{"report_id":"35f2b38d-c0e8-4994-a9bb-7d53d654fd91","version":0,"status":"done","tags":[],"date":"2026-08-15T19:20:37Z","url":{"schema":"http","addr":"rainbet-ita.com/","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"172.67.198.223","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-ita.com/","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"title":"Casinò crypto Rainbet: Originals, sport e conto in euro","dom":{"size":58332,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8909)","md5":"14a5865defc2566128390d427ddca1ef","sha1":"648fae8c768422fed1508f0ff9fc739634415c5f","sha256":"c455123db68b68b095e8c5311c64868d4ffc001d7abe1eff1950cbc04f6f2dd8","sha512":"9736a20a901f14ce66f64ea6fb936f1ee20e9d9120404c49c1b2b41b2040c2da478c5462bbd865f371a9e2f6c9001f284cde0bd187d92eea249759061660383f","ssdeep":"1536:cDOc+027PXjFHURDwwIFSg2cQKvL8fZEUhTBNPTIr83NXX/5lH7pKaZDIPjc/I4L:cinErcxtW","tlshash":"a843d936d04b612f217767dc97aef35ee1d0643cd922052df6ac821992eee8b783560c","dom_hash":"domhashc025a089a4743ce58234e43b7d2c094f","first_seen":"2026-08-15T18:22:54.484487Z","last_seen":"2026-08-15T19:20:38.550032Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-ita.com/","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"172.67.198.223","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T19:20:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-ita.com","ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-08-15T18:22:50.769099Z","last_seen":"2026-08-15T18:22:50.769099Z","alert_count":25,"request_count":25,"received_data":400631,"sent_data":13291,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-ita.com/","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"086bea13710904c6e50bfb0ca8cc2175","sha1":"4df133a011e0a81198ac6bee67099ee1869001e9","sha256":"d290bcd7ef2018fa9bab9683b0803cf83dbf32b5afb73764a9e5ba15cc0e76eb","sha512":"d323988c1eafec1a2d8ea0d0a6a35593f72a6c721695794c5064a67eed629335742d7f622b700a2390daa7f9ce3854a67b7947ffad2e8e1df91d5c743492ff6c","ssdeep":"","tlshash":"7ac08c77f60c383084eaa5ef822be3893112009a284140010628c9542a20af1402a9a5","size":146,"data":"","first_seen":"2026-08-15T18:22:54.536221Z","last_seen":"2026-08-15T19:20:38.569146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/live/live-rainbet-speed-baccarat.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.119Z","timestamp":1786821611119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/live/live-rainbet-speed-baccarat.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-2e66\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: CF90:162311:A3D8E:AFD20:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270032-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.417492,VS0,VE107\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2735c5575b946b33829cc33015387793e6a9e861\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t5xtSQsgSwgoVjh23%2FiQDwgsk79adv6VExnuaPG%2Bhm2cjMePJFXnJU52Xgq%2Fa55kxoqOwT9nhxN0KSvK62uKfIndFuxMhDzaq8Tm4FIWysN86lNksqEKKGQrIjFcQ19sA2A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d7ea0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11878,"size_decoded":12983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc6aa3dceb3f0340c178b0cd03c9afc7","sha1":"1e0ff7bb406f0e37c08cb562cb84472dc5535a49","sha256":"ccd5abf2a056d7efb372ccdc0f3f611475066a3ebdbfda816b6f4cfccb2357d9","sha512":"4eb4c290d8f9c9b2f1beea9d9896fff1dd129a2e54d2d800b41ceae954cb31c812760bb9ba3b4a4403c9dde08b5e465ceb63fd4a8f13790863442bc3988a6264","ssdeep":"192:8zV4kq4DUVxrkkNPn6I0z2OKGkTLhfTgu4WsQ7e35u2mr8ApxwZlnmHCHLYzlEb8:vZxlPn6I0GLhfTh4ryI5vIpxwjnr0O/4","tlshash":"3432d0e07089dfd0c5a629902045dedd50065e8ffae406f36b7c597d8a17c24bced6c6","first_seen":"2026-08-15T18:22:54.504905Z","last_seen":"2026-08-15T19:20:38.55155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/live/live-rainbet-speed-auto-roulette.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.121Z","timestamp":1786821611121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/live/live-rainbet-speed-auto-roulette.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-260e\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 952E:27F478:A613A:B20F6:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270029-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.415385,VS0,VE108\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 18313a236b06c0d284cd7affb8a57ad7461f2530\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yb1dSIpRe698gUt%2FMZPZK8bo3z7F2ReSF0sjkjn9TC8BhwwhFIKzqapIXT43LFOmKKd9j9wEkQm%2B4qgM4IYLqXD%2Bx8tneBajW3klMb6DdV4bTWuY5tdJPUvkyP0%2BwR5lEzs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d7ea2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9742\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9742,"size_decoded":10869,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3f6577ba83b5d41bfa8faf06289a90c","sha1":"e1723d03529620a0de175dbe5999109d1d9842c8","sha256":"e7b58c1569d1ce07ee4c008acdad0c2b701109e68ea94e41e0b42af641205334","sha512":"e9e396433d905f5331e4e92c704ac0c59e7195ee1e534a36823a0cfd518a3f2d67092236b3747af474115301c5e3e9fb647e5b146cfb79368dda95af1a0e6477","ssdeep":"192:NRAV5MDeODcWJ77VcgtXpt+hjHdJPEffBlEr7Ft9gy3h+SKk/UXpo2bkck9lxOR:w5qSWZEhAfJlEr5tTFKksXeOR","tlshash":"4a12b05649b23bf7f4c0c73fab773b8555ac9294cbc482b88836636c9d0a3314678396","first_seen":"2026-08-15T18:22:54.49187Z","last_seen":"2026-08-15T19:20:38.552802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/live/live-rainbet-prive-blackjack.