{"report_id":"2b9a4f84-c561-41e5-ad34-30a305f5287e","version":0,"status":"done","tags":[],"date":"2026-08-11T11:21:27Z","url":{"schema":"http","addr":"pt-rainbet.com/","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"172.67.165.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pt-rainbet.com/","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"title":"Bem-vindo ao Rainbet Casino – A Sua Plataforma Oficial de Jogos Online em Portugal","dom":{"size":77563,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9540)","md5":"b7230429d3ef555a0f2616248538a3de","sha1":"f0fd55292dcd99db4028cd368b403382261630f1","sha256":"eb6cc9714b529223298933224064cb94db66e27d989cc029574a37bccef9fb02","sha512":"60ac81dca93656658a4b0c94bb1df28321ba85ac2ce98cdf29669a453ac5d1211b641c58fca1b1acc3ae50b4d6e657dd9df990efaee46a02af72955526618c5e","ssdeep":"768:GcBn+TK5L8Uduc8wdxS19a6W6XuuRKGIMlJX8XYubFqlXFnXlXy0UDpywh/YCY2n:rtd8+glIMlJX8IubgRcH3","tlshash":"ad73082450f51a374173738427b56f2f1eca890bd99a8551b2aecfa51fd2f868c33a1c","dom_hash":"domhashfee2aec2df115770d4331d1c74ce2bb1","first_seen":"2026-08-11T11:21:31.258541Z","last_seen":"2026-08-11T11:21:31.258541Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pt-rainbet.com/","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"172.67.165.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T11:21:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"pt-rainbet.com","ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":33,"request_count":33,"received_data":648951,"sent_data":17091,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pt-rainbet.com/assets/BonusWheelSection.astro_astro_type_script_index_0_lang.BCV-x-s8.js","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86ea96acd6e11a9623a3f8c8f20f7efd","sha1":"08b206f70c5612115e174601bf5352ae46587993","sha256":"7afa432588ba3a8362f858f5dbb685c0d0b4d1d612aa99cd7194008efeb511c2","sha512":"4cbde8b68e9690c6e14493a06b0e7ca04a859442611942a207210906a299a051d527008c07fe51143312ae575e6b82c4a5358b18d181f8aa8f54e47b0b1ba4d7","ssdeep":"96:x+bvqVNvz2YWEtVBIpT5rBUiMGBwXbRx+7/7xsMeaSSyXOHkf3AG+EM86P:x+bvqVNvzCEtVBIpT5rBUiMAKRx8DuY3","tlshash":"8a91a6a9329424b351ef07b7c6eb535574392019bc0a8404722864973ca6ddba3b8eea","size":4211,"data":"","first_seen":"2026-07-22T09:59:51.011905Z","last_seen":"2026-08-11T11:21:39.333263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pt-rainbet.com/assets/crash-05.Bo4cy-31.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.747Z","timestamp":1786447259747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/crash-05.Bo4cy-31.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"90f751b0cce972bd2d2bbc18d5a55e66\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFCAJPfDT405wqrJnzwIpXn5eAacYzc1kzMAn25Q2%2BsD6UU8XXXTZLDIfcIhLdDi7ME%2FXAURexVzidrcAdEqmGbwFIRuhaCDPlD%2F%2F%2B5eHh8nzDDjywNEq%2BfzMxo%2BnilTYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad681b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12496\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12496,"size_decoded":13169,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c21369852307f1dff5ca452bc2b4a59","sha1":"8320a97111b2de5300a85dd323531539eaa0ea83","sha256":"61e0667559e7fc1e58ac59145ff7fa8a3af1e52c92241d7526f37a3d650664e3","sha512":"a74153e0993487e232e3457ccd2ea5bb386b19c145065cb1b8b19626fee650bee7f928744bdc82faa544c35a2506ff828d2ebb249b9338a1829e1cb0ae3429fd","ssdeep":"192:lQoDNAjZqMC7TpQxPEQ4DNpw/CFEGeM/+CtHbFBamnUfdMVcpRw3ld9XDIl90kLm:fNAtMT+P0vVEGeMrH2mY+qmld9zzkBw","tlshash":"4942bf85d2fc350cae5b1b8c8171d01dc0ceded1ab92582c94ecf6c4dca2676a5b1ed8","first_seen":"2026-08-11T11:05:56.282823Z","last_seen":"2026-08-11T11:21:39.379969Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/crash-06.DgP5nkFm.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.749Z","timestamp":1786447259749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/crash-06.DgP5nkFm.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"11fb4c130e04b99de00681fab12abe7e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1nh0pQodrBY8lv%2Fmz0ei882ejIfCJjcAGeIGNggwGYUhIGWQD6myE2BE8OCyNz9qQz%2BTHtWlh6eYW7T5jR6LoYh4%2BkozaLXHp3wfu6sMK1XsFzs%2FZfdg92o9JyYGjVM6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad681c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13234,"size_decoded":13899,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"398108e32e37f01f56e2b0fe8233f7d1","sha1":"4230332a198f2b21aeee46ab8626c50844c39ea2","sha256":"0914a76fee159bb0ec35356c0494afd1e3cddd24a63cb71c6228618b98dbc6b0","sha512":"8c7d5ac25cc99e315843e040e71d86562d7e0305fe9c552b4c280e549d6d4beaac3def0fd98373e9682f0baa0259e9fd07a388894e9e9c7649fded143137b3f8","ssdeep":"384:kstEvuFz6zsGNKq10Jp1DsfAJ5BUZfVTHOQp:kstj8Haf10AJ+VTt","tlshash":"d652bfb71a99d343f3c09f5088b1ceedf52460bd89adac464c5e20f9c144b3fa45817a","first_seen":"2026-08-11T11:05:56.273751Z","last_seen":"2026-08-11T11:21:39.341897Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/crash-07.KgFMVtTB.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.750Z","timestamp":1786447259750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/crash-07.KgFMVtTB.