{"report_id":"2fc11c86-ed42-44ac-822e-df179a2eba83","version":0,"status":"done","tags":[],"date":"2026-07-17T09:15:40Z","url":{"schema":"http","addr":"rainbet-casino-win.com","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-casino-win.com/","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"title":"Rainbet Casino Connexion Officiel France 2026","dom":{"size":44076,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9030)","md5":"a45f625a5bce0b2a3f304d34be84cdfc","sha1":"57888fe29b3d22a65e609cfa5e3b9379469dde1b","sha256":"eeb9f1353f938b40b42488862527e204f976e2721f481f7280cd917a7c2f0fdf","sha512":"def6b54054bec534b53835b270cbef10fc9e38e9fa67f37d5eec2e45c0c57be8039128e7924772bea596ca55aec7ebcc8c68bc9677af1d10022a3352ba85691b","ssdeep":"768:1zFyhm4Uj2x0JggqiXEPa2dhQ13/cjhc2fX1ThdTcTAhJO6TC5:1Zyw4UWha2XgcK2YA/i","tlshash":"6013e73ab0c5253b21b371d2bab1af5f70e48620d6121aa0c7fbd7bb57c1ec1982165d","dom_hash":"domhashc07b157e060c7d283be22e5b1a13242c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-casino-win.com","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:15:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-casino-win.com","ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-24","domain_rank":0,"first_seen":"2026-07-16T11:15:25.194414Z","last_seen":"2026-07-16T11:15:25.194414Z","alert_count":51,"request_count":17,"received_data":734682,"sent_data":9110,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-casino-win.com/","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f88991827f019d8d754bc537ae2b52d6","sha1":"bf9dcd4482d5edc85251d1818b00df1c5c03bd70","sha256":"1bdac0ad6f9dffb6fb024d415ee7511623930805d23439ba840f296c492b224f","sha512":"0a7c826c554b55fb17d8e3e2b8dabd527b4e76f25c760fe79ad35f7a2755435dd8f18f5977ed0ae2e6d793993e1dec7e66cb5b50a2f37ef2066416d80c5ebfe9","ssdeep":"192:UBrcCuClmkjNTeCLG/Z0wNCwBf3aq4l5O1YkQjxEA:UePamkjRs0qQP/jCA","tlshash":"bbd12b1633963a3607ff11fb41db2ec1b58d1410bb8a0855c178ec5a2ba5fc461e1bde","size":6205,"data":"","first_seen":"2026-07-16T11:15:29.40505Z","last_seen":"2026-07-17T09:15:42.316931Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/site/logo.png","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.761Z","timestamp":1784279713761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/site/logo.png HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=5,i\r\netag: \"6a40702b-b5f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUKex%2Bs2AxkFa3N0G8uEcAbh3V2ayL9tzZX8GmuAFxbE4XJkN7Mb%2F%2BMe21vJMjqxLLN5%2BZbf4XZ5qAkLHgtwqWrvityIN0axPSQfB2%2BPHkHfgBPOTe5uFUGRAlwWBzk2RDy%2BbCtQs2TP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c82413094d0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2911\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2911,"size_decoded":3665,"mime_type":"image/png","magic":"PNG image data, 124 x 82, 8-bit/color RGBA, non-interlaced","md5":"792853842a63dee5a1d2a87e1df45c0c","sha1":"9a7ed2ca68397689ea678294752928acd760cdd8","sha256":"7b5466058b0216061d6981b94d4ac9b3ba1b3a396cde06a994975db8a3e54099","sha512":"bae1723042ada4378bd727853e099204152505c201f3f6cbf2ac1fdb52c2d3d57c2a6e9a2aa17374f43ca315ca40bd1fd25e62e94613ee515e65d2b78987c202","ssdeep":"","tlshash":"6a512da98a675517ef3b4539958130f1b033538d111f17afa51cb61a058f4f5303cc67","first_seen":"2026-07-16T11:15:29.394456Z","last_seen":"2026-07-17T09:15:42.289202Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/logos/grandz.svg","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.763Z","timestamp":1784279713763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/logos/grandz.svg HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a40702b-169a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 79217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzXKSmbWMeypGpbizPfmW5QUNGT0%2BXNMC2hsy8N%2Bo0%2BYc666bKlRqxyVJaZybIUMpLVH3PGqPVVMi4zGgsOI0ejvYR923DdvacmUZlOLx3NMofV97ylRGkaGRTiXEyOyvPaa%2FcxoxRQK\"}]}\r\ncf-ray: a1c82413094e0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5786,"size_decoded":3373,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9811058c4651791a956a192376245b99","sha1":"d93e453352bd6dfc17f05bc7a28cb3fcf946c4b7","sha256":"08c7909c222248203643d99a66e4bcd772e963de820e8b9d436882454875def9","sha512":"ae7d45d57e48d06cc5ef5880f09b9087398c57cc88fbdea217ec4740c042500f1cdf727ebb70ab909a9c46f036c259970cda2304f0c63f942edf854517e9ec00","ssdeep":"96:EzrXRAXTcu+hqh39fL4yQuqtQULmZ4fgd0ZDTNWy0Nkz6FxV:E/XKTlJ39fZ1qtQ1Z2gWTzuT","tlshash":"6bc194e5b368a3f8f801b7d857369079ba6334fa7766d578c722ae44a54009c0ddcce1","first_seen":"2026-06-18T01:36:50.442339Z","last_seen":"2026-07-17T09:15:42.292464Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/site/hero.jpg","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.813Z","timestamp":1784279713813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/site/hero.jpg HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=4,i\r\netag: \"6a40702b-48faa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0di4%2BpmNgCuc8PGjgEhRL258v2tVY1s7YzzvshUye3dOBBs3ZjsfEFpYtPcNoVoGdX%2FDsz4EeFzh2T9peZStXMh7paE8o%2Fl6mnwstDn33%2By20xOaBb5CUETSil9LHA6hzTrbqmZocjTk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8241359580afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 298922\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298922,"size_decoded":299677,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 900x506, components 3","md5":"0b96b87cdbb4761850258ff86da7f79e","sha1":"3f7e29e155e30e1ce33bb03fc406289343429063","sha256":"bb54b9d59a8b1f0fb7a4e78dc236c383f9d4ddcd4848f9b13cafc89ba335a35d","sha512":"a7df128049e532e775a0402c186aa8fe10b95e302c4380d6e56094ec3185fc33b656318d789d114f3a07e93d7dd620897d56389e21334643963d5733a7662a55","ssdeep":"6144:BcZ4+YR8k05XWtFXqcDKWOyv5IDwp+CuQmwcdNkS:B4YRFqWttqYvSwpKbNkS","tlshash":"bb541273784baf05f645c26d69bf4c63f60e114f37d632d102695e827a89e8a8f0578c","first_seen":"2026-07-16T11:15:29.396956Z","last_seen":"2026-07-17T09:15:42.29551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/author/garry.webp","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.768Z","timestamp":1784279713768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/author/garry.webp HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=5,i\r\netag: \"6a40702b-7818\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2BKbfAOJzqIjS%2BEduaIfNzNcc6W8wo5mDkj8NlUVf3C6eFnvzYexabixM3bVEXHDUkafPUkFWksPDb0OkWKQ%2BUpYkxSKeLaEPLCSgQZecHobLKkufOqicnvGrLWt5QegTtKU%2FbknN1Ep\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8241309520afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30744,"size_decoded":31497,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cd089e6f9b8a6011780b7fda1ed3f1d0","sha1":"0fd0b556b6062a4602f511ff5fe68b3fd0493702","sha256":"e49eecd3d299d85e4473b9ab664fc8df852d84e3267b7444d88930449c747f9f","sha512":"5d0b9a31b45ed7291ad3649c569fbc5636281244588d3a8b37f9dfec93d6a176b99870f582b6e536152e45b70eb90200fc05c5d4b2627f3d35f7f57035ebe3b2","ssdeep":"768:WkPxmzSez+Pue7Np5qJJcX4boyAW50MvDFMYC:WkxmL0uDcobHX50aFRC","tlshash":"ffd2e081eb7c6eb70f6693238d4252f2f6409b5194cc0792b6d1e1c48be4ead01dbad2","first_seen":"2026-06-18T01:36:50.437546Z","last_seen":"2026-07-17T09:15:42.298225Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/games/gates-of-olympus-1000.webp","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.804Z","timestamp":1784279713804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/games/gates-of-olympus-1000.webp HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=4,i\r\netag: \"6a40702b-230c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrfNdyHQrD1RgRN7ogpd6NowvuJFctGAGltjBuw01PMojLP5rENFivNGzbl8r%2F5EUP%2BqwnP4FavMQFT8EFsI25UFbnMy2Jnafqn0renlspL%2BNwwX2VIU8YYTnMJvwS7aCXBHG%2BFIOcKf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8241349540afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8972\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8972,"size_decoded":9724,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 142x190, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e818d6b78352f82bb1e7ccfc6479db9","sha1":"49b8c4bba8b087c55c202a10ff8bda1ab9c38857","sha256":"a1c0dcdc03c0f246ed9ffe2ad45f0e1681e06344ab8ff2c205103f1af6a018b9","sha512":"da3f994860ee15218578ae602c3e3ddbaf15379a6421beb2f4ec93e64831e7d2fc0c41a76bce8e9bca5f5f714af7eeb1de4c16ff87ded5b08db4590f4cd22cd2","ssdeep":"192:9LD3p9aFPpCoEnDfVPzesMWh12+jVvEgZf:9HKvEfVPzJh1xjVvNf","tlshash":"7902b0a51be043463a5e3b9ac6b330a4fd1009ff32f426e6134279fa554375dc8d835a","first_seen":"2026-06-18T01:36:50.459287Z","last_seen":"2026-07-17T09:15:42.299402Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/games/le-catcher.webp","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:33.245Z","timestamp":1784279733245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/games/le-catcher.webp HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=4,i\r\netag: \"6a40702b-2726\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79237\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUQEIHotykOvxZsC1YookS3q3zQKqbJ9JjFKUMO1gQz4HT21eLIw6I9Tya44hz%2B%2F4XQ0uX87Mhg6IWh5Ato%2BUhogiPW950Mkp9fg69czFrAAwwNd0tdUr887W5oT%2B1IVrBnpmzkn1tqJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8248cccc10afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10022\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10022,"size_decoded":10775,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 142x190, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"37051760cca4480bfea3ebd4a23bc151","sha1":"cec2f1cbd34ef6339283e2931fd4f9721c9c341b","sha256":"91d630b8718dcc43718eacf88042254b9ef6a81be989ce3ce6a92c7ce32f635d","sha512":"adbdc9130af7912f1ccc94f53c5e511c250536b3b4db9bf8bab3a9d201780f9e96e099ba729df259b8096a69790d3fceeca0d092e266a47dcc81a1566e31563c","ssdeep":"192:KdnDCFOJJa3C3AGYSu//KXpU9SS1fmIQuw2N9fkljpZXktYSGW/OlULohgt:KdnDCcJJa3DoiSQmIQubLYwtnH8hc","tlshash":"bc22d05e675e3f4b7fe1602acd3e45873c11e92362f1a2056b0e113aca29a7e05807f1","first_seen":"2026-06-18T01:36:50.465057Z","last_seen":"2026-07-17T09:15:42.300577Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/logos/monte.png","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.765Z","timestamp":1784279713765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/logos/monte.png HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=5,i\r\netag: \"6a40702b-363a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2JM3LKmry19IsLB7cPLNvphiA%2Bl6IEv1eUNPrMa4hfuUVp1HycIOwgznnibrkai2b1TAK1tNWohM8cSBLZIGve4AgNjEvIOPZZdYUtqpd59zy6iw7XhAKVHb5nto94L1l21dLdg1apQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c82413094f0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13882,"size_decoded":14628,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 499x285, components 