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.126Z","timestamp":1786821611126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/live/live-rainbet-prive-blackjack.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-38cc\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: A838:131956:A4B83:B0B22:6A7FAD1C\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270040-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.416349,VS0,VE114\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4135dd16e6098c1f107e0c90504faa9705ea9570\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZwVg0sKkCqZ0icnQQRVlKk0ajfqiZ7068Yi8l8yEwlec2IpFQDgjDT2laBTJ%2BGyyXom0s3i%2FVij0rWxH0H46fSXqcJAOnqyF3189ZP9h4AIe5uyVAyldqRgZ29KN8NZlyk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d8ea6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14540\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":14540,"size_decoded":15664,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f0d1b442283780e82193a6569cd04c4","sha1":"b576e2b5b30a7fd003b6f80e98770ad9b439449f","sha256":"6d94f94245a000b1de77db055accd01f8adb18b72bac4ef15ca999a367f5571b","sha512":"693030b123e03427f5f62cdd5459312f6fe5411f25a075b6b3704f7600d7628172c3afb161f14f7907bc382f531fe8af935459447b224be66589a7f839ca2c78","ssdeep":"384:8PHGhfVgeTxGp8xQYpMAS+l7fbSJwEVabrdw:8Pmh6eTSWjl7fbSKjpw","tlshash":"f362d01072d722633a7a04ba21df55e51fbf61a1641e8801d29d990d33b0cb9255dbaf","first_seen":"2026-08-15T18:22:54.498129Z","last_seen":"2026-08-15T19:20:38.55379Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/favicon.svg","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.318Z","timestamp":1786821611318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 0840:2B0A26:9ED0A:AAC95:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\npriority: u=6,i=?0\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752286.566925,VS0,VE123\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 3b1b23adbb52931ba5975d2febeea85249ccc4ff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IV4%2FafQbdQKkfmTF%2BOcFRKm0%2FhDgvd4FE7j2Pw2psprV4f7WS3YNc4HmbZnER8KR2ZiQWdnjYVda%2Fb%2FjfKJmxyYoj52xdSheOjxwBxP8kCWC2oPPxjE76DNJkvRb9RpkAI0%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6a7f223e-b2\"\r\ncf-ray: a2ba8e1ebed9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":178,"size_decoded":1268,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"860a809755bd95a8fdc7f9f23839f12b","sha1":"877d646c83d77e893a36b5f931e106d1734db397","sha256":"59ca1e018aee851d4103dcfaa9dc65b428e41cd74ae6cca27694c9e4181da162","sha512":"63238967d9989354724cdc7644ed960f6161dda1fa6726c46f7f2e0656b2495c7e6f34b9a45b313e47252fdc24ed945b15b52783dd9b65ef81893c493ed42231","ssdeep":"","tlshash":"f7c080d571cdc50dc914c6527eb8380c911f70c1d585005bf6e43711664c5d7b855d5d","first_seen":"2026-08-15T18:22:54.506959Z","last_seen":"2026-08-15T19:20:38.554465Z","times_seen":2,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T19:20:10.655Z","timestamp":1786821610655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xzejukBbj9AVSXj7LQinVdy%2F0LuPhHGtGKOHJc1KFX%2BwHedKeIRshtPcHwN26kqUwnWTmCZmNyrpZEVgCCf4ZL0idisKomOCirQ3p%2B6SM78YQPvhjzPdZlIyeAprktOtf7A%3D\"}]}\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: zstd\r\nx-proxy-cache: MISS\r\nx-github-request-id: C6A2:0A0F:20276B:225C8B:6A80AE5C\r\nx-github-edge-region: swedencentral\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:10 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786821611.732306,VS0,VE108\r\nvary: Accept-Encoding\r\nx-fastly-request-id: cb517329ca89622e7af46b5dc68c5450e8e15567\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2ba8e1ace29a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58276,"size_decoded":15832,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8909)","md5":"944d93b7e5a742ec790f1e37675dbd29","sha1":"51c627ebc0bb64eaa80dfab7c8370961e025d305","sha256":"2f45537024dc0515d52c4acc46858873db4fc3a3bcd1ad3eb13b326a44e1b4a4","sha512":"b0be50eee23c8d7748a8c70d445a44fdd42fa33a2ffa4cd0a2533d26e7f9c07bdb2268b67304ea985af412a8c4b5621bd25548f7ecdd4bc19275e4878b28f92d","ssdeep":"1536:2MODg027PXjFHURDwwIFSg2cQKvL8fZEUhTBNPTIr83NXX/5COUNKaZDIPjc/I4Z:2AGErcxt0","tlshash":"9e43d936d04b612f217767dc97aef35ee1d0643cd922056df6ac821992eee8b783160c","first_seen":"2026-08-15T18:22:54.508742Z","last_seen":"2026-08-15T19:20:38.555215Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":9,"connect":17,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/banner-sportsbook.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.056Z","timestamp":1786821611056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/banner-sportsbook.