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f6f4537a0f801d9c432c4fd2314a2a51\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rO8FBMvQtwCbq0ezz2udvWArowb6mBbUQaglx0CQMitsXCH%2FCmvRojRKPPauJGY4KRlLFBbR5rD9mvQhn24UXgdwYAxfyeOPe4Yo9zY%2F89aqwNVM%2BV55owafuZGZ0WwYUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad681d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18010\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18010,"size_decoded":18673,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ac6c07f74d275535d449c12bd947aff","sha1":"aa380526f7eb8e2232fc7766cfc08152633aa835","sha256":"ef76af94da9706056fbc3c7ca41d730d8322c2eaaf3f47b59ecc4c41ff5ebbfa","sha512":"ff0420558bfa29353ae7fbdd4a82c2a9e22548ad2cb5de7e8370a4c0f2d4af4263ca64c8e87f8866dbb459928ba2377a3dabef07b14775418064bd8e05de537f","ssdeep":"384:8p/cwLn3QHd+lLCsp2MI+TB3eq4UOd8Tc0nRIN0je1vjQ3th:ObL34+0splIKdE8TcSIP17Ith","tlshash":"f982e0e1429a0c84c674b3973129d3edaa7896d7b158c1da0278bf67de07e2570d730e","first_seen":"2026-07-22T09:59:50.973214Z","last_seen":"2026-08-11T11:21:39.358014Z","times_seen":5,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/jackpot-03.CRS1K34s.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.755Z","timestamp":1786447259755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/jackpot-03.CRS1K34s.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d9770c8248b1bae504f859644c9a14ff\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=259viOv0%2BwGf1b%2FmyGBnl%2Bi%2FCh1tsMA6I4Q%2Fikpf%2Bd5LFrrOVRg0vJnAq5s1%2FyBpjxu5oPI9CdzsvuCyxYDVvnUd%2FgsK7fNcDcKDq36rNONPbTrAl%2BZIJ3adU7Rszm7KIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad78232efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20744,"size_decoded":21419,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55ecf235d01bc694c024fc06f6e59d89","sha1":"2b8bc7169451fb4adf69eb2e37b3f21ae51d0d41","sha256":"9e9035a08a0ca0b991bdb6008aa677e013f217d761fe6ef78df35ad425eb117f","sha512":"2f4d3d46f6157d5949119e3b3789981d347c261d2c39ae4166f53c861ebdaccfa7c7bb844bf6263f6d0bc5eb77badbb35043d39af96911c8a899fcef76d0862b","ssdeep":"384:iWoO/RG+ZlicK3EKep0kW9c31J0OIqgPN/KRJdhD12p9k6mPVUPdponGbYut:dD/RJljK3QtTFJhoKRJdhQp9khP+dpoq","tlshash":"f792e07f5bc360a0b7528c6151f693d26f0dd60c227e8f6089256fbbd6b249701b83e2","first_seen":"2026-08-11T11:05:56.307147Z","last_seen":"2026-08-11T11:21:39.337525Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/icon-fast-withdrawals.C_Ft0VBI.svg","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.728Z","timestamp":1786447259728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/icon-fast-withdrawals.C_Ft0VBI.svg HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\netag: W/\"4fc364921d2f15025838cd0b85cf8d36\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igOBa%2Bj%2BnuaXAaol5vGevrKHDDMoPIBmuVk6pr9mvtVsQF76uPpk2cDccGa4n3g9BTm7ZJ3OdBLdqFHzr0S%2BoNlpAMkjkDSGyRUJxH6Mb8tLgoAMDFdVaUcH4%2B5D32OStA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296daad480d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":873,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b82a9ad92b2b76f19135a264e5f36e38","sha1":"606552f5db7aa952cc797872666b3237ccdeb6a3","sha256":"27bdedb1a4b037ecee9327e8b73a38ec1f972e3ca17f8541cb3363e9dacc6f85","sha512":"4b42eb58c41bc6cc672ecb08d4e2f95f1fb0677eb75712f88891b592cf8d4faedffc5c7fc28ad1f8481c5241044da9646cae747759e95b8b564e3997a624ee36","ssdeep":"","tlshash":"11d0a789d34c4c2cd9148504fbacb32140afa2db5a5c4177cca7c935b2659af6a3b1d9","first_seen":"2026-07-22T09:59:50.970538Z","last_seen":"2026-08-11T11:21:39.336261Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/jackpot-07.CHGAOl7E.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.759Z","timestamp":1786447259759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/jackpot-07.CHGAOl7E.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b8889e6d569665b19731a24d719ed9da\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BazoQoypqaEF%2F2%2FIFAqLn6mDPUL9Ifq9f0kAdHPSlQVduwt%2BOI%2FOrzGNZLxD7EbR3h8y4eRAEzp0zOEYQfxWfVA8QgWi2b2qeVngeYvFvKnup%2Bi94P%2FNnZMLBwU9GRztw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad78282efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26264,"size_decoded":26933,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c27757f26828712720cc966d2b56618","sha1":"3d23f38a7c5865c94c3834c26a5b4c16ff5d17b9","sha256":"63460e97f4cd29600366576544ceaf638d9e8073ce808aa387f8d84bf0e0e210","sha512":"3a440736d0c663e8c2b599dd2a28483dd2eb121395c81d1dd323591a730f9ea1ac81983d9eb31ddfa867b13a137ea67243a2e20ef2ccc273661a020348f04a00","ssdeep":"768:s/lx9Jn1lqLplkzCwOeD863mC0z9PG7qHgoOfDBa/:s/7Xnq+C724B9O6pOLBa/","tlshash":"75c2e1f182d465e3fd2cd55587237c866b1fb8c861d2f4bb061dc3d9e9518a3c5c8528","first_seen":"2026-07-22T09:59:50.976118Z","last_seen":"2026-08-11T11:21:39.34411Z","times_seen":5,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/icon-support.y1Ke-5J8.svg","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.737Z","timestamp":1786447259737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/icon-support.y1Ke-5J8.svg HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\netag: W/\"dbe43e070da782d2ddd0d438fa9d0f2e\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ab8OVJt4ofkP4QPiDg9%2BBTmJi5V4bnc16oMjfmaNgQgw6lmXn0FYL5gZP18Y5zQcj2yRMNHL2Z3jsiUty6a15Xt8dUuq4QxnkT9gfr9imShmviUREoMqeUFE7jriY2w4wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296daad58122efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":941,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4524639669dccdc7e965ff7d438a341c","sha1":"02522d3e248b4d4b8d234b4ebd3ce270af2f1ac7","sha256":"4fd71ccd9722e7ec67a2f7f07e1bb70a39639c8a780dc42d11b4c6efc248f590","sha512":"989f9e980c29523f715b2a6f8453b3e5a616a04768976ea94c096ca41a461d430f51ac5c2a5ac33ebfeb7866049e1d1f87fa535909ff76f7160f8561927a7207","ssdeep":"","tlshash":"f2f0f618974c483cea22425cf7187068603ff0da82082125d846e539f0a96ce99371dd","first_seen":"2026-07-22T09:59:50.996089Z","last_seen":"2026-08-11T11:21:39.356885Z","times_seen":5,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/crash-01.CFvZaaXW.