3","md5":"7129f8caa2bdc4d733d585d6c016e698","sha1":"0ff27edc252ae7f69d045161fbb266c528de5deb","sha256":"263a3e9546b15af4fb3829a67be50285ef4e4f546023f1bdba93c265ac2206d3","sha512":"f25f78b2ae3937e331569c1ed9313b0c5926491af953ffb5e3e339c40c440d9cad594d7e2a4b2c8426cfe00fb6a40b66f2878d9200b61085eb035667956fd6a9","ssdeep":"384:9w9zMwHvYPejJ5Z1VrsJSpQ46XrS6t0Fjf1pRu3:C95PYPqZnQrXrtmlg3","tlshash":"31528e670e16d163f40eca725b107a897892251d49e32734b2acbabff76c4839d5ed10","first_seen":"2026-06-18T01:36:50.445336Z","last_seen":"2026-07-17T09:15:42.301532Z","times_seen":11,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/games/drop-the-neta.webp","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.802Z","timestamp":1784279713802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/games/drop-the-neta.webp HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=4,i\r\netag: \"6a40702b-28e2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVSiFs3gBfstYIiG4sH5tZmua8EPHNmCwqYwEQSrf4Ragve7LK9dUVsYH0rNE5lJPKusnr5SvQFpn9oQzZYQ3RC7BF971Je7HnamAVc9gwHlReDl%2BPsNc2WNUFsVM4RUsojjGRNsAbk7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8241349530afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10466,"size_decoded":11213,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 142x190, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c7da7a5a923c01f19f5f1dd23e82e1ca","sha1":"82ea08e7bec83d6045d33edee3f465403d933bf3","sha256":"3c664003fd15b92a1100f71608c4eec596643194742ee3868abf1fb678bd8438","sha512":"91493309e0ea106564277c97fb681bf86c110f348b77124a3f3c210e8ccd5aab53a327fa8d581aadfb2983d6aa68b9322d0c8e03314ea9ae16b03f9534db7244","ssdeep":"192:T3hzdis+U90CzSHzhviwDw0FxBUa1wsoKU8VT9i3TVUpBmUWOau+:zhZRSCeHz87/SwsoCVxiSpQ0p+","tlshash":"bb22cf0fa5ca3a21dc4b45aae1739096fbed7400b4ed37c9c489988b0b0d183bde9a15","first_seen":"2026-06-18T01:36:50.449115Z","last_seen":"2026-07-17T09:15:42.302481Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/games/five-horsemen.webp","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.807Z","timestamp":1784279713807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/games/five-horsemen.webp HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=4,i\r\netag: \"6a40702b-236c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79108\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Bdb9ljrvehrympfEvTGdBquKUzLirgnFLhspIDYsfdKJSA5OzRAh%2F0u%2BwGpY7A%2FMRDiaSQ8MQdmPenFtCybguZfPo3qa9hVciYVzrLL1%2FZU50BuH8qxyRrd7jZmHz48LT5fiSVNppHA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8241349550afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9068,"size_decoded":9820,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 142x190, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b20b031842e26776ae8970bea113ce89","sha1":"cd5b79f871daf0a443e468550d71a65cc5e65270","sha256":"2fd349fa218319b2690a79ce18b37d0af8fe73b50ce7c6465a1666186a9de224","sha512":"0088ff1211dc0e5674f152bc8974d1bfcc52dabf11ea4acb230533005d2bdafc6478c80ecb6e6cb6052d59259195669aa8f1b9f591b275260bff9b826c1e5184","ssdeep":"192:zyF5Q+BNnP8GymeEaVQKnpIQUW69eudt2wjfn4ABjPB/R6mr:iNkGSEaWKnpJ76U8IWR6mr","tlshash":"2312af0a2ed173fc4f5d044c8be76b71fe64340dd1e243d20a4354aedafa24a5c2a88c","first_seen":"2026-06-18T01:36:50.45116Z","last_seen":"2026-07-17T09:15:42.303337Z","times_seen":7,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/site/logo.png","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.897Z","timestamp":1784279713897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/site/logo.png HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=6,i=?0\r\netag: \"6a40702b-b5f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79218\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DB7NRPHaMFGzBcOTMVn7qc2Uux1aUDyrizrmZR4zpvlF9cWlxW0R7h927ybsM2OgxW5nD%2BBO8Bt9heZDtUsttz6d4HFXmqyHYkAj4ewyurg39o0tZ%2BQH4H0STXCngfS4ATFT6m28j%2Bgr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c82413d9590afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2911\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2911,"size_decoded":3662,"mime_type":"image/png","magic":"PNG image data, 124 x 82, 8-bit/color RGBA, non-interlaced","md5":"792853842a63dee5a1d2a87e1df45c0c","sha1":"9a7ed2ca68397689ea678294752928acd760cdd8","sha256":"7b5466058b0216061d6981b94d4ac9b3ba1b3a396cde06a994975db8a3e54099","sha512":"bae1723042ada4378bd727853e099204152505c201f3f6cbf2ac1fdb52c2d3d57c2a6e9a2aa17374f43ca315ca40bd1fd25e62e94613ee515e65d2b78987c202","ssdeep":"","tlshash":"6a512da98a675517ef3b4539958130f1b033538d111f17afa51cb61a058f4f5303cc67","first_seen":"2026-07-16T11:15:29.394456Z","last_seen":"2026-07-17T09:15:42.289202Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/site/logo.png","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.899Z","timestamp":1784279713899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/site/logo.png HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=6,i=?0\r\netag: \"6a40702b-b5f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79218\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hohZo9hG%2FKXWVzT16sGpYOuqHJDUDh3YHtH9z6kmIouqadfD95SNGWphxfjhtKCKINTCGDK9rN3Gm5oOLB15iZXZRlif8lZ4RQtNJDicZSb2jISbrJP0fQhlHSw5ym8SV8KIFTm4Z5Rl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c82413d95a0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2911\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2911,"size_decoded":3658,"mime_type":"image/png","magic":"PNG image data, 124 x 82, 8-bit/color RGBA, non-interlaced","md5":"792853842a63dee5a1d2a87e1df45c0c","sha1":"9a7ed2ca68397689ea678294752928acd760cdd8","sha256":"7b5466058b0216061d6981b94d4ac9b3ba1b3a396cde06a994975db8a3e54099","sha512":"bae1723042ada4378bd727853e099204152505c201f3f6cbf2ac1fdb52c2d3d57c2a6e9a2aa17374f43ca315ca40bd1fd25e62e94613ee515e65d2b78987c202","ssdeep":"","tlshash":"6a512da98a675517ef3b4539958130f1b033538d111f17afa51cb61a058f4f5303cc67","first_seen":"2026-07-16T11:15:29.394456Z","last_seen":"2026-07-17T09:15:42.289202Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/games/sugar-rush-1000.webp","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:20.272Z","timestamp":1784279720272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/games/sugar-rush-1000.webp HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=4,i\r\netag: \"6a40702b-2048\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=piZKADiIR%2BhOJGHNqOkTefqKOzsKC0L1cBuLj%2BkOwNZ5XKT8lpvBtop%2BsddwJp5Oul2DKY9lVLcc0HR11avWfpYMIg6o%2BhKFkGzqj43EKFd2eCLdFNtEFJYIJTDQXfxlqBp%2FnR6FOKjq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8243bba840afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8264,"size_decoded":9018,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 142x190, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"056221c663c3c31d8e7a8013f4a8fbee","sha1":"245f788bc1265edc54fb6221de86e1ce6298af89","sha256":"eaad3eed72773a6ab032b4b763f5deb3b8d0540e5e56cadeb4658963a6fa8b06","sha512":"ff3c2b86b53c57a17bcdcaa7d584fd3ebca5d39630ecd503747c9731c87bd21ecd269996058d7b918a37a703f4ee8fd049b825c94d87c4f5ace837e60586f13c","ssdeep":"192:CmP0s45qoCzxULN9UvOoSkwOlMFUNFEMUPQDY8RubKQw1pM8ukL:b0N8oRLAvBEUMF6CMUPmlQKLLqkL","tlshash":"9002a074a9ce0841d07ca4ffab58147470fb44c80758694cdad7b66d68883cb1f5b99d","first_seen":"2026-06-18T01:36:50.457929Z","last_seen":"2026-