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-25d62\"\r\nexpires: Sat, 15 Aug 2026 19:30:11 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6FD8:2D19DB:A1A61:ADA00:6A7FAD1C\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270066-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.363309,VS0,VE133\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b7c57f7ec76e6401bd74f02b9e1495f85ee8f4a6\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8a1N%2F7fZvqF2NH4iEqhPVsms6e1CNckcRjtyzQnqEGqHbRhNcf7S4GZyiLxbuDFZc82wXXAHywt2e2ZZLeTD62WIyhDerupFDzh3vVJ%2B07%2FUCd%2F1xzg3eG6qdYn8FHXwHM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d1e86a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 154978\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":154978,"size_decoded":156108,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9e97595ed5b3edbc86448afb34f1c0c","sha1":"7172a95396789dc6083797b8861381ba29ebbd35","sha256":"22da94b866b669b57dc7b133da6c8cecb8627b5e0695cae5c0f04d6443cba0ee","sha512":"026457e969f6ec137c6cea93bed39f43fd41d9a7a44083d1d7da5b4c1f7aff405f9860bb2e5471319d8993377bdea75ff016a258d7cd63a364145f6c54811e5b","ssdeep":"3072:3idI5hJJO195U0MbgtRzVRI3RaGpHoP83i3JV1XxEfKeviI+:44097vttk3RaKU8S3JzhyT+","tlshash":"54e312c21facab0d9a355b90aeeb6b50b14033995c6612d3602abfff47d44456bd3f08","first_seen":"2026-08-15T18:22:54.530939Z","last_seen":"2026-08-15T19:20:38.555863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/sports/ice-hockey.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.098Z","timestamp":1786821611098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/sports/ice-hockey.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-d84\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4F70:1C7200:A4CB9:B0C37:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270064-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.416827,VS0,VE106\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 90405693bc396e6f029ae1d29c9c8a254c8d12ca\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7TbGpjlNxBWK79P359mTCUxRvC6nF%2Bv%2B%2Fs9xmTC9%2B232epTyG4q%2FVp9PZ7Jo1fVZeidE6ssEwSZoUBnX0hdBxIyZ8oo2vXJ2gNjROsF0W925RWRUwI%2Bt%2FbqCrgBZUknPjY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d5e92a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3460,"size_decoded":4592,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c633b0eec9aea42737e955d12da40425","sha1":"9221a1b540f057723ec1a7070122633aa8ba8a47","sha256":"d175eb6317a01d22fd3d547c898e9ecc10c9234549d5ac4ea4c0744537ccbaae","sha512":"39085b9320b52e5070acd9e7420f99ee1753a39fd21ea529bdae2f2cad3836194fa47d99c27b923674d4698a909938a4edcd486b2ab8bcac7f508f1a4fbb80ca","ssdeep":"","tlshash":"96617dbb82787db8cd7e9ea4678093c329f11ea39f305e054361157269300fb2baf459","first_seen":"2026-08-15T18:22:54.532827Z","last_seen":"2026-08-15T19:20:38.556468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/sports/volleyball.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.104Z","timestamp":1786821611104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/sports/volleyball.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-e6c\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1D9C:960DF:9EE93:AAE19:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.413093,VS0,VE104\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4d348c0d0d80a3aa53ed06c5c070166660d3fd51\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=burcOnomdVWG%2BIvJRXkSedEGZ5DSRi6ou5NzVV1KzjQBR3tZdMzh36VZzO8LVTzOGwaWcoVpSi2wWaI8Qr8EOl%2FoH%2BgcNuiE8vYy6lZbYzFyLG0vtHS1Lgi2zubE4ZMTEFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d6e96a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3692\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3692,"size_decoded":4815,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"17d6e985f742aa235a926e5a77bb08ea","sha1":"e4a556e03ac2771377214aec277ce3b80a7aa75d","sha256":"77df5f8817dc7020deeaae32827b44694f8dff1a8ab57b20d6e655e391086b69","sha512":"5e7b83c3e3a040a171b869c0046e58d2a2588c199c1c2585b122815fa2b0549593e3a26e36e99c63275554468d77fe613638bb50be1b430ee39be47a680bda52","ssdeep":"","tlshash":"3d714d4d64dac0efd81e8a6b11abd13b5f0b9812e197b75942d3e1e37808429e5a4534","first_seen":"2026-08-15T18:22:54.510589Z","last_seen":"2026-08-15T19:20:38.557232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/sports/mma.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.109Z","timestamp":1786821611109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/sports/mma.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-836\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7B72:2D19DB:A1A61:ADA04:6A7FAD1B\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270033-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.419070,VS0,VE110\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d2e0ad0098e3e9a60559aa156d07cdaae8d367db\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7u1kTwcAQyD2Q1dxoZ7%2BJ2aRzS2VSRlBmFRZA5LqSmS1Bxaob4VP9DOulfv6FuD53baP0U0U28R419Y%2FIphPWrXs0wtPBVO7ZKJ9JyukpThU%2BPoaQBniFwcwVLe8Ox8nmI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d6e98a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2102\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2102,"size_decoded":3226,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c7d06740f24acd7b471e9454e511f3f2","sha1":"1ab4125afd5e7638d39cc9afd636a10cb868d753","sha256":"d18b86b04f0af2b75020a34d84871f8bdcee1c719598d368a782ea85ad698ec8","sha512":"3d884a7e7d186957ddae8be01c070a7abe631429bcea272404ddf4f0684b5161beb1dfc903d84d46a47cc18a5c74ead7ebcdc3202365a29c71d74d79c2c361b2","ssdeep":"","tlshash":"814109eb29e89a3b1bf459e07ef416a5e0830545620b88f9e958a7cf82287353844614","first_seen":"2026-08-15T18:22:54.512592Z","last_seen":"2026-08-15T19:20:38.558178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/sports/league-of-legends.