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.742Z","timestamp":1786447259742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/crash-01.CFvZaaXW.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1c46e3bed87c5a30c59d8eb27c5e795d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VyNqskYp8mzXhOer8KkzsIkC%2FHnAeSsAzQLVhh%2Bv4Ym6CjSienbqg2ke9F8tqNCQXh737CqI6lGQZ04kaoe1gbNp7TvxnSG131cqU6Ek6UuU5V7KqFzUXuRXj8%2B08a4CAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad58162efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15848,"size_decoded":16511,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d93669a88a94090faec61159bbd5dc10","sha1":"ca83e037d6610303c1d6e60eefefee6fd6623af3","sha256":"7c6c58373e1f32e0639e5e2c36b07dd5a4f805122332038d44b6ffa15aeef183","sha512":"e09c9d13354687ddd99780ff2d87ef5235f1106d0c858f1389c603851713069e739e576347236f42c665e61203f0004c4e980d17ac22950deefef711d94c8ec6","ssdeep":"384:T9gzGUrEuHabap5xmDnzn6W7t3iSqykhQf+WD+Sb:T9gxpaboxmrr6wt3itNhQftb","tlshash":"f762c09146f776e58222824de33ce3296efb3b892d57c709984f1c761680f16d11a3a8","first_seen":"2026-08-11T11:05:56.303121Z","last_seen":"2026-08-11T11:21:39.372515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/crash-03.bvr-qurs.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.744Z","timestamp":1786447259744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/crash-03.bvr-qurs.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e767f29329c8274af85de0ef6c41b964\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLNaUprVs%2FGRsTJVcQU4TBhjImblhsbITCMbRcPXDsaDbEdA0uRo6xaLSYpEvEpMtT1%2F9zIetX05Fxe59fDZz1pq%2Ftr%2Ffm0TdLE2BCC4RyWW8v%2FwBVh01fWpL%2FDGFt55dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad68192efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11982\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11982,"size_decoded":12651,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cdfaeb94fc8edf935e34c83657cdca3b","sha1":"b46944c843ce3e547471cdb119e70169db67e04d","sha256":"52789d02a0d3b566940c693a814c9e3a0aac6b9a02cfe86c72853653ce98289d","sha512":"ef8b80990114194e3f6fde54ccdf3482bb856e133285e3580baa11079372cf55935d2b89adc411d8a7e31dd8c15b4a285b8404d4bb2c1bc5791a68f88f413dab","ssdeep":"192:jtL/1yEhnODt/RMx0arBLjIo+32oegBb0z/XUcou1II6Fc+aP4KTM3K3dVV+st9e:JhdhGRRW0IBj1+Begb0gcokII6Fc+aPe","tlshash":"f332d1468d26f6b9782e6dc8e94adb9d06971c24c11c0e61c44eb0db77c62f22839e5c","first_seen":"2026-08-11T11:05:56.281164Z","last_seen":"2026-08-11T11:21:39.340509Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/_path_.Cd8G0F8n.css","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.589Z","timestamp":1786447259589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/_path_.Cd8G0F8n.css HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\netag: W/\"0b9eade0cf52d9d33d5c99ca809cd374\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cbAdXmctKfGo1ZxoeyCiEe0kFhFF5j1Y%2BufB8xQqffyle16trBJpLrQ8lr2BCMAdz0kaKNtg317PiDY2WisHM%2FeA2xNjbRWNwMu%2FJ7sg2NF1bRC5j6UHNcFiLYZGkF8%2Bxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296daac6fd42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52490,"size_decoded":12245,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (52487)","md5":"9b006561a47da66d16a3368cca442fee","sha1":"e3d5cd6898e2c4a7e7c1dfca6534ce5dd31f43e6","sha256":"e4dc119f28cb8cde563ce90357554ff16b5263d1eed8aaf559cd7fed1607660e","sha512":"9a7725b985c6aa0515296085ecc9db16b747d0ab9c21e7550f9177a034cab79e51a53f5516e8a38f2bf88dddf9b8b2da3dca76d3f13c18e8ed6041376357aa2a","ssdeep":"384:ysJy7McqcUGmqiATKLl2Ax6GgL0/TMALGYbQRoFgzKBg4vsSz9FmKG1c+gobuiYa:ys8eLX8juBRvhHwj7bk5ysM3UCzme","tlshash":"a833a764f310a57ee827b77d1bd8db4c2328e002e817575efaa6da1144cb3f709e2949","first_seen":"2026-08-11T11:05:56.308877Z","last_seen":"2026-08-11T11:21:39.359907Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/BonusWheelSection.astro_astro_type_script_index_0_lang.BCV-x-s8.js","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.591Z","timestamp":1786447259591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/BonusWheelSection.astro_astro_type_script_index_0_lang.BCV-x-s8.js HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\netag: W/\"f06388389a73c13647e54047c98c1fd2\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGpZZjw0PJsxVuxEEV0h%2BYTeJTvddYq9fn%2BwT0VTgKVzab9OZQulDou%2F37ixVUEoN8WkN1bg5GgHme64wVcTblITTd2wRanMUikLbYfIiJZGXfemSX8MLJyQ%2FMdHGz60Lw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296daac6fd52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4211,"size_decoded":2601,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4208)","md5":"86ea96acd6e11a9623a3f8c8f20f7efd","sha1":"08b206f70c5612115e174601bf5352ae46587993","sha256":"7afa432588ba3a8362f858f5dbb685c0d0b4d1d612aa99cd7194008efeb511c2","sha512":"4cbde8b68e9690c6e14493a06b0e7ca04a859442611942a207210906a299a051d527008c07fe51143312ae575e6b82c4a5358b18d181f8aa8f54e47b0b1ba4d7","ssdeep":"96:x+bvqVNvz2YWEtVBIpT5rBUiMGBwXbRx+7/7xsMeaSSyXOHkf3AG+EM86P:x+bvqVNvzCEtVBIpT5rBUiMAKRx8DuY3","tlshash":"8a91a6a9329424b351ef07b7c6eb535574392019bc0a8404722864973ca6ddba3b8eea","first_seen":"2026-07-22T09:59:51.011905Z","last_seen":"2026-08-11T11:21:39.333263Z","times_seen":5,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/gabarito-latin-400-normal.CICpwsWH.woff2","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.671Z","timestamp":1786447259671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/gabarito-latin-400-normal.CICpwsWH.woff2 HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2341945dac2a3113243236316538b492\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KimMGdje6lipwL9%2FsGQQ9SQ78sLSgu31HxsLJYVG4eZH4EJKHvwo7wmbVhjMFqi2apxyfZa6v3K95%2B95nSX%2FRmjvV6W%2B4sKDZUnJMPFesLHzJ0PymFEH%2Fa0JDqtrDgBaSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a296daacefec2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18116,"size_decoded":18786,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18116, version 1.0","md5":"4e627123422841539277cae46e192e9f","sha1":"5bd5b95d3ef5f0a1cca4f28c8d04d66d3017405a","sha256":"3b8ca9bc042daa5e5f793d24181ca866d7b9738e3e77c2867f4eca5d2ec50bc2","sha512":"f918e3c79ca0f6135c3110e149d6822ea433a6b81838e265032d574cabaa72a0077310268587e79365bceece18584e021dff6cfbac2acc36f0589c5cecf8bbb9","ssdeep":"384:ZA5RrqneBzXvooC2TwngZLRcfK67YenRyTPF+cgzjxu4spwNEdx5JYn:urqnUClkcCKnyBDg3xSplYn","tlshash":"3b82dfe499c916b0cd265ab648c8107bce6a92844c9245e1dd0becafcf8dbef35a1544","first_seen":"2025-06-21T20:48:26.448194Z","last_seen":"2026-08-11T11:21:39.353641Z","times_seen":63,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/icon-games.BaqA6Lsi.svg","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.731Z","timestamp":1786447259731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/icon-games.BaqA6Lsi.svg HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\netag: W/\"eff965211f7ed99f2cf77aec08182682\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jutRp2oU4VeXXw8Apwy1ajNnXV80O%2Fn4Ki8rC71jC4YTvlK%2FF2PNQNbSwCRA2OennzXH4pEz4rwSfNBbWZ7mPlfpL18ETni1xKnq5vVe0KEethPS3Bp6y7bkMK4UdOg6kA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296daad480e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":881,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5696f75f6e9374a0cdbf68939789a8fe","sha1":"39a6622fec2e302b07b8a283411d5aaa9393d6d8","sha256":"af8166e5b4d319fece81e3f5493f20f676afe01ae284697e763cf7859ca4ac5b","sha512":"38496189b7960e107bb35f21f77537a1872734ee7925336e3feafea5a30978cd5adae1e961b93ee480bf2ac77ccc28a65020c5a1b0704bafccc11b2aa93f031d","ssdeep":"","tlshash":"dae09a14e118a82c8910800c6b2bb0a5302ff0cec71d0364b886cd3bf96d2db38271ea","first_seen":"2026-07-22T09:59:51.015238Z","last_seen":"2026-08-11T11:21:39.355442Z","times_seen":5,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/crash-02.rGZEYhtD.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.743Z","timestamp":1786447259743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/crash-02.rGZEYhtD.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b8b3ef607921a6f9a24f96b34c38a6af\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sxLkrUKNmQfHgRVepT77BGoPTkr1LLNHES%2FlX%2FwT%2Fi1VqD%2FqdWEs1ZPAYKd1egjf6ZZy7ecYUQluYQzIIiv%2F7Yh0KaejWf8oYPW73a9HOtcaJM3FyYx88c6%2BE9a0yWSNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad68182efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12796\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12796,"size_decoded":13465,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93f0e89ca301680608507339db725c0b","sha1":"ee99d18cf03f58cd4069cc411a81851c2feca17a","sha256":"0012d033800c5a52d78c18ed095a42ee835a7edcd82813edd7e06c695717c79c","sha512":"2951afa72ffd9468c153befc171571fb24cf5bc0bc060457f8dedd36a780cbbe57d8b5c50039fe8c579fd179c906d102ab562f6e5d87daed99d94057b6f480bf","ssdeep":"192:XOwnr/Qt5MgSx4kQ4zOOingiguiMA5XCSpLv7EXgGB8/QjK17RDFT5OccllPqW:ewn7k5kkvZDixtvuk/Qu17Frc3iW","tlshash":"4342c0cf96bf20014c89cc4a8fd924b3984efa49a42dace5634f0179c4f95734f6b605","first_seen":"2026-08-11T11:05:56.305046Z","last_seen":"2026-08-11T11:21:39.363553Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/crash-09.D_Nul6GR.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.752Z","timestamp":1786447259752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/crash-09.D_Nul6GR.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"87f46941ed096878064508294b1f301c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iazmXlaUUaQxAQawu%2BwH0ifn4etwzUxQTFdsHRpPxmR7ymWx%2F7VGIQAdJQKkaSxiJ267dtCS%2FjHKIJxv22Q15sLSk6oKIfJUJTDrgLKcmFSHKqBJn9xpaM8Lj9c%2BJEi9OA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad681f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14242\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14242,"size_decoded":14907,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13b881c21f39134dc8f523925b819c74","sha1":"fa3bd382555d8ef5c90e34b8073db9fa2810570a","sha256":"e84c635070b7f72a2cd3bfe608277a54646b8ef3d76c2d2dfacf9c999641509b","sha512":"136b16f0e113cf197d2eacab0aeae55c90a73ba08f1c2559738cc02200bd27ad5d93a4e84b6c88c7808ef73ea7e0c67fe52ae88d5f4520095a95e03ab9584a84","ssdeep":"384:RnFpMDKjnCxDgE5JESyWTHDQlfKNDTMUKOMEx3w0d7W3V:LmDKE3EDpKNnMUlf3w0Bm","tlshash":"6752d0b915220b69a4846200204f3c52ed142bff06fb8362b18b3766dbf5e705f51fea","first_seen":"2026-07-22T09:59:50.999366Z","last_seen":"2026-08-11T11:21:39.385652Z","times_seen":5,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/jackpot-04.C7fTUO57.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.756Z","timestamp":1786447259756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/jackpot-04.C7fTUO57.