{"report_id":"3f0d1eeb-437c-4058-b382-7c6c1d295640","version":0,"status":"done","tags":[],"date":"2026-08-13T18:17:48Z","url":{"schema":"http","addr":"rainbet-ufficiale.it/","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":0,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"final":{"url":{"schema":"https","addr":"rainbet-ufficiale.it/","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"title":"Rainbet Casinò Online - Bonus Benvenuto Esclusivo","dom":{"size":27072,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1755)","md5":"e804a42728502e7b49c2160050956eb8","sha1":"c99129a21bd88d249f577b350c73d087a98d6f39","sha256":"c01050850af6f72d00d5cd4682107826a3b937b31cb4a39da9a26fa98717eccf","sha512":"8e521596b71a8bc7258689d0614145dc81f6aee8d4d6be94daa70aab530b023676dc36dce06bb57055f139ffb06ba62ba16c97546cc0eeeb6c70eecde2571563","ssdeep":"384:fk1Fk1Tk10k10k1nk1Ltk1vk18YZCaO4BQcMmb+52FaRMen039/k14yO1lk14k1D:fk6xLq0tEQBQcF5FoMB19xxfwSxrS","tlshash":"bec2e73680e6503310836ac6e7157b8def98d857d6171306b8be9fda5fcace0d81950b","dom_hash":"domhashca2de3cd9b2fa26f300d87d76366ded9","first_seen":"2026-08-13T18:17:49.438013Z","last_seen":"2026-08-13T18:17:49.438013Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-ufficiale.it/","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":0,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T18:17:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-ufficiale.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-ufficiale.it","ip":{"addr":"190.123.44.95","port":443,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"domain_registered":"2026-06-01","domain_rank":0,"first_seen":"2026-08-13T18:03:52.294792Z","last_seen":"2026-08-13T18:03:52.294792Z","alert_count":7,"request_count":7,"received_data":208302,"sent_data":3481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"gunicorn","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-ufficiale.it/","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":443,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"introduction_type":"scriptElement","is_inline":true,"md5":"ccacc0e8b0457404efd699c0ded7fb71","sha1":"c5a0998f4b7ede261e9a7a0d15819d8466cfe928","sha256":"6c615af19c6f77f019eba0e6982108aa6e632d880469d06b8fac15bbb1df87ef","sha512":"ccc0ad22438649c3e56cfd74ca97ac7ecdd483f29b5dfb92acdcb6e63d8f69f230d3abed1edf7cb77a13c203b940efc5f78c3463e0019407a96f7bcd19905dee","ssdeep":"","tlshash":"3ef0e23e6a7c8a34007b72a7e2a557cd7979308fb90a244a02384a4a1d86ce121a0ce3","size":468,"data":"","first_seen":"2026-08-13T18:03:55.619149Z","last_seen":"2026-08-13T18:17:49.444913Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ufficiale.it/script/o9ubwht5i.js?t=1786644900","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":443,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ad1ac1ab53e0d00cb37a90c31edcb95","sha1":"e4fd70b043747d4de649fb59823b3940ac35ff24","sha256":"f4053e25e3c75bd361b9f6d122b7438ce00f4211fd4aa665147c877200f33c43","sha512":"a49a8398131df07290f04cab826c14c4ec8b91500b19afcea2b172539418c1442b606df580b00c77845eec79508aac3d1b8691790034d36cd79004a57cba4336","ssdeep":"192:l3Yc0NLuQ5EhtMhs9MBeEsFVacMlJNh73ihVjzVJnZuX1Af05rTbPHo5FvlXna5T:l3YPl75G9nEZlxSXjzS1B7P2Za5KAnSA","tlshash":"2f32299df00e62fb06de2363524f8799753b31c99916dc04ac18d1c03af8d96d9bbc68","size":11511,"data":"","first_seen":"2026-08-13T18:03:55.616951Z","last_seen":"2026-08-13T18:17:49.44171Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-ufficiale.it/images/android-chrome-192x192.png","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":443,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-ufficiale.it/","date":"2026-08-13T18:17:22.167Z","timestamp":1786645042167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ufficiale.