97130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27034,"size_decoded":27701,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"56fc6cf2dd17d5a89e6cf52458700b3e","sha1":"6f636de9d629e2bbe024e00b0fb7f97fc4c97fd5","sha256":"fd85d9f9632f5b355e2beb382cff154ace8122110b4f4d4864884d705a044def","sha512":"3c3ddafc171f6ea9677ddc97922f1753a7f63cfef0a96f8e6e95a5eac8c1d78cbfd443f3f8a6ad3be9086065e1ed8ab57324333069a0615f2f87f2855735aa7b","ssdeep":"384:sO++maibwzaFyS4ebiIIpbn9lphbPeLa+tvhOab+eBK0a4p+rPhJMWVp+1ZKoESX:b3PewzaSebzCnXGrths4MAY+1dVF1","tlshash":"d4c2e019e4e2ad27b1438ff8397f88815fe788895069ff19ac3914c3a92b53d73a1700","first_seen":"2026-08-11T11:05:56.290246Z","last_seen":"2026-08-12T01:47:39.552258Z","times_seen":5,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/crash-09.D_Nul6GR.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.513Z","timestamp":1786446325513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/crash-09.D_Nul6GR.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"87f46941ed096878064508294b1f301c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dt6kqrQzwjUp5MZTXss2Sh8blqnK9fAkt5Eq7QqN6jGygbgAz%2BZ2LWPp076rvHk962lHENkPburifsV3MB2oAiw7BI55phOK%2BXrfAIvCOxcBZAMq9k7L1rWV6rX5L%2FRElrdslo5C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de7eb57130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14242\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14242,"size_decoded":14905,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13b881c21f39134dc8f523925b819c74","sha1":"fa3bd382555d8ef5c90e34b8073db9fa2810570a","sha256":"e84c635070b7f72a2cd3bfe608277a54646b8ef3d76c2d2dfacf9c999641509b","sha512":"136b16f0e113cf197d2eacab0aeae55c90a73ba08f1c2559738cc02200bd27ad5d93a4e84b6c88c7808ef73ea7e0c67fe52ae88d5f4520095a95e03ab9584a84","ssdeep":"384:RnFpMDKjnCxDgE5JESyWTHDQlfKNDTMUKOMEx3w0d7W3V:LmDKE3EDpKNnMUlf3w0Bm","tlshash":"6752d0b915220b69a4846200204f3c52ed142bff06fb8362b18b3766dbf5e705f51fea","first_seen":"2026-07-22T09:59:50.999366Z","last_seen":"2026-08-12T01:47:39.561944Z","times_seen":7,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/jackpot-02.BvoUHFD8.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.517Z","timestamp":1786446325517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/jackpot-02.BvoUHFD8.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4a80dee9149c72beb3cbc3198d20f4bc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WRWJ8W9lseIVAJy3%2FtmknJHxCCmkp5JRTFS4AXgU2mJP4ncPT8tUu3%2BNgBaG2tdY%2B9rLiPL5hs1RPcPTRI%2FEnepE%2FQlveyebPE%2BvKuTYtn%2F9HAs9PoEUHOU4p19kKqmtv%2FYydbc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de7eb77130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23892,"size_decoded":24565,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb5f2ea56256824fa7e3e757e36a8b62","sha1":"91dd1713a29f2a04723402b4182b959b02621d36","sha256":"1aea183c9c4fa2cabdce68f8f8a96a0c3c3dcf9590d28676f53e3017180e3759","sha512":"63fdae8864b74e2262016eb312b547c18dc7907674d708185e7a035af249b7a82709e1c4692723498fbf7e12f8836caa604b46f9c13d4cdbf338579ff530b000","ssdeep":"384:XhFcal1aoKPrRVvF1VwrScuMx6EJZX8XcEzmamI4lt4icN80INc+PGj5JQPIY1cs:XsapKPNV/VOScv6uXTXvIAtF0tZ2es","tlshash":"c4b2e107a08025bf069445632a2b7874a8f3737d5d2d2d39415b192f8f89fe6e1e41cf","first_seen":"2026-08-11T11:05:56.292805Z","last_seen":"2026-08-12T01:47:39.540093Z","times_seen":5,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/BonusWheelSection.astro_astro_type_script_index_0_lang.BCV-x-s8.js","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.362Z","timestamp":1786446325362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/BonusWheelSection.astro_astro_type_script_index_0_lang.BCV-x-s8.js HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\netag: W/\"f06388389a73c13647e54047c98c1fd2\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrUgkKraobSg85wX6aG1YgesidKLv4%2Br5oOJ%2B4tC2RwbrEweJScMI5fdaiD3S8eV1uZJ2lmMi%2BP8gFsl8rIzYY61DKN2a3Hjee1rjTEjepcY8eoCC1ndurePGyjHFrOsitdDyHQW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296c3dd7e997130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4211,"size_decoded":2599,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4208)","md5":"86ea96acd6e11a9623a3f8c8f20f7efd","sha1":"08b206f70c5612115e174601bf5352ae46587993","sha256":"7afa432588ba3a8362f858f5dbb685c0d0b4d1d612aa99cd7194008efeb511c2","sha512":"4cbde8b68e9690c6e14493a06b0e7ca04a859442611942a207210906a299a051d527008c07fe51143312ae575e6b82c4a5358b18d181f8aa8f54e47b0b1ba4d7","ssdeep":"96:x+bvqVNvz2YWEtVBIpT5rBUiMGBwXbRx+7/7xsMeaSSyXOHkf3AG+EM86P:x+bvqVNvzCEtVBIpT5rBUiMAKRx8DuY3","tlshash":"8a91a6a9329424b351ef07b7c6eb535574392019bc0a8404722864973ca6ddba3b8eea","first_seen":"2026-07-22T09:59:51.011905Z","last_seen":"2026-08-12T01:47:39.564134Z","times_seen":7,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/gabarito-latin-400-normal.CICpwsWH.woff2","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.439Z","timestamp":1786446325439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/gabarito-latin-400-normal.CICpwsWH.woff2 HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2341945dac2a3113243236316538b492\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJQEaF6n9FUJ165UfRp%2FYt3WX9PIZZOi4C%2F5HGJ05GxzWMsqpbHsztW%2B7e7M%2F73fb4TI2xyYHTnmbQOHcBQXVjFGl5Ac4rWhXEZHdFyE96h6O5VnDy6yKhgrWlDNoO9hHSUrVITJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a296c3ddfea27130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18116,"size_decoded":18784,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18116, version 1.0","md5":"4e627123422841539277cae46e192e9f","sha1":"5bd5b95d3ef5f0a1cca4f28c8d04d66d3017405a","sha256":"3b8ca9bc042daa5e5f793d24181ca866d7b9738e3e77c2867f4eca5d2ec50bc2","sha512":"f918e3c79ca0f6135c3110e149d6822ea433a6b81838e265032d574cabaa72a0077310268587e79365bceece18584e021dff6cfbac2acc36f0589c5cecf8bbb9","ssdeep":"384:ZA5RrqneBzXvooC2TwngZLRcfK67YenRyTPF+cgzjxu4spwNEdx5JYn:urqnUClkcCKnyBDg3xSplYn","tlshash":"3b82dfe499c916b0cd265ab648c8107bce6a92844c9245e1dd0becafcf8dbef35a1544","first_seen":"2025-06-21T20:48:26.448194Z","last_seen":"2026-08-12T01:47:39.547044Z","times_seen":65,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/gabarito-latin-600-normal.NulAu8lF.woff2","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.480Z","timestamp":1786446325480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/gabarito-latin-600-normal.NulAu8lF.woff2 HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6542970414daaeae1c19b43725a5411e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMOsUyruyVATU2X%2BH4wwKQPW96NpRMqIM0KKkkNj%2FnhAFazxvYszPd%2F5VtXklvMeZlg5LTnilM%2FCG3UClrI2ErT8MWrVMBlrASi4UI3lbxpH0hYpwTyaRM7Y6D1Y0B4kfD0RFYNr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a296c3de3ea87130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20080\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20080,"size_decoded":20748,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20080, version 1.0","md5":"f505b42944a82d60c42cdb6ebdb729fe","sha1":"63d191472a050e670b72157f38797ea4b9eec03a","sha256":"37d20573eeef888b16d7e9d457d6de7a3ca04507fb0593956dbb2a291aa55829","sha512":"56199e63b69bf3e15e24b731ef4c07278e50a5e2e9df7d636edbad3988439b97913270070ab9495501d1f2995e3631e78c5c2e65c4922086e25b9c2aeed3534b","ssdeep":"384:uD8c+u+FD5m0q9bZ4joK9O5ff/uYNy1JFjjntbvKbb5Ul7Zcn3Pt9xIf:HR9FbqBi0qGfg3fSnqZc/Pxu","tlshash":"fb92d053ac6f8fbac823803d85242166b9ae96c6369137433d7f8cb01d859b0b250b06","first_seen":"2026-04-04T13:37:09.576039Z","last_seen":"2026-08-12T01:47:39.549365Z","times_seen":10,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/icon-fast-withdrawals.C_Ft0VBI.svg","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.498Z","timestamp":1786446325498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/icon-fast-withdrawals.C_Ft0VBI.svg HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\netag: W/\"4fc364921d2f15025838cd0b85cf8d36\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nj4WpI3Lfvwfg46yyMW0xd1sCo2iPAFi7MAeALbx%2BLmgburfkThS9dz3s8oRsHoXxA%2Fp%2FP6nNchGXS0wQhypi30%2BnUHhnk%2Fj8TmdVLqWbXn9Gtip%2F7RVgiDbu6CreLhNr8cIFdpj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296c3de5ea97130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":877,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b82a9ad92b2b76f19135a264e5f36e38","sha1":"606552f5db7aa952cc797872666b3237ccdeb6a3","sha256":"27bdedb1a4b037ecee9327e8b73a38ec1f972e3ca17f8541cb3363e9dacc6f85","sha512":"4b42eb58c41bc6cc672ecb08d4e2f95f1fb0677eb75712f88891b592cf8d4faedffc5c7fc28ad1f8481c5241044da9646cae747759e95b8b564e3997a624ee36","ssdeep":"","tlshash":"11d0a789d34c4c2cd9148504fbacb32140afa2db5a5c4177cca7c935b2659af6a3b1d9","first_seen":"2026-07-22T09:59:50.970538Z","last_seen":"2026-08-12T01:47:39.53756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/crash-07.KgFMVtTB.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.511Z","timestamp":1786446325511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/crash-07.KgFMVtTB.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f6f4537a0f801d9c432c4fd2314a2a51\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2dldDyYPrFW1J%2Fio9XKOogr5xjtNBIltd%2Ba5OdVvbrjDRSzS3zluPpXpnJw314KUDGgzeeVaPNELPJTWcoJwOKJG2g9nNizlkM5o4VnUeNpgqo4hJnb9vMOy4G6%2BgfB%2FDg4VcbN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de6eb37130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18010\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18010,"size_decoded":18675,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ac6c07f74d275535d449c12bd947aff","sha1":"aa380526f7eb8e2232fc7766cfc08152633aa835","sha256":"ef76af94da9706056fbc3c7ca41d730d8322c2eaaf3f47b59ecc4c41ff5ebbfa","sha512":"ff0420558bfa29353ae7fbdd4a82c2a9e22548ad2cb5de7e8370a4c0f2d4af4263ca64c8e87f8866dbb459928ba2377a3dabef07b14775418064bd8e05de537f","ssdeep":"384:8p/cwLn3QHd+lLCsp2MI+TB3eq4UOd8Tc0nRIN0je1vjQ3th:ObL34+0splIKdE8TcSIP17Ith","tlshash":"f982e0e1429a0c84c674b3973129d3edaa7896d7b158c1da0278bf67de07e2570d730e","first_seen":"2026-07-22T09:59:50.973214Z","last_seen":"2026-08-12T01:47:39.538122Z","times_seen":7,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/crash-08.CkqNPMSl.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.512Z","timestamp":1786446325512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/crash-08.CkqNPMSl.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1739e9de9dd12840a74f0153be4b01d1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rK%2F4ChWeIwD2sXxvfV%2BN%2BwaNnKiBIMbXJZDpIF9jQjAHXPRgU5tiBZQoIIjgEk%2FCGLO6NGKvtL4mgcJ%2BGzRnRgrUnQbVByJAifhpgPJMBPx6cfoaAagoxwS%2FAaTagk37G5LFSbNN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de7eb47130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12124,"size_decoded":12793,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a3e29e3206aa27959f0bd1f5d649913","sha1":"37dcda6b17409247176de9a8358265ecc337936b","sha256":"70b7bbb556c6b634c5adc80366ca577550094513f8ad59e6f9c276d3bd51396f","sha512":"0651c87be47ef0d87ce927a01281688520f0e33db4e34a9f0b5447f4f537880878ff8c02a79eba3c0c44bae2f54f4aa59ec83ec7a43a9469b46f36bc57e0a2f1","ssdeep":"192:SQxHk4JNwECdX+KP5jtpCjBXkke9CtDzSCIFRb+ujNn2kw:SKx0ECdX+KPpb+B1e9CtDzbK+ujN4","tlshash":"ea42afd47dea82534d25bdfca21634ebb4a63e9f171c6c3fb83594aa2d8a0d10996101","first_seen":"2026-07-22T09:59:50.997693Z","last_seen":"2026-08-12T01:47:39.551718Z","times_seen":7,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/jackpot-01.Dpi-0jhg.