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"96ea495f4d5be4e1d327d2e66999a192\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UUMpSvsCDks24zNSJfAgKIZGpq4zUeagTwjhm%2Biv%2B7fOTmhxPs2UPhXjXNiE42%2Fui6kr3R7cD5seChTQqt3YxKidCdy2uxukPncnyxPKZQOARTeoaP%2FI9Kb0Dk5vDzR8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad78242efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27034,"size_decoded":27699,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"56fc6cf2dd17d5a89e6cf52458700b3e","sha1":"6f636de9d629e2bbe024e00b0fb7f97fc4c97fd5","sha256":"fd85d9f9632f5b355e2beb382cff154ace8122110b4f4d4864884d705a044def","sha512":"3c3ddafc171f6ea9677ddc97922f1753a7f63cfef0a96f8e6e95a5eac8c1d78cbfd443f3f8a6ad3be9086065e1ed8ab57324333069a0615f2f87f2855735aa7b","ssdeep":"384:sO++maibwzaFyS4ebiIIpbn9lphbPeLa+tvhOab+eBK0a4p+rPhJMWVp+1ZKoESX:b3PewzaSebzCnXGrths4MAY+1dVF1","tlshash":"d4c2e019e4e2ad27b1438ff8397f88815fe788895069ff19ac3914c3a92b53d73a1700","first_seen":"2026-08-11T11:05:56.290246Z","last_seen":"2026-08-11T11:21:39.375979Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T11:20:59.094Z","timestamp":1786447259094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzim6U7WlDW%2F1n3lZRR4ptY8lrGKrlHV4eefAMLRR%2Fy42qc%2B06y5Phefx7JCnak0%2FJPQ1%2Fd1hp5%2B45Cd4ZE4OzfXUpfIdNMdQGqLqQKf97lblQD7CHeOtBExsHIJNxjV%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a296daa97aa6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":77445,"size_decoded":15027,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9540)","md5":"a77041e5f09af061b6f1fb77b2d4d850","sha1":"948f6b205071b74c2f44965238c3c89c6e2c257c","sha256":"6dfcc9a79a8955923ce3309761ec9bd2786fde945f0d396e0bb8848c53fadee7","sha512":"5b8a6e201daaa0a41e91ad0a06857aef84914d1ee5cc914e32fe9d072f8dea7f36980e7a83223d9705c4096015c079509a4a97670ec8354e47f03e24f401af7b","ssdeep":"768:KcBKH+TK5L8Uwuc8wdxS19a6F+30GYXfRKGIMlJX8XYubFqlXFnXlXy0UDpJJwhV:vwwjYplIMlJX8IubgRce3","tlshash":"7973082050f51a3781b3738527b56f2f1ec98907d99a8505b2aecfa51fd6f868c33a1c","first_seen":"2026-08-11T11:21:31.290393Z","last_seen":"2026-08-11T11:21:31.290393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":276,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/img/arrow-spin.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.599Z","timestamp":1786447259599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /img/arrow-spin.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"21c175329b9df5344f259cebdbce8707\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBSSCM3O8AE9uNxCCfqByL1LhKgelVivyCxW1n%2FP12ECmLvilzVQOkWwxt11RRxm5%2Fa1Z6wJjZt1VvqzVQI6pdf4sSEICKIpoTNZpnUssC9E4c%2F8GiO8jcPXDKDfb2YBdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daac7fda2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9448\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9448,"size_decoded":10110,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26c03dd7a573a837b72689cddef153fd","sha1":"776c8244687560c3ebc09f44c89843dcfca91804","sha256":"c0d4fdd0b4f52f0592d1382f41d8195ea88edf5cf4c58d3c601b14c05ff1ce79","sha512":"4a1d06eac5385c7c8a505738b69f04099df29bfa7b8c15f0bcacbe8042a89d1db128b1bba16449acc79c5f2a68bd74ca5d8bbe4c8c3e8b5947e17625d3a40819","ssdeep":"192:UdXYqVz8Vbl0XLb25KvneIJcqzIKFtA9wFKHm3t2hQN6KNfeQZ1:UJYqVz8VhC6Q7bFOrHm38KNfV1","tlshash":"0b12cfbc30e9f14e4629f932719a7fe54dfc022de0e46d020b01658fee9566a8dda245","first_seen":"2026-07-22T09:59:51.023599Z","last_seen":"2026-08-11T11:21:39.350943Z","times_seen":5,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/jackpot-01.Dpi-0jhg.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.753Z","timestamp":1786447259753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/jackpot-01.Dpi-0jhg.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"06a6db520cbca09a668c490c5eda234b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0sERT7Gf%2BqNfRp1VhOS6L%2FWe9ulJ%2BCIU%2B31l0ImSILWjyOejWl9anGlmU4l%2F5yaEhPSBfQdhKB2r97TP38iKfNlIuBwqpOnrot5wj7o1icuqqUjmLH78x2WO2QFLOfLVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad78212efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14088,"size_decoded":14755,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b6b3b898e97558fc8944d960d851f99","sha1":"f0b39ab634664a534920c7fbdadc202fd5bc37e5","sha256":"a3e1fd7fe7a0e9816182b100ac043901a516af07c1bb3755e8358c6b24375645","sha512":"bef4cae468df6cecb346221da77db9045e9e4fb1ff58b04f5b05c92a175b5a8a1e484df7cc8d5a463e739e0b5abd784f1bf9209d93f79a0a1a1888e5cd54af4a","ssdeep":"384:mk1i7+gUsKv1Y+M1pd/s7g3kdCT+VOCDrkrMb8l:mk1bgUsKvm11pd/sM0U+VNkrWy","tlshash":"2752cfd5de836a59febf36ab280494440f9d3ce7031b8213ca019edfed742b451da998","first_seen":"2026-08-11T11:05:56.29891Z","last_seen":"2026-08-11T11:21:39.365301Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/jackpot-02.BvoUHFD8.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.754Z","timestamp":1786447259754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/jackpot-02.BvoUHFD8.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4a80dee9149c72beb3cbc3198d20f4bc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYRyNJ10tjuRJNfES0OG9g1CzEWyQhmyXofm%2Fzib%2B7wRe1bxe36LEBIR2rds7JosqpGM0FFuh3BVa6I7pjryZo%2B0SWAumFnaH4johVwJkrhuj0OgLaSI6%2BdKQ17DBhyfYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad78222efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23892,"size_decoded":24557,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb5f2ea56256824fa7e3e757e36a8b62","sha1":"91dd1713a29f2a04723402b4182b959b02621d36","sha256":"1aea183c9c4fa2cabdce68f8f8a96a0c3c3dcf9590d28676f53e3017180e3759","sha512":"63fdae8864b74e2262016eb312b547c18dc7907674d708185e7a035af249b7a82709e1c4692723498fbf7e12f8836caa604b46f9c13d4cdbf338579ff530b000","ssdeep":"384:XhFcal1aoKPrRVvF1VwrScuMx6EJZX8XcEzmamI4lt4icN80INc+PGj5JQPIY1cs:XsapKPNV/VOScv6uXTXvIAtF0tZ2es","tlshash":"c4b2e107a08025bf069445632a2b7874a8f3737d5d2d2d39415b192f8f89fe6e1e41cf","first_seen":"2026-08-11T11:05:56.292805Z","last_seen":"2026-08-11T11:21:39.374333Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/favicon.svg","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.858Z","timestamp":1786447259858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\netag: W/\"dd55b321b1e83742c2c3c3accd61beb9\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9ah2t1%2FuJsYG2CEAzZSZbwBte3S6ToIJ2OxfAx0RidMwxyCYddb7ZfGHt%2F05YlkRaqAzpcTaD%2Fe26yBnawtEbMbN9m1LZj8Pp6Yhe5h4ncKI%2B6Shg4%2FeVTEGBLYEGZHNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a296daae18442efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":610,"size_decoded":986,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84f181a7a3f56f14ea4493e4f454711f","sha1":"fb58e25c0269e8e09d5c465b9bf81e7f9d7d7cbf","sha256":"78cdc7f5a910df5b63b07f876ee075b82c889b8971197d57e93b279efe859531","sha512":"bc4aedb7cfbc095132a5d995823b0a1d825f0e3fab07a9df65facf8a6e5330a89ec7b685c4f869e74b13323e61218453cb7e4c37de02f1a514f360ba9f5fd970","ssdeep":"","tlshash":"edf07d5dd20d8c37c259c26cc9b5a071123d12e355c0c335a4e19f3e65240db2d197b8","first_seen":"2026-08-11T11:21:31.299601Z","last_seen":"2026-08-11T11:21:31.299601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/gabarito-latin-700-normal.BAFSd0WX.woff2","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.673Z","timestamp":1786447259673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/gabarito-latin-700-normal.BAFSd0WX.woff2 HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3fd180d27620932ba10d5a5ed237779e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2FYA1QiJhJSx1Ad%2BIk31FzhYVyTyqEeVIAmw%2FCJQ58aO420PgvfyLavXOm4k6SUb38MZf0bSSSRIzeAvkrtaznUjhn8TrvP4RMW6d5qj4tLMEZO8D9pPWtWmfwthufqQOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a296daacfff02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19940\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19940,"size_decoded":20606,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19940, version 1.0","md5":"03cbea7bfba433e429912bd7631e496b","sha1":"996358f83db50d8611a44cfa6ca884ca0bb2d4a3","sha256":"1efc5d2cf09e94c43d9597559d1c6b9eb0def0ab31732c1e0eec83dfaa648978","sha512":"dca5bd744ca4c115ec56da478e5d3354ab4a3ecf44d9a7794b735091165f905bac7a6c82c3823307ca5c06ed2c1a051676526ab0bc7f662496afdb97a8984f84","ssdeep":"384:nazESoXyOBb4CVsoxXlHWmcPSh3EeE/fMAOhCrAC2y6EgEgb54kg:aOBLVsox12VqhC/0A9V1gEgblg","tlshash":"4c92c003cad238adc6194a74a16913f62eb61a5184ca37346da7d62ac1c23730f2f366","first_seen":"2025-06-27T05:56:18.422185Z","last_seen":"2026-08-11T11:21:39.361745Z","times_seen":21,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/crash-04.BCrdiJTL.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.746Z","timestamp":1786447259746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/crash-04.BCrdiJTL.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"63bf27fa5478c8a98eba926e8c2ac718\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaAGihlJMwlhmlqMoeaSllBs6FGrXrzPmGYbWiAhiQECHP6tm64xUuM6FZ85eKOLetNGniX5K1gQkEIaH4DaHwdP2O56SU3UH5YqidZSGEYl9P6d1VwtnWkNt4EY%2F8mIfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad681a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13834,"size_decoded":14493,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"437bc1601ff5acfb2a22d840ca4cc920","sha1":"bec6cad8e299f53d9d5aa19c2c045d7ba5e18a97","sha256":"2e767ac73764ba3d8310137647e7112107d8b2f2b8d8374365d1308282dc8ce0","sha512":"9c8ef03c2dc73ad4b725e0e62021836f7965ba6662ced69b1e5ec0d9ce94ce9d182f432f40ece1582f47a86793ac933ad35cfceb17b0160345c9263a36a97ebf","ssdeep":"384:OZ7sAx+zXMJqsYb2ciNdj2KA4/YeYCKmCWMqrs8:OZ50zMAsYbnWAn49YCKmCWDD","tlshash":"7152e037435aeadf8d1f8b32a7750ec9c87534bdaa3b1e21e6bf40e7253841c6214681","first_seen":"2026-08-11T11:05:56.265769Z","last_seen":"2026-08-11T11:21:39.378547Z","times_seen":3,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/jackpot-06.B-i8pvrh.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.758Z","timestamp":1786447259758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/jackpot-06.B-i8pvrh.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3b9258e2ba1babac05ae2a6a5fa127cf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ONBbwx3D7TtstKWOgyaktPEx1ekwXzHXFbLqnh8B7pxSp2QvejK02wm5bCUEt5NhX%2B0s0zyUQM38uWPB%2FjJT5Vf9NXhu2%2BOcqd8L9nEaeosHpJWBOPfCotLW5uQGIQ4cQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad78272efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16880,"size_decoded":17543,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d006bbead822759ed36e4df8661d52f9","sha1":"8aa8b57182d83fc3a5957d7e32ccdadb78ed3814","sha256":"dc1e34aaadd239dd164fbeb60384b07c74da298b2e9a7efa415b8f6c324061c0","sha512":"a5030d0bddcc9ab6c73e1edf3a6fdee9259f5cde7221085c6da71214fd866180dbb50944e339d2c905f8d1e1d7dbe77639024ac347b2b5cee3bd32e88eae0900","ssdeep":"384:O1UzXgUdVUY1wCSHzx9HiHMC8NjCaMGDOlaT0JdOMeoxMQLBuQor:D0MVUjTx9CHMCECaMGDOlaIT9zEQG","tlshash":"0072d01449251793fffde4eea6e04e59a3148ad73345cf6c29ca921622b9c11c0c6f76","first_seen":"2026-08-11T11:05:56.268726Z","last_seen":"2026-08-11T11:21:39.381395Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/live-01.BUJIJcpO.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.760Z","timestamp":1786447259760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/live-01.BUJIJcpO.