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:17:12 GMT","end":"Wed, 11 Nov 2026 09:17:11 GMT"},"fingerprint":{"sha1":"03:82:99:0A:22:CB:98:BB:F1:D5:4B:E0:4F:B8:22:37:8A:D0:A4:0B","sha256":"58:E7:AA:99:76:B4:BE:0B:67:45:68:1F:9C:EA:6D:3D:20:3A:1B:49:0C:BF:33:B4:57:2B:72:B1:48:7D:A7:61"}}},"request":{"raw":"GET /images/android-chrome-192x192.png HTTP/1.1\r\nHost: rainbet-ufficiale.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-ufficiale.it/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-disposition: inline; filename=\"android-chrome-192x192_NR41vP0.png\"\r\nstrict-transport-security: max-age=63072000\r\nvia: 1.1 Caddy\r\nserver: gunicorn\r\ncontent-length: 96638\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ndate: Thu, 13 Aug 2026 18:17:22 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"gunicorn","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":96638,"size_decoded":97020,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"338cece1831f2b261d216ce9d8a9d377","sha1":"55258f3d4f0f5a9be02945a6fff5e3221f34f078","sha256":"bc253bfd07dc3ee996b29580a1952c8b389c66a4006ab0baaf9e35765be7022c","sha512":"1f1a3f136c06ae3728774a09c921f35b64884c0fbea169628e208e2b4063fde43e819288b0e6587ab0c5a4ebce710df22037de1e937174199245dd07d8294f23","ssdeep":"1536:KZYISb5AEy4JonUdgxZgCDh1HkD0zuG69l+9imuc1v8JTD9nrtE8JdMm0AD:vxxTSUdKSC+FXPmuuv8Jf1BtOf4","tlshash":"899313d45e6d88775863921e70f8f0a909b239be9053bdcd1013988f55532eb7dd0bb2","first_seen":"2026-08-13T18:03:55.613526Z","last_seen":"2026-08-13T18:17:49.43928Z","times_seen":2,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-ufficiale.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ufficiale.it/images/favicon-32x32.png","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":443,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-ufficiale.it/","date":"2026-08-13T18:17:22.169Z","timestamp":1786645042169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ufficiale.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:17:12 GMT","end":"Wed, 11 Nov 2026 09:17:11 GMT"},"fingerprint":{"sha1":"03:82:99:0A:22:CB:98:BB:F1:D5:4B:E0:4F:B8:22:37:8A:D0:A4:0B","sha256":"58:E7:AA:99:76:B4:BE:0B:67:45:68:1F:9C:EA:6D:3D:20:3A:1B:49:0C:BF:33:B4:57:2B:72:B1:48:7D:A7:61"}}},"request":{"raw":"GET /images/favicon-32x32.png HTTP/1.1\r\nHost: rainbet-ufficiale.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-ufficiale.it/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: same-origin\r\nserver: gunicorn\r\ndate: Thu, 13 Aug 2026 18:17:22 GMT\r\ncontent-length: 3013\r\nvia: 1.1 Caddy\r\ncross-origin-opener-policy: same-origin\r\ncontent-disposition: inline; filename=\"favicon-32x32_SXj3F8D.png\"\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=63072000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"gunicorn","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3013,"size_decoded":3385,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"211f0c41020046fcb2a6f73135f20709","sha1":"2ee22c0e60f9a4850a9c66147822869177acd1b2","sha256":"b6186011123dd78993381bc60333fc5593a333453c86272a3fc79442794e1ba3","sha512":"2595b0b6d4d5f73f420cca0ce0d8272c33fbf9877b74a1bf3140886e315299781cf8ffe71d472f7cdb0604c6b584274ad733ee163f5eb278518348c4615b7c37","ssdeep":"","tlshash":"ff516d9ff320ecbffec04e07d232e295bc4d1876a629448e38241914c4e4259d879353","first_seen":"2026-08-13T18:03:55.614594Z","last_seen":"2026-08-13T18:17:49.440005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-ufficiale.