07-17T09:15:42.305979Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:15:13.343Z","timestamp":1784279713343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERkOckCbwJG%2FjkZf9VCH9d1LIAlYUL2t54Jt1x6BGt7T6w5OTTbw9H7Zq2EIMpzkeibtqmivnEwsQRLwanfnB%2F4OCO8Yg7gUkEIoBHiguzifh%2BVL3FpUTWxDNoY7c1gjjUJxwLHyV7wM\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1c8241089390afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39537,"size_decoded":12060,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9030)","md5":"33562dd2e2496a136036ffa0c58eda96","sha1":"175d097b6c9d225e169908fa9ffc3c7af4820dce","sha256":"7e0a676f6175ce985adeb4037c1edb5c20a41e165bebf98ede00a4152db5dd6c","sha512":"5da131948c187b0b96e08b97a8ea0553ad647ae6f88f709fcd66ac2679678be8e326a159208a30e5d151ba5cd74db0e4e78e26539be2ee838be91e6cff874e76","ssdeep":"768:xzFyhm4Uj2x0JggqiXEPz2j8V8x/FDwV2M1ThdTcTrhBO6TCT:xZyw4UWhz2IUFE2Tr3k","tlshash":"eb03193bb081353b21b3b1d2f6a16f5fb0d48a10da131a60c6fae7b617c1ed6982175d","first_seen":"2026-07-16T11:15:29.39792Z","last_seen":"2026-07-17T09:15:42.307063Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/site/text1.jpg","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.766Z","timestamp":1784279713766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/site/text1.jpg HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=5,i\r\netag: \"6a40702b-23fc3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fs8Cd5OjXdRjZQ7m2yMTwMQRAAqF6j9SRnTZ1UiEN4%2BryuRAh2kWQc5TZZ1Kxp2MPK036gjY%2FLI%2FbvkHzkdZ5j%2FzwNDO0aMBbZ6CUYcAlPnMRWyhHKxznzGSwRoQzEM1wl9NMhIworIr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8241309500afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 147395\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147395,"size_decoded":148152,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 900x506, components 3","md5":"afd8d3739eea83e1d6a563718410e1f2","sha1":"126a3df1136a5eb8fc3a9f044aaf5f384d931efb","sha256":"703d72018521e71003ec3e950996f3eded6ae6b2612cf259f6499c8d0787a017","sha512":"2453fa90d794bfb411d18547e1a426af65bc297e458714ba7fa59738a8dcdee911184b96420a0ccee029ac506e2d31192348dd3de747569c952e4ae5905ec199","ssdeep":"3072:ZCDYAWBDKtHrEBjjfbyRMX6CRg2222HtH0G1OthyIuHq8Togbxu2:sWBDKtojjMMctH/Oth3uxoyxu2","tlshash":"f2e3f0635849dfc7845c839a7d4b8cec4f184b0ce0da3eed12654f8b7b806225eae55e","first_seen":"2026-07-16T11:15:29.400881Z","last_seen":"2026-07-17T09:15:42.309166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/site/app-mobile.jpg","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.767Z","timestamp":1784279713767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/site/app-mobile.jpg HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=5,i\r\netag: \"6a40702b-1b6ad\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVANS7qrsNk6QfQq0wjquHUnXcs8xmjJfwnrIqMYdCAX8eD4easith7A7CBRPhcgrUV60PKC1XsRNF%2BxEaO5jwmTYJLa9H3rhnaj94kJ%2BWMpHTKxc%2FW47Lst1VWNZ6h77Srke6QKvZJv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8241309510afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 112301\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112301,"size_decoded":113054,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 272x483, components 