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.113Z","timestamp":1786821611113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/sports/league-of-legends.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-ad0\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 44A6:2B0A26:9ED01:AAC8D:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270064-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.419290,VS0,VE108\r\nvary: Accept-Encoding\r\nx-fastly-request-id: c7035974050c5a40ce326855d8fa2dc4c988bb3d\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ERiclnmgvUAqkqaaGbbWQQXWIcpckbDrfwE362%2Bu5%2FD0QmuCSW2tsw6MSLXHbXzxa48vhTE0XMSIVglLw%2BXuQ9gHSY13XZs72f3I1YTOur44z4XuubD8CZUkITJJYCNcbQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d7e9aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2768,"size_decoded":3892,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6df07e76da8cef0a262964cfd6a4afc","sha1":"eb684fa25e848e9a6ef7ece9c58e8b14fdfda8e0","sha256":"dfb0bf04a2e6aca9789b0ad41f9e82490b3207a86f50e52185f0df9554338ec4","sha512":"960e4d1b9b2ce9f9174b7adfe03d60f119de45edc9017eeb6de3d9824540b8db36ef920a53ca9609f39e1f0f934efbbe18cd3fcd4190f914163f6ae171af86ec","ssdeep":"","tlshash":"72515b89bc9ca1ca646fd24023ce20115e3e8a53ad785b39c4882ea0d954e12f9772cf","first_seen":"2026-08-15T18:22:54.514303Z","last_seen":"2026-08-15T19:20:38.558792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/logos/n1bet-logo.svg","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.057Z","timestamp":1786821611057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/logos/n1bet-logo.svg HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a7f223e-600\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7B76:45B7:A33C1:AF327:6A7FAD1C\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270029-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.364503,VS0,VE112\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 039182326e12bde4fe3d80dda4c0c551b3bdba74\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vwiT4RFeKN6HmfZkzH7FUQxsKTTft%2BTq5QAhX%2FEELvZEvMgVt%2F00rW9E1wIWvTiMtFKLRil6Y7Ed4Rf%2B7cf1MoDv1spvuaxjXZpyJQPgqUneO%2BtWpJQfKHOTxZnPHCR7hI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d1e87a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1536,"size_decoded":1914,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66ef3a14365bc38e739ca1596a25f4b7","sha1":"8c4b6d29f9f82de760063172c9c08ec155bba42a","sha256":"3d4a4bb72d5b783688c5882da46611e7be955f2c4a32f7d92a7607e2cd6be87c","sha512":"bcb15b48a86b8bae3aeb91b56a98614f9b71818b0a6843a0ab4ed3782949d0a611609ef662d9aef36ebc23ff7d1cb761b8b83e09278e318ee6fee194bc53a956","ssdeep":"","tlshash":"de31659037eed2847b0b6b78db2b70f6aa2b14fdc695458dc4c02711246406ddf8cde4","first_seen":"2025-12-01T03:25:12.29203Z","last_seen":"2026-08-15T19:20:38.559366Z","times_seen":13,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/sports/tennis.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.093Z","timestamp":1786821611093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/sports/tennis.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-c0e\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: C324:23A36B:9D5CC:A9562:6A7FAD19\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270048-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.414001,VS0,VE107\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 8e07478efc139fd9c724ffc42c7873072a86abbd\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrU83ZT3WLbM%2BJMuIuIBuw0GjuMEmiVFBXTP7g5r08QwC%2BcU2EZYFORZKVY7o23SKGNfIFsE%2F7rzD9FDrwsF%2Bqssr8h4E0U3SZxOnzDrHYdhPEYe5Ux5Jes1DCURNcY8H7c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d5e90a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3086,"size_decoded":4212,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"478455164aee4e4d400209bec405357e","sha1":"e25678be5a1755bc723c9cb3de5a705b53ad655c","sha256":"9495bdaedf53edc5a8786fbed0424939d6978ceb0ba36a3d18596b890bec61b7","sha512":"8774a6a53166e3c9614312320c1cd0f586fbf07c36b67e2e8488f8154e10916dc1ba67f71eebb614bb34530c24faba83b829930b0f6b1a62e2b5ba92e1a6ad7d","ssdeep":"","tlshash":"80517d63a945aa12fe9f7a39777517159743a75e7f08439d60ae2c48c112fec1f0190c","first_seen":"2026-08-15T18:22:54.500656Z","last_seen":"2026-08-15T19:20:38.560037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/sports/counter-strike.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.111Z","timestamp":1786821611111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/sports/counter-strike.