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ufficiale.it/","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":443,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T18:17:19.829Z","timestamp":1786645039829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ufficiale.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:17:12 GMT","end":"Wed, 11 Nov 2026 09:17:11 GMT"},"fingerprint":{"sha1":"03:82:99:0A:22:CB:98:BB:F1:D5:4B:E0:4F:B8:22:37:8A:D0:A4:0B","sha256":"58:E7:AA:99:76:B4:BE:0B:67:45:68:1F:9C:EA:6D:3D:20:3A:1B:49:0C:BF:33:B4:57:2B:72:B1:48:7D:A7:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-ufficiale.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html\r\ncross-origin-opener-policy: same-origin\r\ndate: Thu, 13 Aug 2026 18:17:20 GMT\r\nreferrer-policy: same-origin\r\nserver: gunicorn\r\nstrict-transport-security: max-age=63072000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 20310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"gunicorn","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":20310,"size_decoded":20668,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1740)","md5":"c4f2d7c00ac8d7cbe3d7a0babf771b33","sha1":"6b7b8f7a27adcddcd5df98185ad324ca1ff909fe","sha256":"0ab054f416d2898ff5ddcb241ba7c9a2e0a20c87301915228a3bb402b226e87b","sha512":"747fd015aef8eb9b6bbb0efcf3ad84225012866981a4aac1ece4149990037116665beccd1535d284bf032bd66d68de7f73247727109aa950c090a81ecd1d6481","ssdeep":"384:MjYwCaO4BQcMmb+52FaRMen039oDO1P5+Sg:MnBQcF5FoMBakdg","tlshash":"f792c73140e02133118362c5a751bf4efbd9e8a7e66b0219b57f4bc65fc6ca0dd2a54b","first_seen":"2026-08-13T18:17:49.440767Z","last_seen":"2026-08-13T18:17:49.440767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1213,"timings":{"blocked":0,"dns":4,"connect":165,"send":0,"wait":532,"receive":172,"ssl":340},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-ufficiale.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ufficiale.it/script/o9ubwht5i.js?t=1786644900","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":443,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-ufficiale.it/","date":"2026-08-13T18:17:21.041Z","timestamp":1786645041041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ufficiale.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:17:12 GMT","end":"Wed, 11 Nov 2026 09:17:11 GMT"},"fingerprint":{"sha1":"03:82:99:0A:22:CB:98:BB:F1:D5:4B:E0:4F:B8:22:37:8A:D0:A4:0B","sha256":"58:E7:AA:99:76:B4:BE:0B:67:45:68:1F:9C:EA:6D:3D:20:3A:1B:49:0C:BF:33:B4:57:2B:72:B1:48:7D:A7:61"}}},"request":{"raw":"GET /script/o9ubwht5i.js?t=1786644900 HTTP/1.1\r\nHost: rainbet-ufficiale.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-ufficiale.it/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-store, no-cache, must-revalidate\r\ncontent-type: application/javascript\r\ncross-origin-opener-policy: same-origin\r\ndate: Thu, 13 Aug 2026 18:17:21 GMT\r\nreferrer-policy: same-origin\r\nserver: gunicorn\r\nstrict-transport-security: max-age=63072000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: noindex, nofollow, noarchive\r\ncontent-length: 