3","md5":"0ea4df5f6745efb2fe2211001e7eacc6","sha1":"b389ba3547a8a6ca0fb5bfb5c79c34bc4fbe1d38","sha256":"4dab2b446b505a878c12f00b3dd47769f997ed442a6d460caabc392fb39365fe","sha512":"196dffdece60fe9f26d073d7c46e4111e2dc97687a8ebde76d47ea2e691b2b3068e367f416c389caeb31b34f995160ff45271832dd0d19ad3a1364bb1ce9c49d","ssdeep":"3072:YmkYt/w8XIIx8aDlASolm9CIFw6yOw83Fencvl9r+F:hRzxzRym9CQpdL8Q9r+F","tlshash":"a8b312fe8a40d7b498ee00fa197a3815d663845eb7b7705164c108f5fade0cb5748eb2","first_seen":"2026-07-16T11:15:29.401733Z","last_seen":"2026-07-17T09:15:42.311469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/games/sweet-bonanza-1000.webp","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.809Z","timestamp":1784279713809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/games/sweet-bonanza-1000.webp HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=4,i\r\netag: \"6a40702b-1e78\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jx%2BBTQkOvvkgGoNHQJ9YbYFauqyX4VRaAcHZ%2B5JlyNJI9IaZ7jjU4EvU4Ch9HWZqXlDbAJJX%2BzlCxyTcdDBSt%2FFVk%2FBhyVYBk2pJsTK6gDWwKiqO6OVYK9oMnqJykD7k3M%2F3qJeBniek\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8241359560afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7800,"size_decoded":8545,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 142x190, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1c30b5bee55a98176c3afd9fa9098d0c","sha1":"e2c3197181d2878ed67e568c7aa9f5c7fd28b148","sha256":"e5302268537d07849609138933e0e884841d30a7ab08b6dd599ece4eadb4a81c","sha512":"daa6953d606575caf3b6d4f20cae0f3c9b4d31941e00d18cf1a37c10f35cd4cb48743902e0279543047a899de7d1841b798d7affc29032a1e23bee3d78d350d1","ssdeep":"192:ZRFptGtLAIm9238hQSuxTBzKUBu3akvn5Id/Eo2hjGgvX7z1Y4:zFycIO23OgNzKUcLoMfioLzC4","tlshash":"76f1bfb565b9cb9d200dfbb4792895cd0ca920f80a75c77ae01b86468f736bd005cf21","first_seen":"2026-06-18T01:36:50.462767Z","last_seen":"2026-07-17T09:15:42.314914Z","times_seen":10,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-win.com/assets/games/wanted-dead-or-a-wild.webp","fqdn":"rainbet-casino-win.com","domain":"rainbet-casino-win.com","tld":"com"},"ip":{"addr":"172.67.178.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-win.com/","date":"2026-07-17T09:15:13.811Z","timestamp":1784279713811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 22:22:16 GMT","end":"Tue, 22 Sep 2026 23:18:32 GMT"},"fingerprint":{"sha1":"A0:37:5A:5E:BF:60:24:15:66:54:3E:C0:70:85:0F:92:73:CB:38:BE","sha256":"44:EE:A9:DF:08:66:B0:70:B0:45:B4:5C:4B:39:B6:9A:3D:9C:93:1D:16:A4:9F:32:84:EE:7F:4A:F4:AF:85:63"}}},"request":{"raw":"GET /assets/games/wanted-dead-or-a-wild.webp HTTP/1.1\r\nHost: rainbet-casino-win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-win.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:15:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 00:51:55 GMT\r\npriority: u=4,i\r\netag: \"6a40702b-2796\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FpoOro0Vuylp%2FFtDE%2BL1AQIWH060BLqwgG%2FjFSjaN2xN%2Fw9QU9g8VfkjoSY4svbqdXjFiBdhOFeMPo6Jsblyx6JaE%2Fk4g0wClWiFQ7jmj9pnKMPM3y%2F47v4H3%2FC3jDZJmfpjYbR1PFHB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8241359570afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10134,"size_decoded":10895,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 142x190, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"84430911852f91db53369503a0fbee38","sha1":"c61287ff93995cff791fc04f61afffb29349914e","sha256":"a099c79f88ff0089e4fbd9a80f5b22af76bc87b6db375ff43538d94b3954f600","sha512":"f905f0030762d0d5ff5e1f5b4e94f9da0cc9ea4ab80e01ab88e77b6b37aa9bd1115e9fff0074c1a2ba55a051d998980ca2c73f805f9d0ba0b67ba82a1b642f11","ssdeep":"192:muHZh+iZBFAjrqjvACp38OfcWkcLcnVIrkDYR92KZGIPg84:m4h+iJA3g3nc3cLcVqT2OPIl","tlshash":"d422b09645c5c82b91a9330d5ee3833b77d662138a22f204a74960e361b36d0ef8e775","first_seen":"2026-06-18T01:36:50.440149Z","last_seen":"2026-07-17T09:15:42.315897Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-casino-win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}