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-808\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: B09C:30B88E:A5EEC:B1E76:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270063-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.417765,VS0,VE113\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 89cda2e980666262c075f248b5604302cd1ab68c\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQCjW447cTvJrxpSxhJB7u913I3Cx2hSI0r3Ql4heccFRyPUk226bdYcC7K9khE6cPaIocrn1SeTL4SgZcllq6E0%2B%2BGlZgri36M7t6UIqTSncC7ZhLo%2BPaQYhbqpcj80VVw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d6e99a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2056\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2056,"size_decoded":3180,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31cb43575107d9fc06c8d4468db40a49","sha1":"5404088213554167b2bac99655a9aa187266c1ca","sha256":"014bf645f4a86742c8e427fae971d9c18ddeffdf08111208c94b6ec514205769","sha512":"da0d66f5eac15958743d49e3d55147b786ca41c34ee27f1830f6c4787cbfb40f56bc2353fcb28e8a106c3f3da191022f05453c4a9be4bcc5a7f559be312b15bf","ssdeep":"","tlshash":"1c414a8106882f33cae5f6dc82f008f830225040928839d6e2f4acebdca990dcf0b40f","first_seen":"2026-08-15T18:22:54.503097Z","last_seen":"2026-08-15T19:20:38.56067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/live/live-rainbet-blackjack.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.114Z","timestamp":1786821611114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/live/live-rainbet-blackjack.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-272a\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 751A:27F478:A613A:B20F7:6A7FAD18\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.417518,VS0,VE104\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2a771570bca60ec667d6f454816362071dc00684\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mY3xFBbsNbFzeGzrBJSZT%2BQbrFMFb%2FrviO96R%2B9lZj2%2BHO1BkyzE0S0UX7s9WZq5fLfXoyx3O5Yz926Fqxto0NRLCdlMaXNnn1EkLe2974z%2B1KeQZyY0FConQ8ff1rP5iiU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d7e9ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10026\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":10026,"size_decoded":11156,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63c43672c17081b522416115a05c76b3","sha1":"7a739729455b967c32d6d132f58a59321716c7f1","sha256":"9f45be1b9dee1f50faa8a437176af19696e935f83d90127f3ccc30c1f3c2019d","sha512":"1fe859af0681d5ff21779f2a0e295c19dab89be8e49496ee376ec964203034f8a858a2a5116b8d2bfb64d09501eb5967f6c5a33cc14111de2ced149bbac5b827","ssdeep":"192:JWQx58XgBtbri2MYOANMV2SFVvSAlRTxpOfWMEMz+A8+uiTAIiy4:Jz/bG7YOAqV2SHvJl3p9MEMzTjuotiB","tlshash":"5522aeb44bec631fe0fa6d83a4e6a52818dfb8941c55ef46da94f81a1d03e134d22cd7","first_seen":"2026-08-15T18:22:54.523187Z","last_seen":"2026-08-15T19:20:38.561249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/live/live-rainbet-speed-roulette.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.125Z","timestamp":1786821611125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/live/live-rainbet-speed-roulette.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-29cc\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6832:960DF:9EE93:AAE1A:6A7FAD1C\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.418058,VS0,VE108\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 551abf4bb55a1553a95f419ed53947540fa684b9\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FclCXApAgG70YRluH86%2FhBo5m1srKtCpiGbCG%2FL3VEcez9qAaEVe4UZ%2BsJgEmfYQELDYj77a%2BMlPFEA4ZHdjENWHz0yDDvK6MrXT00l%2BJU7QDS5gPbbowim9b0y%2FdoEjjE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d8ea5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10700\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10700,"size_decoded":11833,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78471cfa9ea198305cd0d207b320fa37","sha1":"d44fc16e39112820d242c7a03eef7b0e70b41ce0","sha256":"d3d84465f5b4377e0d1209bec7e9548176b49ec33120748ee87c899a882d13f3","sha512":"35b55f7ed093244e7db11958eb7bbbd145223bc693e09344ff40caec225f5e8aa4bb527c7296f0381d74e5faf681c6c8da4dea9e1c6825fc2daa49a95c9733b8","ssdeep":"192:EtgEk3MWGGw3C/6/sLSn0QctOiqSm4ekBS6JDlB3k89keMPRG+XuYWxHa5QALBH1:FGjC/6/mS0RtOiq6eeLtqXRG/7IX3L","tlshash":"4a22bf6fcade7e5e424ae52dc7e020100e87e22f078e904abb8690c4c73e9d36e145d2","first_seen":"2026-08-15T18:22:54.527755Z","last_seen":"2026-08-15T19:20:38.561956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/sports/soccer.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.088Z","timestamp":1786821611088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/sports/soccer.