11511\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"gunicorn","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":11511,"size_decoded":11987,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4873)","md5":"0ad1ac1ab53e0d00cb37a90c31edcb95","sha1":"e4fd70b043747d4de649fb59823b3940ac35ff24","sha256":"f4053e25e3c75bd361b9f6d122b7438ce00f4211fd4aa665147c877200f33c43","sha512":"a49a8398131df07290f04cab826c14c4ec8b91500b19afcea2b172539418c1442b606df580b00c77845eec79508aac3d1b8691790034d36cd79004a57cba4336","ssdeep":"192:l3Yc0NLuQ5EhtMhs9MBeEsFVacMlJNh73ihVjzVJnZuX1Af05rTbPHo5FvlXna5T:l3YPl75G9nEZlxSXjzS1B7P2Za5KAnSA","tlshash":"2f32299df00e62fb06de2363524f8799753b31c99916dc04ac18d1c03af8d96d9bbc68","first_seen":"2026-08-13T18:03:55.616951Z","last_seen":"2026-08-13T18:17:49.44171Z","times_seen":2,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-ufficiale.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ufficiale.it/global.css?v=1781270551","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":443,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-ufficiale.it/","date":"2026-08-13T18:17:21.042Z","timestamp":1786645041042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ufficiale.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:17:12 GMT","end":"Wed, 11 Nov 2026 09:17:11 GMT"},"fingerprint":{"sha1":"03:82:99:0A:22:CB:98:BB:F1:D5:4B:E0:4F:B8:22:37:8A:D0:A4:0B","sha256":"58:E7:AA:99:76:B4:BE:0B:67:45:68:1F:9C:EA:6D:3D:20:3A:1B:49:0C:BF:33:B4:57:2B:72:B1:48:7D:A7:61"}}},"request":{"raw":"GET /global.css?v=1781270551 HTTP/1.1\r\nHost: rainbet-ufficiale.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-ufficiale.it/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/css\r\ncross-origin-opener-policy: same-origin\r\ndate: Thu, 13 Aug 2026 18:17:21 GMT\r\nreferrer-policy: same-origin\r\nserver: gunicorn\r\nstrict-transport-security: max-age=63072000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 24898\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"gunicorn","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":24898,"size_decoded":25255,"mime_type":"text/css","magic":"ASCII text, with very long lines (383)","md5":"b59ef8e95753a1f7c0c43fe34abb2c58","sha1":"869d2c80bb8d8f0e76b509f2c9c834b08954cad9","sha256":"b0df214ffc5a50eb5fb3b3da2f05e94e22e400865bc3c8d5f84f7e58b45054aa","sha512":"20cb71d018aeafd4a2544efe9a9800ef6df85e1b695a1faa82bd1a2312016989865713205ce201eb4796e5bd7b64393a2da9edaf27291c3cb85934d6b5e1bc01","ssdeep":"192:mhWpy+JehlGZozJBhctyXJOkvl0evQkVE+0ljeGS9pBOvvwNAGwFaFu2nN3l0hxY:mJEwNI8FV4hxjG1n4/eCvuhz+S","tlshash":"9ab2c40b6b553215b29759a8fa97ffa3a30c0843d24667fefda0440dc48c0619bb7b9d","first_seen":"2026-08-13T18:03:55.617965Z","last_seen":"2026-08-13T18:17:49.442258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-ufficiale.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ufficiale.it/images/media-2x.jpg","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":443,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-ufficiale.it/","date":"2026-08-13T18:17:21.049Z","timestamp":1786645041049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ufficiale.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:17:12 GMT","end":"Wed, 11 Nov 2026 09:17:11 GMT"},"fingerprint":{"sha1":"03:82:99:0A:22:CB:98:BB:F1:D5:4B:E0:4F:B8:22:37:8A:D0:A4:0B","sha256":"58:E7:AA:99:76:B4:BE:0B:67:45:68:1F:9C:EA:6D:3D:20:3A:1B:49:0C:BF:33:B4:57:2B:72:B1:48:7D:A7:61"}}},"request":{"raw":"GET /images/media-2x.jpg HTTP/1.1\r\nHost: rainbet-ufficiale.