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d2c2ded89a9ac6bb9595a091391393b9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Yzdp1wKKRJtQKzoDn977nr8EczwrYbnt50AAH%2FxlUJ3uwFhpIFN027yZjROo8NOMuKjTphnbHFuHnOUckqhx65UdqqXkRR4O1z4JPd42VajEGSbS6O8IjmhchaBxddFUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad78292efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20916\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20916,"size_decoded":21575,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0dfe7776c6d7b20d359fe9e260b1f795","sha1":"a626090db0316195de3c95a3fc30b192731f9e3e","sha256":"0f48bef96ec9d724ed7744ba80d5d5fdba59a7a8b8e0ab75a0805866798f02f0","sha512":"e06fc562eb099e1a94518b916f2dd6b2de2e3f91d3f9cf40783ba28adc0b1d6d87be91c5b25d5fef4b08e2d663eaa098e0413f856ad0b78b5fd957a3d369955f","ssdeep":"384:GlGdAbF9c78n/CtWMADWEQmcDwabx6hnKJJQsBT2y3fCxd:qb7cw/91Qdfx8KdT2Ufm","tlshash":"7292d0fd8a6ef5e03cfc7e26578300963f230b0c5a562de68b0293a5257d5a19d4ea48","first_seen":"2026-08-11T11:05:56.284589Z","last_seen":"2026-08-11T11:21:39.3465Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/apple-touch-icon.png","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.857Z","timestamp":1786447259857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZVrGDU%2Bzm5bRvnloPaerXfmA6DUe%2FKftx5ggtGdNt00k2RNuhRDycX2s7YE%2BcEZolk1xsl0j0KKXR%2BJHplAxEsKstgvvVc17iMSOkFZosxUg1ghSMm%2BnWRKSIVUBXW0KQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a296daae18432efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":574,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-11T17:03:10.621125Z","times_seen":88873,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/img/wheel-spin.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.598Z","timestamp":1786447259598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /img/wheel-spin.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"084906e45a75646d820aac480fb011a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QvDQ3RGKSDHAHiEXDfxF%2FW0Lwf54Swhbj5xpod6FL0vVP77tFslt451oICDUayGTEAaR5unKI2mz4vTGfV%2FcUWPoXmYqZsv4vkIJDzdywTdYKOit5LBQt%2FG0kf3JtmQqBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daac7fd92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67574\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67574,"size_decoded":68237,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"daf976fceff89ea38c16d99e70049420","sha1":"7519d2f234b4ac7d92974aa36f59c4800ff1ec66","sha256":"8ef9fc9e5a9ed7dc610408e6eb247dbe36a713e25eeaf76e26bb714d7ee46217","sha512":"3c49551104e869160d49532b76e203cde5e819e1e37572885400757f624b1ac297228acb047e061831a000f358bc03eb51ff8d51b0f87945eba2d90264c73f47","ssdeep":"1536:UT+si3jPtWrZyq3Ei3MXUKoLtmODEjyL8xpci105El1tejnf:UCzztoZyq3E4MkLMSWcieEl1kj","tlshash":"ee630244b0bd12ec8398b93869259b751725bb48b76188d7fe343e40487f9db6b038ad","first_seen":"2026-07-22T09:59:51.021917Z","last_seen":"2026-08-11T11:21:39.334871Z","times_seen":5,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/cta-bottom.Gf-bvOv9.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.601Z","timestamp":1786447259601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/cta-bottom.Gf-bvOv9.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d8f07afebac7266900eeb132dad27c93\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8EyvyTw3nzmQwR0bXwFm6%2BjsCHM484j7eDAGQUIB%2BXvQyvffk0H7g%2BNzjv6HaBom4bXvXP%2FKMcpN%2F7hp4NTD%2F%2FgJno4EzY18uTPsZLE8wzY%2Bjl%2BZ6fw3NLhBZlDOV8dJ%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daac7fdb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26744,"size_decoded":27421,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1376x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a3238948330a5638597e7a5d43255271","sha1":"f49ac8de285a5ad8ffd6d92a78f81f349af25bd6","sha256":"7e33b4956968e94ce858d2b2c4f9285d86e984eb4e75a4bc0fa7197f617c0970","sha512":"f942e7414273452b8687814c9291ba7622fc22f2c7955aa64793e72f88cbbf9170e3104f5ebb5434e9a5f548a78010153de6c7ead55024419ec319bf5661fe95","ssdeep":"768:4oQwgvHca3amBqDfnNim3Kr/tkcuzHbHUFRP:4o/EAkqbnNiO8Iz7HeP","tlshash":"6ac2e1e9a9c6b1b1f7e80b38fd8f432b5216c6391c3b69e1cb53a160f613d50c9b4169","first_seen":"2026-07-22T09:59:51.013595Z","last_seen":"2026-08-11T11:21:39.38486Z","times_seen":5,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/gabarito-latin-600-normal.NulAu8lF.woff2","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.719Z","timestamp":1786447259719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/gabarito-latin-600-normal.NulAu8lF.woff2 HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6542970414daaeae1c19b43725a5411e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgyHkJ3gRp%2BuWvdmVej5P%2BB1uemWu1kiAioDp7Zd8vgwUPnoCMHnc0yExPj8qk31nncNhSbU2NaQCMyJcLdNLro1hM5xX4kS2lGOHslvO8%2FjA6Vba8MFsxoIqkncc6yaYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a296daad3ffa2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20080\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20080,"size_decoded":20746,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20080, version 1.0","md5":"f505b42944a82d60c42cdb6ebdb729fe","sha1":"63d191472a050e670b72157f38797ea4b9eec03a","sha256":"37d20573eeef888b16d7e9d457d6de7a3ca04507fb0593956dbb2a291aa55829","sha512":"56199e63b69bf3e15e24b731ef4c07278e50a5e2e9df7d636edbad3988439b97913270070ab9495501d1f2995e3631e78c5c2e65c4922086e25b9c2aeed3534b","ssdeep":"384:uD8c+u+FD5m0q9bZ4joK9O5ff/uYNy1JFjjntbvKbb5Ul7Zcn3Pt9xIf:HR9FbqBi0qGfg3fSnqZc/Pxu","tlshash":"fb92d053ac6f8fbac823803d85242166b9ae96c6369137433d7f8cb01d859b0b250b06","first_seen":"2026-04-04T13:37:09.576039Z","last_seen":"2026-08-11T11:21:39.362688Z","times_seen":8,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/crash-08.CkqNPMSl.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.751Z","timestamp":1786447259751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/crash-08.CkqNPMSl.