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-bcc\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 73F2:301A64:9F599:AB548:6A7FAD1C\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270055-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.406251,VS0,VE112\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4dc14ec88f08237fdcae026c0abf0f350b1e837e\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2h%2BCx%2Fi61nFZK4uPL2aFb2yr%2FlZMsa8DEJOurac0%2Bq63G6u4DmAUaJ8vxcr%2BmhQL2A1WuvSe4z9Mb2njfDDwtR0m5rg4xMqBY0U3x1jkGvhbW8T63%2FWkgPyu%2FthIce8uTXY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d4e8da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3020,"size_decoded":4152,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9cfa9b95329723eecc48c0256f9d6d5","sha1":"fd67ab3a5cf425567698c706874afc549203e439","sha256":"c8daea0e4754e2caa7540b113b090207efe80d935ce7cee2982174b0bbd7c2a0","sha512":"c289b188aa8a34062472277ef6930263c5fa229a49158c3ec88fc6756c53c20d44b39e115d0910047bbf643368274b883c18a230f7216c46f25c03cfffdeaf51","ssdeep":"","tlshash":"9d515d1355712689590df8e2f30a62a6eddda011868c2692c61ecf8940bfc962bbced5","first_seen":"2026-08-15T18:22:54.51919Z","last_seen":"2026-08-15T19:20:38.562683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/sports/basketball.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.091Z","timestamp":1786821611091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/sports/basketball.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-ea2\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: F7D6:23A36B:9D5CC:A9560:6A7FAD1B\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270049-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.408153,VS0,VE107\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 114082c496fe5c95ca2ae340a6caf388e2e31e08\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zW5naBQ%2BKDpf%2Bf6zlLZEnb3RMCOHPIZ%2BCFfj96cIWCl4888OsOjIHyohDviWJUfkFhS6Wd1I8p3WEjM6WlegYLzdAlc669lfsnftHftLJ3L73FxPpvlO4ZJPauBW%2FAOV%2FtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d4e8ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3746\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3746,"size_decoded":4874,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a45dc47d8b3d292e3b1da9a5dd521e63","sha1":"05e90196157780dce8d6ec638b6c7905263c4e71","sha256":"ee218d8966a75db805b305c7fa4d7765351b36cec15fa2e2cb56aa45afd9b861","sha512":"b925ede84756d30b6adf9bb0c9efac81ce181a5529d6904e957f73aeac2381655eb2ee171deb3f3bc64608c75f13b806136cd2cb783bc728069cc242f748dc67","ssdeep":"","tlshash":"b1715bbf1bfa3a172047844806d8a9b4dfa164e3c5c88d19eda88cd1d02044a67a3f85","first_seen":"2026-08-15T18:22:54.520479Z","last_seen":"2026-08-15T19:20:38.563379Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/sports/american-football.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.102Z","timestamp":1786821611102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/sports/american-football.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-c60\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: C890:45B7:A33C3:AF32C:6A7FAD1C\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270049-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.429586,VS0,VE104\r\nvary: Accept-Encoding\r\nx-fastly-request-id: fdce6502980ed0a3ef32c3a731104c0e1acb8d70\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ib1uDAO9U183VIay3fBw7XLa2r9u9i4VJ7JLfqhgtOBEoWF8if2KsZV%2BLhqWYHsi5vZYYHCRo%2F%2BXy%2BCBmNWOuRPmccsKaDDfmAJ4JECliHrd3WPqeo0iyStcOlKGMYrZHdM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d5e93a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3168,"size_decoded":4292,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9b74ca7f31d62f3cf6a5ee9f2efa273","sha1":"a363d165eabbe5e85d67c744245b5a95a270f0ef","sha256":"296bf503ee0884df78f9a526bd6b192e4057b5c39b702fb746f695b530ce603f","sha512":"0b75e347eabf04f0ce27223f3e7c762746fb82eb38d1e9d9952d97206ed65e51e715f5661f30b326b4f44be42b0576aea435223b21997ca90e5ff273e5e4fba8","ssdeep":"","tlshash":"0b516c385d30393fa044527340a53b72086148a4dc217cddf63ce69a1d78f74b90adb2","first_seen":"2026-08-15T18:22:54.521775Z","last_seen":"2026-08-15T19:20:38.563971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/sports/boxing.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.107Z","timestamp":1786821611107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/sports/boxing.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-aa0\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: AC3C:27F478:A613A:B20F8:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.419900,VS0,VE107\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b9ddd1905b629aff38484811c66577084a545a29\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfVxYLy5b%2FOgChvAauXEgXgeQ2nBDkUNtN1T6S4Fwi4M7klgbu9T6XH%2BwstJ3kWLS4Yv0PVZsZ%2FtONanTcV2kRwlbbBhdzE5DE8BmQsXU4lerWFM97493RXS7xsG5Fld75o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d6e97a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2720,"size_decoded":3844,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"edb01131bd951e9f1ca1687fd44d50ae","sha1":"74b26249f389f429a47187d92a4fdaf2ca72c348","sha256":"dabd18a7d1576effef682efb3ea43d46fe6d9cbebe6d61b49d33d538da149501","sha512":"a22158ee055222898f2f8bba4d52b855eb01f75361a139dafc059201836b8a0c32694fa3ce839e4b3c1ad40e18bdbf856e7f1f8a5ddd54f7b3d17a9cd13284fc","ssdeep":"","tlshash":"27515b19aa2fbcb84d2cecb05509229c6ce674a371e09e4d71c3b34619f86d6327cb75","first_seen":"2026-08-15T18:22:54.534431Z","last_seen":"2026-08-15T19:20:38.56458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/live/live-rainbet-baccarat.