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-ufficiale.it/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-disposition: inline; filename=\"media-2x_AG9c0Dp.jpg\"\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ndate: Thu, 13 Aug 2026 18:17:21 GMT\r\nreferrer-policy: same-origin\r\nserver: gunicorn\r\nstrict-transport-security: max-age=63072000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 48338\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"gunicorn","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48338,"size_decoded":48759,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 823x459, components 3","md5":"9d2d362786b6c132b00202f1ed3bb4e4","sha1":"43874ea5550e39e67f59cefd9dc4d6d73ea3b896","sha256":"2521db7aaa26c04dd7771261b2248ffe509a875bdfe98ee228c97a7b8915f69a","sha512":"bb0e86d4a1d18f46bfb7b8fc650d9b89d0e878511f31f7d06805e238b4df01a47d521f920dcd0440003aaea41083d2f0989699c7781578e16e7ce0cf314da17e","ssdeep":"768:V6v/wfxP0fGM/pCphNNoj1xIMftuIH3aSD9k6B56xc5gV3nuuwlnzNmkQ/ZkUjO1:V6XwfxPRM/ChNNWqmMIBD26aV3n/wlnT","tlshash":"68230147983c085733f38d2e417b2e930c557ba86a608e6e9b37da707144dc9c53bab4","first_seen":"2026-08-13T18:03:55.611019Z","last_seen":"2026-08-13T18:17:49.443121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-ufficiale.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-ufficiale.it/qoc41alj2ckt0?t=1786645041\u0026p=%2F\u0026ref=direct","fqdn":"rainbet-ufficiale.it","domain":"rainbet-ufficiale.it","tld":"it"},"ip":{"addr":"190.123.44.95","port":443,"asn":52284,"as":"Panamaserver.com","country":"Panama","country_code":"PA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-ufficiale.it/","date":"2026-08-13T18:17:21.804Z","timestamp":1786645041804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-ufficiale.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:17:12 GMT","end":"Wed, 11 Nov 2026 09:17:11 GMT"},"fingerprint":{"sha1":"03:82:99:0A:22:CB:98:BB:F1:D5:4B:E0:4F:B8:22:37:8A:D0:A4:0B","sha256":"58:E7:AA:99:76:B4:BE:0B:67:45:68:1F:9C:EA:6D:3D:20:3A:1B:49:0C:BF:33:B4:57:2B:72:B1:48:7D:A7:61"}}},"request":{"raw":"GET /qoc41alj2ckt0?t=1786645041\u0026p=%2F\u0026ref=direct HTTP/1.1\r\nHost: rainbet-ufficiale.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-ufficiale.it/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 18:17:21 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-opener-policy: same-origin\r\nserver: gunicorn\r\ncontent-type: application/json\r\nx-frame-options: DENY\r\ncontent-length: 738\r\nset-cookie: _vid=d3151225-a644-48e4-bc1f-62f2167e46b6; expires=Sat, 12 Sep 2026 18:17:21 GMT; HttpOnly; Max-Age=2592000; Path=/; SameSite=Lax; Secure\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"gunicorn","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":738,"size_decoded":1228,"mime_type":"application/json","magic":"JSON text data","md5":"0945cc2496820a43da16a55001155cae","sha1":"6e46439cdcd018006fcb88e4f1c0a55aa973f5dc","sha256":"6528cb851e30b47f4f26afbaba5860a7a0e63dabd521eeed48102fcbc8a6dec3","sha512":"d4f26656cc0e221bd9efbd3cdc4f6bbf34d25a30e84cef325f03f42f8006f2d66c1cf328b50041d0a90e07d1f809aa0ac369e68b8bb7024a6ba11df11b1c8e64","ssdeep":"","tlshash":"d801653a9552d0ea4f84e1e3b4fd1094ca3a4b530da541da146c1172ab5f33a7741791","first_seen":"2026-08-13T18:17:49.44364Z","last_seen":"2026-08-13T18:17:49.44364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-ufficiale.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}