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1739e9de9dd12840a74f0153be4b01d1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXsYf1rw2MC71ldBQFLMWgxfL%2FDgBufyba%2BKcAGOZNIqWGVaYvMVpoVMYOxNOG0P%2Bl1IcBisy5denLf4iJSALLlfB4EiH0cXUhLlmD3FfAxtRplMMZoFZZiDGz6shcbyBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad681e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12124,"size_decoded":12787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a3e29e3206aa27959f0bd1f5d649913","sha1":"37dcda6b17409247176de9a8358265ecc337936b","sha256":"70b7bbb556c6b634c5adc80366ca577550094513f8ad59e6f9c276d3bd51396f","sha512":"0651c87be47ef0d87ce927a01281688520f0e33db4e34a9f0b5447f4f537880878ff8c02a79eba3c0c44bae2f54f4aa59ec83ec7a43a9469b46f36bc57e0a2f1","ssdeep":"192:SQxHk4JNwECdX+KP5jtpCjBXkke9CtDzSCIFRb+ujNn2kw:SKx0ECdX+KPpb+B1e9CtDzbK+ujN4","tlshash":"ea42afd47dea82534d25bdfca21634ebb4a63e9f171c6c3fb83594aa2d8a0d10996101","first_seen":"2026-07-22T09:59:50.997693Z","last_seen":"2026-08-11T11:21:39.358992Z","times_seen":5,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/jackpot-05.CufJ7qZP.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.757Z","timestamp":1786447259757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/jackpot-05.CufJ7qZP.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"042e8a1cc9c968bab2594587cbf81c22\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fz5SpumHrdS%2FiQLmoVBWqPuXWF%2BpVbqrx70y3g35yxF5t0N5hZqtnyR2TBWBNbJa67ZUluX6Tv77hdvT6YtazkLwQWc%2FJ1YDkm5lTgSP%2FDftwoizbWVLnEOzlRzKxdnfDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad78252efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25118,"size_decoded":25785,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ada3144cd8956aa1e4aedaa3991bd72","sha1":"c817fa97412755467d74774618c26f0a73e8fde1","sha256":"d91a235eee928f508e7b9736bcb31e21f8f0aff894ec1bbe10bec46f347648e3","sha512":"d012967d15593d553cbb80521f924a2ea8f2448d93e9f8d457445a67970bee9700b928dab38d7812df77c2676ad7547b13080b0d02d85f37b076471357024133","ssdeep":"384:pKbJs9jqJsinl9QH372nSHGd1u7kWhQVeCGGeaQMpQz0voY:U69jqminHs6nSHD7kdebGeaNpQz0voY","tlshash":"e2b2f1fbb3daed19975d110b5692c6222c0cb642b89057c3dcdb6c5c44a408f36afa71","first_seen":"2026-08-11T11:05:56.300605Z","last_seen":"2026-08-11T11:21:39.370697Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/logo.B8M65aZT.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.597Z","timestamp":1786447259597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/logo.B8M65aZT.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"9e7d6886d8b0877c3121e4d1eaa02ea9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBTrDre5CAavhL47KjdqSC2mrKMMZo77BaZA9NkKB1lctWmuCa3bbKv%2Boo%2BF40ukeMohLO3mOq2T5ogyMxJRmwgsgamgOwUR72d%2BUsP%2FifFSCzhTb5hE3C%2Bg%2BGwGmaEI9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daac7fd62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6784,"size_decoded":7452,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"633a301477c4745df27df502fc4f6fb7","sha1":"58e056e7ccee35c2cde81334444f13f477d54b82","sha256":"5f57a2d6b20d6e31099851e9c3e2a7d51b560727889b2d2ab6155ffccc72a260","sha512":"9aa5efa5be9e4389e1329718597d31e954e163a6c29722f90a4299ef5afe021bf0de2b23cea54601ea4c4c853ae2b07138f59f465a95c0106dcbd9a99cdf4eff","ssdeep":"192:6f9O57cibyHm6UgkI3H9JaOnnNE9BUzJb2L:6Fuci8mvE9Iz9BzL","tlshash":"d0e19e455190ccbf6350265847326796dba3bb02c66fc6d88c98156fdc73023beaae36","first_seen":"2026-07-22T09:59:50.993577Z","last_seen":"2026-08-11T11:21:39.349193Z","times_seen":5,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pt-rainbet.com/assets/live-02.CVjVe3GU.webp","fqdn":"pt-rainbet.com","domain":"pt-rainbet.com","tld":"com"},"ip":{"addr":"104.21.89.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pt-rainbet.com/","date":"2026-08-11T11:20:59.761Z","timestamp":1786447259761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pt-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 18:36:19 GMT","end":"Thu, 05 Nov 2026 19:36:16 GMT"},"fingerprint":{"sha1":"E3:74:C8:A2:17:CF:1D:40:AA:08:74:A2:41:67:75:55:F0:2F:5B:96","sha256":"87:0F:C8:29:1C:FE:4D:AD:03:FA:57:21:0F:B9:60:86:CE:4E:61:F6:49:DC:BF:B1:CF:88:93:50:87:BE:A8:6C"}}},"request":{"raw":"GET /assets/live-02.CVjVe3GU.webp HTTP/1.1\r\nHost: pt-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pt-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:20:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"19a1d01bbfd267dde3328834d361f4ac\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rti0cVfCzKnzC0qM%2FzcoRKu5c7h9UqjPdAbbXeG9JTAvnOxwWXlI1Am4hqZoqre4BqIh%2B%2FiNvYnT0f8pKVspuWEDEwCUQDsvR4JCCpodtC%2FY4IqA6MmcqucpEQzP4YzucQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a296daad782a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22990,"size_decoded":23655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"65f23a3f4a80087126af355c9e92551b","sha1":"c6e7e6863c14cfd867bd97e73885bd4911099396","sha256":"8e55dd7030b062156c210e983dee29da04eb912a631116d6f27d255f9a98f742","sha512":"4ef5e52c311880280018befc3eb5f56c80c7a8c71e3fed60ad4bf20f6b51528240392e1368afefe6708caff654b22e55851c14df6912f5338f96c7cb0bfac722","ssdeep":"384:7B+JvesrTdpPgaspr8fpr+yENIT7dwI2sSPJciPpPzTpKfOXxNnt:9gveSTdCaspr8fpCyFRkxcihki/t","tlshash":"45a2d0c68312ede67b8edcc6d6854d6614d19088d2d3cd8daa6b0894f3f68c0a33ac70","first_seen":"2026-08-11T11:05:56.275346Z","last_seen":"2026-08-11T11:21:39.377697Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"pt-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}