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.514Z","timestamp":1786446325514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/jackpot-01.Dpi-0jhg.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"06a6db520cbca09a668c490c5eda234b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Di1IIwJ7Hj86tHwDaqCoXm8Cn1oD7YI%2FzY2S3fR4Anqt4qEjEAHlsyizBTVsRRCg5XbtqEq9kc3GscZoDSjcZkDeCPZIe%2F4O4Csn%2FL1iNpkUDXSVijwDOzNlkREwqq7ClBbd%2BoKQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de7eb67130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14088,"size_decoded":14753,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b6b3b898e97558fc8944d960d851f99","sha1":"f0b39ab634664a534920c7fbdadc202fd5bc37e5","sha256":"a3e1fd7fe7a0e9816182b100ac043901a516af07c1bb3755e8358c6b24375645","sha512":"bef4cae468df6cecb346221da77db9045e9e4fb1ff58b04f5b05c92a175b5a8a1e484df7cc8d5a463e739e0b5abd784f1bf9209d93f79a0a1a1888e5cd54af4a","ssdeep":"384:mk1i7+gUsKv1Y+M1pd/s7g3kdCT+VOCDrkrMb8l:mk1bgUsKvm11pd/sM0U+VNkrWy","tlshash":"2752cfd5de836a59febf36ab280494440f9d3ce7031b8213ca019edfed742b451da998","first_seen":"2026-08-11T11:05:56.29891Z","last_seen":"2026-08-12T01:47:39.545494Z","times_seen":5,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/jackpot-05.CufJ7qZP.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.520Z","timestamp":1786446325520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/jackpot-05.CufJ7qZP.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"042e8a1cc9c968bab2594587cbf81c22\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5OA6SV8n%2B4VyUlD7N8GhOUOnRrjz3FikQuu%2B9%2FEXjdkTTkVQuHbAqmclebUPrakuxT3s4%2FiCHGxbjyjaT7FC1cb2t08nIxHQmqP5dd3vJ0xH5It1wy6hwR5N4CqCCOV1x0a2qe1H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de7eba7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25118,"size_decoded":25783,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ada3144cd8956aa1e4aedaa3991bd72","sha1":"c817fa97412755467d74774618c26f0a73e8fde1","sha256":"d91a235eee928f508e7b9736bcb31e21f8f0aff894ec1bbe10bec46f347648e3","sha512":"d012967d15593d553cbb80521f924a2ea8f2448d93e9f8d457445a67970bee9700b928dab38d7812df77c2676ad7547b13080b0d02d85f37b076471357024133","ssdeep":"384:pKbJs9jqJsinl9QH372nSHGd1u7kWhQVeCGGeaQMpQz0voY:U69jqminHs6nSHD7kdebGeaNpQz0voY","tlshash":"e2b2f1fbb3daed19975d110b5692c6222c0cb642b89057c3dcdb6c5c44a408f36afa71","first_seen":"2026-08-11T11:05:56.300605Z","last_seen":"2026-08-12T01:47:39.56287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/icon-games.BaqA6Lsi.svg","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.501Z","timestamp":1786446325501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/icon-games.BaqA6Lsi.svg HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\netag: W/\"eff965211f7ed99f2cf77aec08182682\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWZvwq2dM1sWogC2egPFhSxX8Z%2FR1pldjy6cjVFXpgPJEct2I11dDDvS567xsvpOsczFxbgSQdl%2BR1Cd3fDdIfqclb67ckJfrEBeBCiCLF6eJqO07aeGEcDmW4f3YRHPypvtIXfp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296c3de5eaa7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":881,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5696f75f6e9374a0cdbf68939789a8fe","sha1":"39a6622fec2e302b07b8a283411d5aaa9393d6d8","sha256":"af8166e5b4d319fece81e3f5493f20f676afe01ae284697e763cf7859ca4ac5b","sha512":"38496189b7960e107bb35f21f77537a1872734ee7925336e3feafea5a30978cd5adae1e961b93ee480bf2ac77ccc28a65020c5a1b0704bafccc11b2aa93f031d","ssdeep":"","tlshash":"dae09a14e118a82c8910800c6b2bb0a5302ff0cec71d0364b886cd3bf96d2db38271ea","first_seen":"2026-07-22T09:59:51.015238Z","last_seen":"2026-08-12T01:47:39.536378Z","times_seen":7,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/crash-01.CFvZaaXW.