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.117Z","timestamp":1786821611117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/live/live-rainbet-baccarat.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-2f54\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4478:23A36B:9D5CC:A9561:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270049-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.413485,VS0,VE107\r\nvary: Accept-Encoding\r\nx-fastly-request-id: e7e945680213e4fb0c3415a31f687c0308db057e\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9i7NP%2BFol4Kx%2F90tt60mRTAs%2FdiGra5UAHW1mzHH8ItzxnllDbeGf2XBCx3VTPEHeu5%2BK2inwmewVnQ9RVSZ0Dk4go3lYubxqfQNurguCZjfACn6BUQfj6s%2BAL87%2F8vQbI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d7e9fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":12116,"size_decoded":13248,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93823176518ebb9dfb10478420a15d06","sha1":"ad9e7f166a02e4bffe39b9f2810e0bd85fac4970","sha256":"c88767492050ae18b9bbf66ad6c10585dac4580d4425641905fe1787ddcb7db6","sha512":"328b37c0e103371c2873a48b038bf93fd4f338719ac2d124a8b52764bffea7e31048c953712c270b6ad7d3579b0b344aa7db0ff647054774eb3d9bac4af0e74b","ssdeep":"192:z73UUEkjMgmphw7zRXScVPiqV4tvAF5xIhmpJnx0ENCOyQ9NrFpW7J:zBE41ahw7z8eiM4tvAfNJJCO7Rc7J","tlshash":"f742d1b1a689b43473a03e9fe73fb33a738d1121f0da550002ae3154569c53af993d96","first_seen":"2026-08-15T18:22:54.515896Z","last_seen":"2026-08-15T19:20:38.565338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/live/live-rainbet-speed-blackjack.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.120Z","timestamp":1786821611120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/live/live-rainbet-speed-blackjack.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-3034\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 8A56:2D80F2:A1A86:AD9F7:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270047-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.416779,VS0,VE107\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d49a825d2224de27cd93f0ead8b7f23154a747bb\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjFyIYj5TUwPnokxm56slwok4XPevI0udzdDh%2B0egskj3VSBj4Hur6laZpfkD%2FPL2%2Bie%2FrbXCE7rG5FMlslLYHxJxUNIZGsqhPB5Cwy1SGtawwaiftTeJCoARTBBbMcvvfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d7ea1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":12340,"size_decoded":13468,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"601fba16e9f507181b0b11b8a05b8fd2","sha1":"fad9d5620f0627be45b311da51a5fadb0a984284","sha256":"1f8a109ccfed69d70ccc943464bb05f2cea8da8d5c951ec50ac11f23fecb48e6","sha512":"49735b25499247da3d20871a78ba688045ff4508345b1ed89a6c2e411b3c31553b65808e5c887c92be1480f2f7adc5e3660d348817b2493e8146045bb90037d9","ssdeep":"192:6Fl0Ljvhj4p6g4A/0v7V5nrqONvxK/fbCpNNW0FL5eanBPFBrNAH4jrhTThR1drB:rlS/+nrFvx6DCPNtFLlnZFsHQZR1BkW","tlshash":"9442b0a6eac33a754cc569a5f292366478f0b7f409078360fb8b74d6e96201da36db01","first_seen":"2026-08-15T18:22:54.524629Z","last_seen":"2026-08-15T19:20:38.566014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/live/live-rainbet-auto-mega-roulette.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.122Z","timestamp":1786821611122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/live/live-rainbet-auto-mega-roulette.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-3a30\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 91D0:39292B:9F2FE:AB282:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.425810,VS0,VE108\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 5786aa30cefb317a0c6fb685ba9f57eafe9b86e9\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZk4Iqo2RmcIbwdhfI959Ousg3Ed5rKTG49B8qmiPfYJPN9dFkdOc%2F3iarCFJRg9om5tvfB2dJ0W87YaB6YZmdF5tXb5m32WAIya135zEA3PeSujU8aNzaFDIz8EcCQ8VVc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d8ea3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":14896,"size_decoded":16018,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ecbe8483d95e317cc75de653c435d574","sha1":"8871f64afd27d8f71861a1f5216f1fe90a2a6198","sha256":"25828b99b4857e880dbadc74d70c789575c5f2152c85520c889939115cb4c48b","sha512":"fd808133d40a0d42288d69d497ba568861a0a84657daa15b7d6cdf72725850f53e4e6113dcac7f003db02730844a959c475533edadcdff83f9e2f5cb78dacfe5","ssdeep":"384:XhJ+Ift/pkK5EdzoCbe5alDEUe/US9OTHGRYlztSYB:RJ/d2xVe5cSv9OTmqJB","tlshash":"f962c0f237c22ce22e2c2dc61517881bda2335583e342f191de6ab68f99e072b60d551","first_seen":"2026-08-15T18:22:54.526181Z","last_seen":"2026-08-15T19:20:38.566702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/live/live-rainbet-auto-roulette.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.123Z","timestamp":1786821611123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/live/live-rainbet-auto-roulette.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-371a\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 447E:1A4ED0:9B0C8:A7074:6A7FAD1B\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.417168,VS0,VE108\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 36f1e3a2ef3076795cf09aed6efb33d8ff1a3dce\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRafaqJqTIorvWPKaWurxD%2B%2FzX3V8gLUVQgD1Dp57duU%2BH%2BvNbnMdGoZS%2BHV76iBbpLmmoYkQJLGbnOfGiMzQwOxknAszHtqCZt5Hd8NYqTNLt7MVCApUMhokXtabjtAHOI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2ba8e1d8ea4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14106\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":14106,"size_decoded":15236,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7bfb1cc8ac54fc9b30a8bfdd5deb0d53","sha1":"6501e9de152e94c8b2f3ee8f1e8d7635f7b691b3","sha256":"c7496f67da8e00e67af65d925ff8a7ed0bea312abe55f61b53198a691ff9b6bf","sha512":"333b6acac2f7c9bf8f72e88ee7df6ce92085265c02e3bb288db3c8c33e10bb0c981e0559acac05d0b6c6c9cbbb58a313102de6b8df44b072da9ca89db6023dbe","ssdeep":"384:O4D9b3dKsORsVYPPpjFB9LOyk1JABiKuHRj5ige1:O4D9b3dGRNJjFBMydBiK6j0D","tlshash":"5d52c039c539c722c5e109ec74353e36e65dd39bfd77142998cb4c812412329adc6c8b","first_seen":"2026-08-15T18:22:54.494944Z","last_seen":"2026-08-15T19:20:38.567432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/rainbet-logo.svg","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.054Z","timestamp":1786821611054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/rainbet-logo.svg HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a7f223e-1e41\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: EDCA:23A36B:9D5C9:A955E:6A7FAD1C\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270069-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.364356,VS0,VE110\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4be0915c179856bd2837204a530785d30c71f2d9\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ap%2FArvv5BQPhLrmWCgQMMOlY91EEwD0JkqUykbgj%2FHMzUB1yEFW%2BIVkwH8P%2BWVI2rZXFtZ0k9xe9MFk1DsdGNGbKG7Wpv1XaZGujmXvyMKT7%2FEX2Wu78FFcq0CZ6xY20wTw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d1e85a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3506\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":7745,"size_decoded":4664,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dacc3645083c2954705fb9ee0b013fd4","sha1":"82d71c1b7394c721e4d7998c9426fb21b10b3b45","sha256":"e98b186b8f650ecb2fb23d230097dc2b1313bbfec6896917bb85c62b772c72e0","sha512":"671a431386dac983751056a6c246f29c77bfa30bf6c46335faa3813569aa3a07812de78bd7fb4c77ae83ded240b982b355298337a36c220c3389d842b89e89d6","ssdeep":"192:tGUbeXT/clnP/C0wIWwtgXpZUg6zOJD+3DLd+PrJyCZnmW:tcXLchUwt+wgjJD+3DLd+Pr4Cx","tlshash":"fbf1a5ce3bb09ef48d75c7d2ff532058791bc07b59848e20e1599b0d2a9081cdea5d8a","first_seen":"2026-07-14T06:13:23.537378Z","last_seen":"2026-08-16T05:47:04.203225Z","times_seen":12,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ita.com/assets-b/live/live-rainbet-roulette.webp","fqdn":"rainbet-ita.com","domain":"rainbet-ita.com","tld":"com"},"ip":{"addr":"104.21.84.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-ita.com/","date":"2026-08-15T19:20:11.115Z","timestamp":1786821611115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ita.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 13:18:01 GMT","end":"Thu, 12 Nov 2026 14:14:30 GMT"},"fingerprint":{"sha1":"A3:C3:94:A6:A7:27:C6:12:99:10:0E:B4:4B:DD:99:21:E0:74:7D:2D","sha256":"58:2B:21:38:DD:08:EF:46:54:A0:A1:47:3F:55:08:AD:14:5F:C0:07:20:3F:D6:C1:7E:86:DA:47:88:08:3D:AE"}}},"request":{"raw":"GET /assets-b/live/live-rainbet-roulette.webp HTTP/1.1\r\nHost: rainbet-ita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-ita.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 14 Aug 2026 14:12:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a7f223e-2590\"\r\nexpires: Sat, 15 Aug 2026 18:32:21 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: E568:45B7:A33C3:AF32A:6A7FAD1D\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 15 Aug 2026 19:20:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270041-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1786752285.417369,VS0,VE108\r\nvary: Accept-Encoding\r\nx-fastly-request-id: a517c3cd818970fc7eed7a67bb0ed85fd570b83c\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrEbi7onmED3MGcuADb2FAzh3S4R3ZUIidIZnSOO1A%2FfOtjPhnJXL9HJ%2FKKT%2B4vknMRjVEQjgbB5a8qpW70BL1YeczOW0ygLPz6haX3cNSiKAnXnOh7rySxxywd4vQDIrbs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2ba8e1d7e9da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9616\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9616,"size_decoded":10739,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e248061b91ae83038f7f3550aa36122e","sha1":"6e98e677a240702647d298545b38c05d47ea4812","sha256":"26d6c8c2533daa770d04f955eb77d932990e8cdbe34049482b2e5fdb980433a1","sha512":"810901e255fca8b414effab5dbcc692a9df04d002acba4235fad7714619a556ba5c9c612648566363365c5035cd6882dd8160bbe343b4f535680258805c0be97","ssdeep":"192:Tf83xMKmnBkCAXmJLa7G0MGivIAawDOob6nTpeMF+IE50VEaEN3o2Ao6C:TfqmMWJm7SvzDO3nP+fGVr03otG","tlshash":"4b12b0c8e60a0cee548a0dcc3c461de10ecd258cce5991b176542fbe370d97cd560e2b","first_seen":"2026-08-15T18:22:54.488698Z","last_seen":"2026-08-15T19:20:38.568583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-ita.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}