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.504Z","timestamp":1786446325504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/crash-01.CFvZaaXW.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1c46e3bed87c5a30c59d8eb27c5e795d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaSVmHa4p3QsG7u9A%2FlURhfJS7yvVZnaNpNIUzLP9iF0PmiQhGWoY3eGAllh%2BOjTHd%2Bro9sG5Y1nn4im71GmcTXpyKjdPPC4Tt78qRd77Rse3rLgT4HLBWyJpMe0nJHLpwrU38m5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de6eac7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15848,"size_decoded":16511,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d93669a88a94090faec61159bbd5dc10","sha1":"ca83e037d6610303c1d6e60eefefee6fd6623af3","sha256":"7c6c58373e1f32e0639e5e2c36b07dd5a4f805122332038d44b6ffa15aeef183","sha512":"e09c9d13354687ddd99780ff2d87ef5235f1106d0c858f1389c603851713069e739e576347236f42c665e61203f0004c4e980d17ac22950deefef711d94c8ec6","ssdeep":"384:T9gzGUrEuHabap5xmDnzn6W7t3iSqykhQf+WD+Sb:T9gxpaboxmrr6wt3itNhQftb","tlshash":"f762c09146f776e58222824de33ce3296efb3b892d57c709984f1c761680f16d11a3a8","first_seen":"2026-08-11T11:05:56.303121Z","last_seen":"2026-08-12T01:47:39.565116Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/crash-02.rGZEYhtD.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.505Z","timestamp":1786446325505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/crash-02.rGZEYhtD.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b8b3ef607921a6f9a24f96b34c38a6af\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Axq5jJQgD6JLsuW1o1rlp%2FrLlW5FQq6n5utp%2BniiMjG%2B73YkB%2FvraUJ2p9ohQoafUcUs7%2B0u9X8xldQwTEUx8mkOx7geAt9Sf68BOwKyWlXmv3Nh6ldnHP%2FrkE1oD%2F40LSL1he9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de6eae7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12796\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12796,"size_decoded":13467,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93f0e89ca301680608507339db725c0b","sha1":"ee99d18cf03f58cd4069cc411a81851c2feca17a","sha256":"0012d033800c5a52d78c18ed095a42ee835a7edcd82813edd7e06c695717c79c","sha512":"2951afa72ffd9468c153befc171571fb24cf5bc0bc060457f8dedd36a780cbbe57d8b5c50039fe8c579fd179c906d102ab562f6e5d87daed99d94057b6f480bf","ssdeep":"192:XOwnr/Qt5MgSx4kQ4zOOingiguiMA5XCSpLv7EXgGB8/QjK17RDFT5OccllPqW:ewn7k5kkvZDixtvuk/Qu17Frc3iW","tlshash":"4342c0cf96bf20014c89cc4a8fd924b3984efa49a42dace5634f0179c4f95734f6b605","first_seen":"2026-08-11T11:05:56.305046Z","last_seen":"2026-08-12T01:47:39.543912Z","times_seen":5,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/jackpot-03.CRS1K34s.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.518Z","timestamp":1786446325518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/jackpot-03.CRS1K34s.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d9770c8248b1bae504f859644c9a14ff\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0GVqcM1uwvp1PZiUuevnt2KMwH%2BTrtGpMRKT%2F06Yh%2FBgKgc29GHAMSok5PuwStzmGPlWItmia6%2FF2%2BVZAMFYQQiSsL30vcQLAWPa55Mzf82k9JjihBzlRz0JlAX8RM0YcY6v3x0C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a296c3de7eb87130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20744,"size_decoded":21411,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55ecf235d01bc694c024fc06f6e59d89","sha1":"2b8bc7169451fb4adf69eb2e37b3f21ae51d0d41","sha256":"9e9035a08a0ca0b991bdb6008aa677e013f217d761fe6ef78df35ad425eb117f","sha512":"2f4d3d46f6157d5949119e3b3789981d347c261d2c39ae4166f53c861ebdaccfa7c7bb844bf6263f6d0bc5eb77badbb35043d39af96911c8a899fcef76d0862b","ssdeep":"384:iWoO/RG+ZlicK3EKep0kW9c31J0OIqgPN/KRJdhD12p9k6mPVUPdponGbYut:dD/RJljK3QtTFJhoKRJdhQp9khP+dpoq","tlshash":"f792e07f5bc360a0b7528c6151f693d26f0dd60c227e8f6089256fbbd6b249701b83e2","first_seen":"2026-08-11T11:05:56.307147Z","last_seen":"2026-08-12T01:47:39.541421Z","times_seen":5,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/_path_.Cd8G0F8n.css","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.360Z","timestamp":1786446325360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/_path_.Cd8G0F8n.css HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\netag: W/\"0b9eade0cf52d9d33d5c99ca809cd374\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zy7Age93l4bQHe5g51r6cdzZauFSVRYL%2BnRHEZrQpx0cKkRg2XyhH6OR%2FTMhhIQEtNbntZb5Wc4TdLhqhN0w%2BX8fBx1p9vz7I7b1IVNwbjv0BIedvHkEFusv27yReUVp778g13VT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296c3dd7e987130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52490,"size_decoded":12243,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (52487)","md5":"9b006561a47da66d16a3368cca442fee","sha1":"e3d5cd6898e2c4a7e7c1dfca6534ce5dd31f43e6","sha256":"e4dc119f28cb8cde563ce90357554ff16b5263d1eed8aaf559cd7fed1607660e","sha512":"9a7725b985c6aa0515296085ecc9db16b747d0ab9c21e7550f9177a034cab79e51a53f5516e8a38f2bf88dddf9b8b2da3dca76d3f13c18e8ed6041376357aa2a","ssdeep":"384:ysJy7McqcUGmqiATKLl2Ax6GgL0/TMALGYbQRoFgzKBg4vsSz9FmKG1c+gobuiYa:ys8eLX8juBRvhHwj7bk5ysM3UCzme","tlshash":"a833a764f310a57ee827b77d1bd8db4c2328e002e817575efaa6da1144cb3f709e2949","first_seen":"2026-08-11T11:05:56.308877Z","last_seen":"2026-08-12T01:47:39.553999Z","times_seen":5,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portugalrainbet.com/assets/logo.B8M65aZT.webp","fqdn":"portugalrainbet.com","domain":"portugalrainbet.com","tld":"com"},"ip":{"addr":"172.67.173.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portugalrainbet.com/","date":"2026-08-11T11:05:25.367Z","timestamp":1786446325367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portugalrainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:37:39 GMT","end":"Thu, 05 Nov 2026 19:37:36 GMT"},"fingerprint":{"sha1":"6D:E7:B4:5E:87:54:23:F8:F5:94:8D:6B:1F:2E:56:07:29:D6:63:1D","sha256":"64:A2:B3:F7:A0:82:83:11:41:54:36:0F:AC:8D:05:6B:ED:24:97:46:AE:E8:38:E3:E4:36:8F:0A:C3:1D:A9:48"}}},"request":{"raw":"GET /assets/logo.B8M65aZT.webp HTTP/1.1\r\nHost: portugalrainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portugalrainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:05:25 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"9e7d6886d8b0877c3121e4d1eaa02ea9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muLkN7kmMp%2F%2BdXGkd4BYEUK4t8SLYW8GCg1WtODNEb5ilLdjOh8g6bR1f%2BBmapEoTr9mcdJn75bJh8XffN9sqG3B0BgZrVpIYapTHEtbJUG8fhKjHG0L2KR0Z8JWfRoN41WSJibX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296c3dd8e9a7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6784,"size_decoded":7446,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"633a301477c4745df27df502fc4f6fb7","sha1":"58e056e7ccee35c2cde81334444f13f477d54b82","sha256":"5f57a2d6b20d6e31099851e9c3e2a7d51b560727889b2d2ab6155ffccc72a260","sha512":"9aa5efa5be9e4389e1329718597d31e954e163a6c29722f90a4299ef5afe021bf0de2b23cea54601ea4c4c853ae2b07138f59f465a95c0106dcbd9a99cdf4eff","ssdeep":"192:6f9O57cibyHm6UgkI3H9JaOnnNE9BUzJb2L:6Fuci8mvE9Iz9BzL","tlshash":"d0e19e455190ccbf6350265847326796dba3bb02c66fc6d88c98156fdc73023beaae36","first_seen":"2026-07-22T09:59:50.993577Z","last_seen":"2026-08-12T01:47:39.539352Z","times_seen":7,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"portugalrainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}